ting program 2: shmget$private(0x0, 0x1000, 0x10, &(0x7f0000ff1000/0x1000)=nil) 03:36:15 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x5e) 03:36:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='=\x00\x00\x00\x00&\x00'], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) (async) sendfile(r5, r6, 0x0, 0x11f06) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:15 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000008c0)={0x20, 0x0, 0x2e, "c8aed2c4c4b0688d32a2842b5ce642f5c0d2aff8f872fc416ef3edfc431a2e3c32df6f445fa539ce1b24679117af"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x71}}) syz_usb_ep_read(0xffffffffffffffff, 0x79, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, &(0x7f0000000a80)={0x0, 0x5, 0x4f, {0x4f, 0x7, "dbe5678e3418b742af39d3f8ca182cc5b77b7ba23491470c593c45821b0e051438e2b7fafe9f548bfd7f097609727b99da713cb32170b798b6b1245442f29f5fc08372e4cd9537a0f57dfe63ca"}}, 0x0, &(0x7f0000000bc0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x0, 0x1e00, 0x2, [0x0, 0x0, 0x0]}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x3f, 0x19, "c94421ec", "54026de2"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa0, 0x60, 0x0, 0x0, 0x9, 0x20, 0x1}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000cc0)={0x0, 0x1, 0x12, "ebd06f5b4a75fba616a50bba4daa19fe0c3d"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x9}, 0x0, &(0x7f0000000e80)={0x40, 0xb, 0x2, '&z'}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x8}, 0x0, &(0x7f0000000f40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "7eea"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x30}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x9}, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x79, &(0x7f0000001180)="a09f23ea4531f764828e385947eeaec00932331c015d59a629bd6f83aed2f89bee9889809a98b5864f80b7ab7073a52595bd87ac562ce1fc639beca82a1f1a99a8be604903bb9e65ab1238bf8c43c20e53b4fe516bec0acf770dfe6595de1efc93fb1d4724bd533e16152669307a4e89912cfaba03bd80f98c") r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) [ 2612.366377][ T5336] binder: 5335:5336 unknown command 61 [ 2612.366399][ T5336] binder: 5335:5336 ioctl c0306201 20000080 returned -22 03:36:15 executing program 2: getresgid(&(0x7f00000017c0), &(0x7f0000001800), &(0x7f0000001840)) 03:36:15 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$unix(r0, 0x0, 0x0) 03:36:15 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 03:36:15 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) [ 2612.391037][ T5336] binder: 5335:5336 ioctl c0306201 20001480 returned -14 03:36:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='=\x00\x00\x00\x00&\x00'], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r5, r6, 0x0, 0x11f06) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='=\x00\x00\x00\x00&\x00'], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r3) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) (async) sendfile(r5, r6, 0x0, 0x11f06) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x1}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) [ 2612.393532][ T28] audit: type=1800 audit(2000000175.139:2370): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1165 res=0 errno=0 03:36:15 executing program 2: r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000140)=[{}], 0x1, 0x0) 03:36:15 executing program 4: semget$private(0x0, 0x1, 0x748) 03:36:15 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, 0x0, 0x0) 03:36:15 executing program 0: r0 = semget(0x2, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semget(0x2, 0x4, 0x682) [ 2612.397490][ T28] audit: type=1804 audit(2000000175.149:2371): pid=5336 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3421/file0" dev="sda1" ino=1165 res=1 errno=0 03:36:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) dup2(r3, r5) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:15 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000380)=@gcm_128={{}, "a67c80e4895a8243", "4bf60cb7e56e44d385cb927c249ad18f", "02d1ca10", "e7316c8adfa27739"}, 0x28) [ 2612.542281][ T5351] binder: 5345:5351 unknown command 61 [ 2612.542302][ T5351] binder: 5345:5351 ioctl c0306201 20000080 returned -22 [ 2612.547101][ T5351] binder: 5345:5351 ioctl c0306201 20001480 returned -14 [ 2612.548571][ T28] audit: type=1800 audit(2000000175.299:2372): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1184 res=0 errno=0 [ 2612.550505][ T28] audit: type=1804 audit(2000000175.299:2373): pid=5351 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3422/file0" dev="sda1" ino=1184 res=1 errno=0 [ 2612.617820][ T28] audit: type=1804 audit(2000000175.369:2374): pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3422/file0" dev="sda1" ino=1184 res=1 errno=0 [ 2612.621363][ T5355] binder: BINDER_SET_CONTEXT_MGR already set [ 2612.621373][ T5355] binder: 5345:5355 ioctl 40046207 0 returned -16 [ 2612.772031][ T5378] binder: 5376:5378 ioctl c0306201 20001480 returned -14 [ 2612.819447][T18213] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2612.847361][ T5379] binder: transaction release 7683 bad object at offset 0, size 0 [ 2612.847384][ T5379] binder: transaction release 7683 bad object at offset 0, size 0 [ 2612.847400][ T5379] binder: transaction release 7683 bad object at offset 0, size 0 [ 2613.094085][T18213] usb 6-1: Using ep0 maxpacket: 16 [ 2613.226763][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2613.226800][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 2613.226828][T18213] usb 6-1: config 1 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2613.226856][T18213] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2613.226884][T18213] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2613.226913][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2613.226940][T18213] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2613.624130][T18213] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2613.624167][T18213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2613.624192][T18213] usb 6-1: SerialNumber: syz [ 2613.651874][ T5349] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2613.875692][T18213] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2614.094270][T18213] gspca_spca508: reg_read err -71 [ 2614.114195][T18213] gspca_spca508: reg_read err -71 [ 2614.134320][T18213] gspca_spca508: reg_read err -71 [ 2614.154184][T18213] gspca_spca508: reg_read err -71 [ 2614.174269][T18213] gspca_spca508: reg_read err -71 [ 2614.194159][T18213] gspca_spca508: reg write: error -71 [ 2614.194215][T18213] spca508: probe of 6-1:1.0 failed with error -71 [ 2614.197487][T18213] usb 6-1: USB disconnect, device number 18 03:36:17 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000008c0)={0x20, 0x0, 0x2e, "c8aed2c4c4b0688d32a2842b5ce642f5c0d2aff8f872fc416ef3edfc431a2e3c32df6f445fa539ce1b24679117af"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x71}}) syz_usb_ep_read(0xffffffffffffffff, 0x79, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, &(0x7f0000000a80)={0x0, 0x5, 0x4f, {0x4f, 0x7, "dbe5678e3418b742af39d3f8ca182cc5b77b7ba23491470c593c45821b0e051438e2b7fafe9f548bfd7f097609727b99da713cb32170b798b6b1245442f29f5fc08372e4cd9537a0f57dfe63ca"}}, 0x0, &(0x7f0000000bc0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x0, 0x1e00, 0x2, [0x0, 0x0, 0x0]}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x3f, 0x19, "c94421ec", "54026de2"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa0, 0x60, 0x0, 0x0, 0x9, 0x20, 0x1}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000cc0)={0x0, 0x1, 0x12, "ebd06f5b4a75fba616a50bba4daa19fe0c3d"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x9}, 0x0, &(0x7f0000000e80)={0x40, 0xb, 0x2, '&z'}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x8}, 0x0, &(0x7f0000000f40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "7eea"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x30}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x9}, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x79, &(0x7f0000001180)="a09f23ea4531f764828e385947eeaec00932331c015d59a629bd6f83aed2f89bee9889809a98b5864f80b7ab7073a52595bd87ac562ce1fc639beca82a1f1a99a8be604903bb9e65ab1238bf8c43c20e53b4fe516bec0acf770dfe6595de1efc93fb1d4724bd533e16152669307a4e89912cfaba03bd80f98c") syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:17 executing program 0: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000a80), 0x2, 0x0) 03:36:17 executing program 3: munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) 03:36:17 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) 03:36:17 executing program 4: msgget$private(0x0, 0x784) 03:36:17 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) dup2(r3, r5) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:17 executing program 4: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x44141, 0x0) 03:36:17 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 03:36:17 executing program 2: syz_emit_ethernet(0x4f, &(0x7f0000000040)={@local, @random="d822fdfdaa0b", @val, {@ipv6}}, 0x0) 03:36:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname(r0, 0x0, &(0x7f0000000040)) [ 2614.624352][ T5386] binder: 5383:5386 ioctl c0306201 20001480 returned -14 [ 2614.626134][ T5389] binder_alloc: 5383: binder_alloc_buf, no vma [ 2614.656465][ T5389] binder: transaction release 7689 bad object at offset 0, size 0 03:36:17 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) dup2(r3, r5) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2614.656487][ T5389] binder: transaction release 7689 bad object at offset 0, size 0 [ 2614.656503][ T5389] binder: transaction release 7689 bad object at offset 0, size 0 03:36:17 executing program 0: r0 = msgget(0x0, 0x0) msgctl$IPC_SET(r0, 0x2, 0x0) [ 2614.766507][ T5399] binder: 5396:5399 ioctl c0306201 20001480 returned -14 [ 2614.769469][ T5399] binder: transaction release 7695 bad object at offset 0, size 0 [ 2614.769487][ T5399] binder: transaction release 7695 bad object at offset 0, size 0 [ 2614.769502][ T5399] binder: transaction release 7695 bad object at offset 0, size 0 03:36:17 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x80000, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:17 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000008c0)={0x20, 0x0, 0x2e, "c8aed2c4c4b0688d32a2842b5ce642f5c0d2aff8f872fc416ef3edfc431a2e3c32df6f445fa539ce1b24679117af"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x71}}) syz_usb_ep_read(0xffffffffffffffff, 0x79, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, &(0x7f0000000a80)={0x0, 0x5, 0x4f, {0x4f, 0x7, "dbe5678e3418b742af39d3f8ca182cc5b77b7ba23491470c593c45821b0e051438e2b7fafe9f548bfd7f097609727b99da713cb32170b798b6b1245442f29f5fc08372e4cd9537a0f57dfe63ca"}}, 0x0, &(0x7f0000000bc0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x0, 0x1e00, 0x2, [0x0, 0x0, 0x0]}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x3f, 0x19, "c94421ec", "54026de2"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa0, 0x60, 0x0, 0x0, 0x9, 0x20, 0x1}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000cc0)={0x0, 0x1, 0x12, "ebd06f5b4a75fba616a50bba4daa19fe0c3d"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x9}, 0x0, &(0x7f0000000e80)={0x40, 0xb, 0x2, '&z'}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x8}, 0x0, &(0x7f0000000f40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "7eea"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x30}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x9}, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x79, &(0x7f0000001180)="a09f23ea4531f764828e385947eeaec00932331c015d59a629bd6f83aed2f89bee9889809a98b5864f80b7ab7073a52595bd87ac562ce1fc639beca82a1f1a99a8be604903bb9e65ab1238bf8c43c20e53b4fe516bec0acf770dfe6595de1efc93fb1d4724bd533e16152669307a4e89912cfaba03bd80f98c") syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:17 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @empty, @val, {@ipv4}}, 0x0) 03:36:17 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000580)}, 0x0) 03:36:17 executing program 2: pipe2(&(0x7f0000001080)={0xffffffffffffffff}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) 03:36:17 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) flock(r0, 0x0) 03:36:18 executing program 4: pipe2(&(0x7f0000000400)={0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000440)="9a", 0x1}], 0x1) 03:36:18 executing program 2: r0 = msgget(0x0, 0x0) msgctl$IPC_SET(r0, 0x5, 0x0) 03:36:18 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0) 03:36:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) [ 2615.239169][ T5413] binder: 5407:5413 ioctl c0306201 20001480 returned -14 03:36:18 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local, @empty, @val, {@ipv4}}, 0x0) [ 2615.292967][ T5420] binder: transaction release 7701 bad object at offset 0, size 0 [ 2615.292991][ T5420] binder: transaction release 7701 bad object at offset 0, size 0 03:36:18 executing program 0: chdir(&(0x7f0000000240)='./file0\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) [ 2615.293010][ T5420] binder: transaction release 7701 bad object at offset 0, size 0 03:36:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x80000, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x80000, 0x2) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) 03:36:18 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fchown(r0, 0x0, 0xffffffffffffffff) 03:36:18 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) 03:36:18 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) poll(&(0x7f0000000180)=[{r0, 0x46}], 0x1, 0x0) 03:36:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000100)) 03:36:18 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000008c0)={0x20, 0x0, 0x2e, "c8aed2c4c4b0688d32a2842b5ce642f5c0d2aff8f872fc416ef3edfc431a2e3c32df6f445fa539ce1b24679117af"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x71}}) syz_usb_ep_read(0xffffffffffffffff, 0x79, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, &(0x7f0000000a80)={0x0, 0x5, 0x4f, {0x4f, 0x7, "dbe5678e3418b742af39d3f8ca182cc5b77b7ba23491470c593c45821b0e051438e2b7fafe9f548bfd7f097609727b99da713cb32170b798b6b1245442f29f5fc08372e4cd9537a0f57dfe63ca"}}, 0x0, &(0x7f0000000bc0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x0, 0x1e00, 0x2, [0x0, 0x0, 0x0]}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x3f, 0x19, "c94421ec", "54026de2"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa0, 0x60, 0x0, 0x0, 0x9, 0x20, 0x1}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000cc0)={0x0, 0x1, 0x12, "ebd06f5b4a75fba616a50bba4daa19fe0c3d"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x9}, 0x0, &(0x7f0000000e80)={0x40, 0xb, 0x2, '&z'}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x8}, 0x0, &(0x7f0000000f40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "7eea"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x30}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x9}, 0x0}) syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x79, &(0x7f0000001180)="a09f23ea4531f764828e385947eeaec00932331c015d59a629bd6f83aed2f89bee9889809a98b5864f80b7ab7073a52595bd87ac562ce1fc639beca82a1f1a99a8be604903bb9e65ab1238bf8c43c20e53b4fe516bec0acf770dfe6595de1efc93fb1d4724bd533e16152669307a4e89912cfaba03bd80f98c") syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000400)=""/255, 0xff}, 0x3) 03:36:18 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ftruncate(r0, 0x0) 03:36:18 executing program 0: socket$inet6(0x18, 0x3, 0xfa) 03:36:18 executing program 3: syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @empty, @val, {@ipv4}}, 0x0) 03:36:18 executing program 2: open$dir(&(0x7f0000000000)='\x00', 0x0, 0x0) 03:36:18 executing program 4: shmget(0x2, 0x3000, 0x21c, &(0x7f0000ffb000/0x3000)=nil) [ 2616.157367][ T5443] binder: 5442:5443 ioctl c0306201 20001480 returned -14 [ 2616.212062][ T5452] binder: transaction release 7707 bad object at offset 0, size 0 [ 2616.212083][ T5452] binder: transaction release 7707 bad object at offset 0, size 0 [ 2616.212099][ T5452] binder: transaction release 7707 bad object at offset 0, size 0 03:36:19 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x80000, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) openat$incfs(r3, &(0x7f0000000040)='.log\x00', 0x80000, 0x2) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) 03:36:19 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r0, 0x0, &(0x7f0000000000)) 03:36:19 executing program 2: msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x6c, 0x0) clock_gettime(0x2, &(0x7f0000000080)) 03:36:19 executing program 0: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2000, 0x0) 03:36:19 executing program 4: lchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 2616.212911][ T5453] binder: BINDER_SET_CONTEXT_MGR already set [ 2616.212921][ T5453] binder: 5442:5453 ioctl 40046207 0 returned -16 [ 2616.412282][ T5473] binder: 5472:5473 ioctl c0306201 20001480 returned -14 [ 2616.464384][ T5476] binder: transaction release 7713 bad object at offset 0, size 0 [ 2616.464405][ T5476] binder: transaction release 7713 bad object at offset 0, size 0 [ 2616.464421][ T5476] binder: transaction release 7713 bad object at offset 0, size 0 [ 2616.470277][ T5476] binder_alloc_mmap_handler: 55 callbacks suppressed [ 2616.470294][ T5476] binder_alloc: binder_alloc_mmap_handler: 5472 20ffc000-20ffd000 already mapped failed -16 03:36:19 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000008c0)={0x20, 0x0, 0x2e, "c8aed2c4c4b0688d32a2842b5ce642f5c0d2aff8f872fc416ef3edfc431a2e3c32df6f445fa539ce1b24679117af"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x71}}) syz_usb_ep_read(0xffffffffffffffff, 0x79, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000c80)={0x2c, &(0x7f0000000a80)={0x0, 0x5, 0x4f, {0x4f, 0x7, "dbe5678e3418b742af39d3f8ca182cc5b77b7ba23491470c593c45821b0e051438e2b7fafe9f548bfd7f097609727b99da713cb32170b798b6b1245442f29f5fc08372e4cd9537a0f57dfe63ca"}}, 0x0, &(0x7f0000000bc0)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x20, 0x3, 0x0, 0x1e00, 0x2, [0x0, 0x0, 0x0]}]}}, &(0x7f0000000c00)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x0, 0x3f, 0x19, "c94421ec", "54026de2"}}, &(0x7f0000000c40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xa0, 0x60, 0x0, 0x0, 0x9, 0x20, 0x1}}}, &(0x7f00000010c0)={0x84, &(0x7f0000000cc0)={0x0, 0x1, 0x12, "ebd06f5b4a75fba616a50bba4daa19fe0c3d"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0x40}, 0x0, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, &(0x7f0000000e00)={0x40, 0x7, 0x2, 0x9}, 0x0, &(0x7f0000000e80)={0x40, 0xb, 0x2, '&z'}, &(0x7f0000000ec0)={0x40, 0xf, 0x2, 0x8}, 0x0, &(0x7f0000000f40)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f80)={0x40, 0x19, 0x2, "7eea"}, &(0x7f0000000fc0)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001000)={0x40, 0x1c, 0x1, 0x30}, &(0x7f0000001040)={0x40, 0x1e, 0x1, 0x9}, 0x0}) r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:19 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)}, 0x801) 03:36:19 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) fcntl$getown(r0, 0x5) 03:36:19 executing program 2: r0 = socket$unix(0x1, 0x5, 0x0) readv(r0, &(0x7f0000001100)=[{0x0}], 0x1) 03:36:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 03:36:19 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05630442006b0000"], 0x47, 0x0, 0x0}) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000840)=""/113, 0x71}], 0x1, 0x4, 0x2) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x94, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x3, 0x1, 0x12}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/199, 0xc7, 0x0, 0x33}, @ptr={0x70742a85, 0x10000, &(0x7f00000014c0)=""/4096, 0x1000, 0x1, 0x2a}}, &(0x7f0000000300)={0x0, 0x20, 0x48}}, 0x40}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/155, 0x9b, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x100, 0x2}}, &(0x7f0000000500)={0x0, 0x28, 0x40}}}, @exit_looper], 0x4f, 0x0, &(0x7f00000007c0)="c75acaa35dccb6c8ae8be354314d3948170183be13b7e4ef6601d341f30fdfdcab811be5bb6b060e116212646ae61b8082e33507e369c6f9e800a02826c36d13629949f69a39dfc16b2e1a0cc934e8"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:19 executing program 2: r0 = msgget(0x0, 0x0) msgrcv(r0, 0x0, 0x65, 0x2, 0x0) msgctl$IPC_SET(r0, 0x1, 0x0) 03:36:19 executing program 3: syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @empty, @val, {@ipv4}}, 0x0) 03:36:19 executing program 0: msgget(0x0, 0xc6) 03:36:19 executing program 4: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f00000000c0)) [ 2616.629795][ T5493] binder: 5492:5493 unknown command 1107583749 [ 2616.629816][ T5493] binder: 5492:5493 ioctl c0306201 20001480 returned -22 03:36:19 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05630442006b0000"], 0x47, 0x0, 0x0}) (async) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000840)=""/113, 0x71}], 0x1, 0x4, 0x2) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x94, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x3, 0x1, 0x12}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/199, 0xc7, 0x0, 0x33}, @ptr={0x70742a85, 0x10000, &(0x7f00000014c0)=""/4096, 0x1000, 0x1, 0x2a}}, &(0x7f0000000300)={0x0, 0x20, 0x48}}, 0x40}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/155, 0x9b, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x100, 0x2}}, &(0x7f0000000500)={0x0, 0x28, 0x40}}}, @exit_looper], 0x4f, 0x0, &(0x7f00000007c0)="c75acaa35dccb6c8ae8be354314d3948170183be13b7e4ef6601d341f30fdfdcab811be5bb6b060e116212646ae61b8082e33507e369c6f9e800a02826c36d13629949f69a39dfc16b2e1a0cc934e8"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:19 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmsg(r0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}, {0xc0, 0x0, 0x0, "b69097f714db697d7003582e774225b915778616d0c6f78066f37173defa027d5da88ec7a8a7bf90f0ed037d5351484b9472e994899ffdcde518b8bc51c29c5fb1cdc7e7795878b0a56520d05c25969a298557cce4afa37c1c10f62821acfac94448a25adc4d8e77fa7c0d3b0a4794621a143bc153663696d9146244e3fbdda5c9dbdec12370ba9db926a93eccc88aaab3ebdd9d0c261ef654f10abe561932f647d266632306b36f8e"}, {0x18, 0x0, 0x0, ']'}], 0xe8}, 0x40b) [ 2616.772705][ T5509] binder: 5501:5509 unknown command 1107583749 [ 2616.772727][ T5509] binder: 5501:5509 ioctl c0306201 20001480 returned -22 [ 2616.984038][T18213] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2617.224045][T18213] usb 6-1: Using ep0 maxpacket: 16 [ 2617.344206][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2617.344238][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 2617.344264][T18213] usb 6-1: config 1 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2617.344311][T18213] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2617.344383][T18213] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2617.344413][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2617.344440][T18213] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2617.704280][T18213] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2617.704339][T18213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2617.704364][T18213] usb 6-1: SerialNumber: syz [ 2617.724824][ T5498] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2617.965971][T18213] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2618.404116][T18213] gspca_spca508: reg_read err -71 [ 2618.424113][T18213] gspca_spca508: reg_read err -71 [ 2618.444168][T18213] gspca_spca508: reg_read err -71 [ 2618.464189][T18213] gspca_spca508: reg_read err -71 [ 2618.484215][T18213] gspca_spca508: reg write: error -71 [ 2618.484265][T18213] spca508: probe of 6-1:1.0 failed with error -71 [ 2618.489195][T18213] usb 6-1: USB disconnect, device number 19 03:36:21 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000008c0)={0x20, 0x0, 0x2e, "c8aed2c4c4b0688d32a2842b5ce642f5c0d2aff8f872fc416ef3edfc431a2e3c32df6f445fa539ce1b24679117af"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x71}}) syz_usb_ep_read(0xffffffffffffffff, 0x79, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:21 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 03:36:21 executing program 2: r0 = msgget(0x0, 0x0) msgsnd(r0, &(0x7f0000000140)={0x1}, 0x8, 0x0) 03:36:21 executing program 4: syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @empty, @val, {@ipv4}}, 0x0) 03:36:21 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05630442006b0000"], 0x47, 0x0, 0x0}) (async) preadv(r3, &(0x7f0000000600)=[{&(0x7f0000000840)=""/113, 0x71}], 0x1, 0x4, 0x2) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000540)={0x94, 0x0, &(0x7f0000000700)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x3, 0x1, 0x12}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/199, 0xc7, 0x0, 0x33}, @ptr={0x70742a85, 0x10000, &(0x7f00000014c0)=""/4096, 0x1000, 0x1, 0x2a}}, &(0x7f0000000300)={0x0, 0x20, 0x48}}, 0x40}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/155, 0x9b, 0x0, 0x2}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x100, 0x2}}, &(0x7f0000000500)={0x0, 0x28, 0x40}}}, @exit_looper], 0x4f, 0x0, &(0x7f00000007c0)="c75acaa35dccb6c8ae8be354314d3948170183be13b7e4ef6601d341f30fdfdcab811be5bb6b060e116212646ae61b8082e33507e369c6f9e800a02826c36d13629949f69a39dfc16b2e1a0cc934e8"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:21 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) fcntl$lock(r0, 0x0, 0x0) 03:36:21 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) shutdown(r0, 0x0) 03:36:21 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) shutdown(r0, 0x1) 03:36:21 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 03:36:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 2618.960717][ T5524] binder: 5518:5524 unknown command 1107583749 [ 2618.960739][ T5524] binder: 5518:5524 ioctl c0306201 20001480 returned -22 03:36:21 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:21 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x84100, 0x0) [ 2619.123594][ T5540] binder: 5539:5540 ioctl c0306201 20001480 returned -14 [ 2619.185944][ T5543] binder: transaction release 7730 bad object at offset 0, size 0 [ 2619.185966][ T5543] binder: transaction release 7730 bad object at offset 0, size 0 [ 2619.185982][ T5543] binder: transaction release 7730 bad object at offset 0, size 0 [ 2619.284045][T25453] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2619.554128][T25453] usb 6-1: Using ep0 maxpacket: 16 [ 2619.704664][T25453] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2619.704686][T25453] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 2619.704701][T25453] usb 6-1: config 1 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2619.704716][T25453] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2619.704731][T25453] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2619.704746][T25453] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2619.704761][T25453] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2620.114227][T25453] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2620.114264][T25453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2620.114290][T25453] usb 6-1: SerialNumber: syz [ 2620.144734][ T5530] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2620.366484][T25453] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2620.794179][T25453] gspca_spca508: reg_read err -71 [ 2620.814484][T25453] gspca_spca508: reg_read err -71 [ 2620.834184][T25453] gspca_spca508: reg_read err -71 [ 2620.864134][T25453] gspca_spca508: reg_read err -71 [ 2620.894299][T25453] gspca_spca508: reg write: error -71 [ 2620.894353][T25453] spca508: probe of 6-1:1.0 failed with error -71 [ 2620.906529][T25453] usb 6-1: USB disconnect, device number 20 03:36:24 executing program 5: syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x1c, &(0x7f00000008c0)={0x20, 0x0, 0x2e, "c8aed2c4c4b0688d32a2842b5ce642f5c0d2aff8f872fc416ef3edfc431a2e3c32df6f445fa539ce1b24679117af"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x71}}) r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:24 executing program 3: sched_setscheduler(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000000d67) 03:36:24 executing program 0: sched_rr_get_interval(0x0, &(0x7f0000000180)) clock_getres(0x2, &(0x7f00000001c0)) 03:36:24 executing program 2: keyctl$search(0xa, 0x0, &(0x7f00000002c0)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, 0x0) 03:36:24 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/pci_bus', 0x0, 0x0) write$P9_RSYMLINK(r0, 0x0, 0x0) 03:36:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async, rerun: 64) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:24 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8942, &(0x7f0000000a80)={'wpan0\x00'}) 03:36:24 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000840)={0x20, 0x0, 0x4, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 03:36:24 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x28480, 0x0) 03:36:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2621.348283][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.348294][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 03:36:24 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x270080, 0x0) [ 2621.348379][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.348385][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 03:36:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), 0xffffffffffffffff) [ 2621.348466][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.348474][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.348557][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.348564][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.348650][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.348657][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359064][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359074][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359161][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359168][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359255][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359262][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359347][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359353][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359441][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359448][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359543][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359550][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359638][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359645][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359733][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359739][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359828][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359835][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.359935][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.359942][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.360204][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.360303][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.360399][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.360493][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.360591][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.360688][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.360783][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.360877][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.360988][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.361085][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.361234][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.361242][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.361332][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.361340][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.361429][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.361436][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.361525][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.361532][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.361624][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.361631][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.361724][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.361731][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.361829][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.361836][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.361942][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.361950][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.362041][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.362049][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.362138][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.362146][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.362236][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.362392][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.362501][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.362601][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.362705][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.362803][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.362908][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.363006][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.363094][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.363178][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.363266][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.363351][ T5554] binder: 5546:5554 ioctl c0306201 20001480 returned -14 [ 2621.367033][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.368729][ T5553] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.368739][ T5553] binder: 5546:5553 ioctl 4018620d 20000000 returned -16 [ 2621.504710][ T5569] binder: BINDER_SET_CONTEXT_MGR already set [ 2621.504722][ T5569] binder: 5567:5569 ioctl 4018620d 20000000 returned -16 [ 2621.504974][ T5569] binder: 5567:5569 ioctl c0306201 20001480 returned -14 [ 2621.655094][T18213] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2621.900009][T18213] usb 6-1: Using ep0 maxpacket: 16 [ 2622.014325][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2622.014358][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 2622.014386][T18213] usb 6-1: config 1 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2622.014412][T18213] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2622.014440][T18213] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2622.014467][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2622.014492][T18213] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2622.375498][T18213] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2622.375521][T18213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2622.375536][T18213] usb 6-1: SerialNumber: syz [ 2622.401659][ T5560] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2622.635852][T18213] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2623.074133][T18213] gspca_spca508: reg_read err -71 [ 2623.094344][T18213] gspca_spca508: reg_read err -71 [ 2623.114090][T18213] gspca_spca508: reg_read err -71 [ 2623.134550][T18213] gspca_spca508: reg_read err -71 [ 2623.154063][T18213] gspca_spca508: reg write: error -71 [ 2623.154102][T18213] spca508: probe of 6-1:1.0 failed with error -71 [ 2623.156834][T18213] usb 6-1: USB disconnect, device number 21 03:36:26 executing program 5: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0xf6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x22d, 0x0) 03:36:26 executing program 4: socket$inet(0x2, 0x5, 0xcef6) 03:36:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) 03:36:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x2}) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440000000002bc217263b867e2d2d5473cde030120740f2059150331948e6339fddd08c6b544fb72eb060a4ca769b0094086b4ffe65bf5b6d15b8305c77501e0f3ae9ccc869e13d3d596da14ba0d898b0bd9fe928ed5a31ce83d805bc6c993223489a9b69824556c507040e808258c13163bede3fb629e9222af91aa976e706a26accbcf86a5d70ad"], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r6, 0x0, r7}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000280)={r6, 0x1, r3, 0x89, 0x80000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:26 executing program 3: stat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$msdos(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x1001808, &(0x7f0000000ac0)) 03:36:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000000d67) [ 2623.608523][ T5584] binder: BINDER_SET_CONTEXT_MGR already set [ 2623.608536][ T5584] binder: 5578:5584 ioctl 4018620d 20000040 returned -16 [ 2623.612298][ T5584] binder: 5578:5584 ioctl c0306201 20001480 returned -14 03:36:26 executing program 3: keyctl$get_persistent(0xe, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000061626364c240d95ce35dd9ad1d65666768696a6b6c6d6e6f707172737475767778797a30313233343536"], 0x29, 0xfffffffffffffff9) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 03:36:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) [ 2623.665784][ T5589] binder: transaction release 7742 bad object at offset 0, size 0 [ 2623.665805][ T5589] binder: transaction release 7742 bad object at offset 0, size 0 [ 2623.665821][ T5589] binder: transaction release 7742 bad object at offset 0, size 0 [ 2623.904093][T18213] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2624.144162][T18213] usb 6-1: Using ep0 maxpacket: 16 [ 2624.264519][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2624.265419][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 03:36:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000000d67) 03:36:27 executing program 3: keyctl$get_persistent(0xe, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000061626364c240d95ce35dd9ad1d65666768696a6b6c6d6e6f707172737475767778797a30313233343536"], 0x29, 0xfffffffffffffff9) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 03:36:27 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x2}) r3 = dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440000000002bc217263b867e2d2d5473cde030120740f2059150331948e6339fddd08c6b544fb72eb060a4ca769b0094086b4ffe65bf5b6d15b8305c77501e0f3ae9ccc869e13d3d596da14ba0d898b0bd9fe928ed5a31ce83d805bc6c993223489a9b69824556c507040e808258c13163bede3fb629e9222af91aa976e706a26accbcf86a5d70ad"], 0x47, 0x0, 0x0}) (async, rerun: 64) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0}) (async, rerun: 64) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r6, 0x0, r7}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r6}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000280)={r6, 0x1, r3, 0x89, 0x80000}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2624.265475][T18213] usb 6-1: config 1 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2624.265528][T18213] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2624.265581][T18213] usb 6-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2624.265635][T18213] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2624.265717][T18213] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2624.644329][T18213] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2624.644366][T18213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.644392][T18213] usb 6-1: SerialNumber: syz [ 2624.664721][ T5588] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2624.686996][ T5605] binder: BINDER_SET_CONTEXT_MGR already set [ 2624.687008][ T5605] binder: 5604:5605 ioctl 4018620d 20000040 returned -16 [ 2624.703132][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.703235][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.703328][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.703422][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.703515][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.703615][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.703711][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.703803][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.726300][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.727655][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.748541][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2624.751106][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.041437][T18213] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2625.228388][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.288914][ T5609] binder_alloc: binder_alloc_mmap_handler: 5604 20ffc000-20ffd000 already mapped failed -16 [ 2625.400929][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.450312][ T5609] binder_alloc: binder_alloc_mmap_handler: 5604 20ffc000-20ffd000 already mapped failed -16 [ 2625.462570][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.474273][T18213] gspca_spca508: reg_read err -71 [ 2625.507333][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.507467][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.507579][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.507684][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.508186][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.508296][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.508438][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.508543][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.508645][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.508751][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.508853][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.508951][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.509051][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.509158][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.509260][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.509364][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.509464][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.509561][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.509664][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.509767][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 03:36:28 executing program 5: r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:28 executing program 3: keyctl$get_persistent(0xe, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000061626364c240d95ce35dd9ad1d65666768696a6b6c6d6e6f707172737475767778797a30313233343536"], 0x29, 0xfffffffffffffff9) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 03:36:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000000d67) 03:36:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) 03:36:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x2}) (rerun: 64) r3 = dup2(r2, r0) (async, rerun: 64) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05630440000000002bc217263b867e2d2d5473cde030120740f2059150331948e6339fddd08c6b544fb72eb060a4ca769b0094086b4ffe65bf5b6d15b8305c77501e0f3ae9ccc869e13d3d596da14ba0d898b0bd9fe928ed5a31ce83d805bc6c993223489a9b69824556c507040e808258c13163bede3fb629e9222af91aa976e706a26accbcf86a5d70ad"], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000480)={0x0}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r6, 0x0, r7}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000100)={r6}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000280)={r6, 0x1, r3, 0x89, 0x80000}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) [ 2625.509871][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.509974][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 03:36:28 executing program 3: keyctl$get_persistent(0xe, 0x0, 0x0) add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000000061626364c240d95ce35dd9ad1d65666768696a6b6c6d6e6f707172737475767778797a30313233343536"], 0x29, 0xfffffffffffffff9) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) [ 2625.510075][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.510185][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.510284][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.510386][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.510495][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.510599][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.510701][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 03:36:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) 03:36:29 executing program 5: r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) 03:36:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) [ 2625.510802][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.510895][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.510996][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.511094][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 03:36:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000000d67) 03:36:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r2, r3, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @release={0x40046306, 0x2}], 0xb4, 0x0, &(0x7f0000000180)="825925b84b6ceb45dac7b87ef7ff1f1da7d59db0a6f62ea9f227484fcf537bd94fbb69303a37b9ce88b5380655f804cc2d7e5f331afbb6bbd993812d90e541cef097db30ef65c8afe6be1bee68819b500fbbe47ca7e14913e4276a3d55818fb6a533009507ff327481d12b8e3268a8b6b84b5ffb759ca9bdb0013238fde749e326c681b5a4f8420304d3830ae8777fb7c4826dfcb30332d30c8109d534209d2649f57c5274185d881122923577b01999ff1168d9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup2(r4, r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2625.511199][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.511296][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.511392][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.511493][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.511595][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 03:36:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) [ 2625.511694][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.511797][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.511896][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.511995][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.512098][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.512205][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.512307][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 03:36:30 executing program 5: r0 = syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) [ 2625.512412][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 03:36:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) 03:36:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) [ 2625.512514][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.512619][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.512722][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.512824][ T5608] binder: 5604:5608 ioctl c0306201 20001480 returned -14 [ 2625.543427][T18213] gspca_spca508: reg_read err -71 [ 2625.552134][ T5609] binder_alloc: binder_alloc_mmap_handler: 5604 20ffc000-20ffd000 already mapped failed -16 [ 2625.559006][T18213] gspca_spca508: reg_read err -71 [ 2625.579896][T18213] gspca_spca508: reg_read err -71 [ 2625.596755][T18213] gspca_spca508: reg write: error -71 03:36:31 executing program 4: open$dir(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0) 03:36:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) (async) sendfile(r2, r3, 0x0, 0x11f06) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @release={0x40046306, 0x2}], 0xb4, 0x0, &(0x7f0000000180)="825925b84b6ceb45dac7b87ef7ff1f1da7d59db0a6f62ea9f227484fcf537bd94fbb69303a37b9ce88b5380655f804cc2d7e5f331afbb6bbd993812d90e541cef097db30ef65c8afe6be1bee68819b500fbbe47ca7e14913e4276a3d55818fb6a533009507ff327481d12b8e3268a8b6b84b5ffb759ca9bdb0013238fde749e326c681b5a4f8420304d3830ae8777fb7c4826dfcb30332d30c8109d534209d2649f57c5274185d881122923577b01999ff1168d9"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup2(r4, r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2625.596811][T18213] spca508: probe of 6-1:1.0 failed with error -71 [ 2625.605034][T18213] usb 6-1: USB disconnect, device number 22 [ 2626.042764][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.042776][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.042858][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.042865][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 03:36:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) [ 2626.042946][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.042954][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.043052][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.043059][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.043151][ T5630] binder: BINDER_SET_CONTEXT_MGR already set 03:36:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r2, r3, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @release={0x40046306, 0x2}], 0xb4, 0x0, &(0x7f0000000180)="825925b84b6ceb45dac7b87ef7ff1f1da7d59db0a6f62ea9f227484fcf537bd94fbb69303a37b9ce88b5380655f804cc2d7e5f331afbb6bbd993812d90e541cef097db30ef65c8afe6be1bee68819b500fbbe47ca7e14913e4276a3d55818fb6a533009507ff327481d12b8e3268a8b6b84b5ffb759ca9bdb0013238fde749e326c681b5a4f8420304d3830ae8777fb7c4826dfcb30332d30c8109d534209d2649f57c5274185d881122923577b01999ff1168d9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup2(r4, r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r2, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) (async) sendfile(r2, r3, 0x0, 0x11f06) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @release={0x40046306, 0x2}], 0xb4, 0x0, &(0x7f0000000180)="825925b84b6ceb45dac7b87ef7ff1f1da7d59db0a6f62ea9f227484fcf537bd94fbb69303a37b9ce88b5380655f804cc2d7e5f331afbb6bbd993812d90e541cef097db30ef65c8afe6be1bee68819b500fbbe47ca7e14913e4276a3d55818fb6a533009507ff327481d12b8e3268a8b6b84b5ffb759ca9bdb0013238fde749e326c681b5a4f8420304d3830ae8777fb7c4826dfcb30332d30c8109d534209d2649f57c5274185d881122923577b01999ff1168d9"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r4, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r4, r5) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) [ 2626.043159][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.043250][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.043257][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.043350][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.043357][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.046923][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.046933][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 03:36:31 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 03:36:31 executing program 0: socket$inet(0x2, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x0) [ 2626.061018][ T5630] binder: BINDER_SET_CONTEXT_MGR already set 03:36:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) [ 2626.061035][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.061134][ T5630] binder: BINDER_SET_CONTEXT_MGR already set 03:36:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "850e32db99baeb0600"}) read(r0, &(0x7f0000001c40)=""/242, 0xf2) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ppoll(&(0x7f0000000080)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TCXONC(r2, 0x540a, 0x3) [ 2626.061142][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.063311][ T5630] binder: BINDER_SET_CONTEXT_MGR already set 03:36:31 executing program 2: openat$vcsu(0xffffffffffffff9c, 0x0, 0x2c441, 0x0) [ 2626.063320][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.068441][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.068451][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.068547][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.068554][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.068645][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.068652][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.068740][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.068747][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 03:36:31 executing program 5: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x0, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x801, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = inotify_init1(0x80800) r6 = dup2(r4, r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0xfffffffffffffffe}) r7 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x766) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x74, 0x0, &(0x7f0000000280)=[@dead_binder_done, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x1}, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0xa, 0xf79}, @fda={0x66646185, 0x1, 0x2, 0x13}, @fda={0x66646185, 0x7, 0x1, 0x1d}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x400}], 0xf2, 0x0, &(0x7f0000000300)="92ecf3f7abec501a0c37032c2209705181de38911690fcf7a08e2ada8b84fc08dcf5e73cd528920e21bf2d333ad15bc934fceb05b4719678c725912bc3067279b5e4ed6019c49c53fe72a74e9f66e6916a83ae4619f7f17b00040f240d20f3f313cb3cb6af4477a89e1c2e9c0086c3d0872023f2dea5c67de502645fa51140ca50fe681eb38fc0c4691252091da244ddfce8bb73877df2b2fa68548aa906f35dbaf3fe66da410be99e11b6cf1f02e8045aba48dee223742b8643aa13db0d82385dfe9e6ccb43309595140bc36d7740edcaa952619cd0584796086124d9577844942585458855a4535bc04e829ea617cab173"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:31 executing program 4: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 03:36:31 executing program 2: fsopen(&(0x7f00000001c0)='pipefs\x00', 0x0) 03:36:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002cc0)={0x9, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2626.068834][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.068841][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.068927][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.068933][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.069017][ T5630] binder: BINDER_SET_CONTEXT_MGR already set 03:36:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x894a, &(0x7f0000000a80)={'wpan0\x00'}) 03:36:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000700)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@empty, 0x0, r2}) 03:36:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000600)=ANY=[@ANYBLOB="000000005649bf701419a04333aac6ad6abb06907bbd60170fa82e5fc4b001541d35d87e8303bd78bdc51a037434a92de5b247c65fffd20a1eca8b6c29", @ANYRES16=0x0, @ANYBLOB="10efffffff00000000005700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8894}, 0x24040000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x88004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan0\x00'}) [ 2626.069030][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 03:36:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x27}, 0x14}}, 0x0) 03:36:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x801, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 64) r5 = inotify_init1(0x80800) r6 = dup2(r4, r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0xfffffffffffffffe}) (async) r7 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x766) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x74, 0x0, &(0x7f0000000280)=[@dead_binder_done, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x1}, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0xa, 0xf79}, @fda={0x66646185, 0x1, 0x2, 0x13}, @fda={0x66646185, 0x7, 0x1, 0x1d}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x400}], 0xf2, 0x0, &(0x7f0000000300)="92ecf3f7abec501a0c37032c2209705181de38911690fcf7a08e2ada8b84fc08dcf5e73cd528920e21bf2d333ad15bc934fceb05b4719678c725912bc3067279b5e4ed6019c49c53fe72a74e9f66e6916a83ae4619f7f17b00040f240d20f3f313cb3cb6af4477a89e1c2e9c0086c3d0872023f2dea5c67de502645fa51140ca50fe681eb38fc0c4691252091da244ddfce8bb73877df2b2fa68548aa906f35dbaf3fe66da410be99e11b6cf1f02e8045aba48dee223742b8643aa13db0d82385dfe9e6ccb43309595140bc36d7740edcaa952619cd0584796086124d9577844942585458855a4535bc04e829ea617cab173"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (rerun: 64) [ 2626.069117][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.069125][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 03:36:31 executing program 4: r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) 03:36:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00Ny\''], 0x34}}, 0x0) [ 2626.082689][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.082700][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.082785][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.082792][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.082866][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.082873][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.082948][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.082954][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.083037][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.083044][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.083121][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.083128][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.083207][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.083214][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.083295][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.083301][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.083381][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.083388][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.083465][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.083472][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.083551][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.083558][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.134327][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.135047][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.210812][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.214157][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.219151][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.219161][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.251774][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.252312][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.274754][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.274766][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.292422][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.292726][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.605353][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.605364][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.735033][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.735622][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.785850][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.788369][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.800217][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.800227][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.837343][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2626.838090][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2626.849173][ T5630] binder: BINDER_SET_CONTEXT_MGR already set [ 2627.048116][ T5630] binder: 5620:5630 ioctl 4018620d 20000040 returned -16 [ 2627.264221][ T28] audit: type=1800 audit(2000000190.019:2375): pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1184 res=0 errno=0 [ 2627.268539][ T28] audit: type=1804 audit(2000000190.029:2376): pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3438/file0" dev="sda1" ino=1184 res=1 errno=0 [ 2627.811676][ T5664] binder: 5655:5664 ioctl c0306201 20001480 returned -14 [ 2628.433334][ T28] audit: type=1800 audit(2000000191.189:2377): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1183 res=0 errno=0 [ 2628.439049][ T28] audit: type=1804 audit(2000000191.189:2378): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3439/file0" dev="sda1" ino=1183 res=1 errno=0 [ 2628.518390][ T28] audit: type=1800 audit(2000000191.259:2379): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1183 res=0 errno=0 [ 2628.523424][ T28] audit: type=1804 audit(2000000191.279:2380): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3440/file0" dev="sda1" ino=1183 res=1 errno=0 [ 2628.599287][ T5696] binder: 5689:5696 ioctl c0306201 20001480 returned -14 [ 2628.658147][ T5698] binder: transaction release 7764 bad object at offset 0, size 0 [ 2628.658169][ T5698] binder: transaction release 7764 bad object at offset 0, size 0 [ 2628.658184][ T5698] binder: transaction release 7764 bad object at offset 0, size 0 [ 2628.672119][ T5698] binder: BINDER_SET_CONTEXT_MGR already set [ 2628.672131][ T5698] binder: 5689:5698 ioctl 4018620d 20000000 returned -16 [ 2628.690269][ T5698] binder_alloc: binder_alloc_mmap_handler: 5689 20ffc000-20ffd000 already mapped failed -16 [ 2628.970315][ T5724] binder: 5722:5724 ioctl c0306201 20001480 returned -22 [ 2629.284301][T27454] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2629.484015][T27454] usb 6-1: device descriptor read/64, error 18 [ 2629.784459][T27454] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2629.974148][T27454] usb 6-1: device descriptor read/64, error 18 [ 2630.100471][T27454] usb usb6-port1: attempt power cycle [ 2630.514008][T27454] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2630.614411][T27454] usb 6-1: Invalid ep0 maxpacket: 0 [ 2630.774102][T27454] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2630.894185][T27454] usb 6-1: Invalid ep0 maxpacket: 0 [ 2630.894334][T27454] usb usb6-port1: unable to enumerate USB device 03:36:34 executing program 5: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x0, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:34 executing program 0: r0 = openat$tcp_mem(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 03:36:34 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x801, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7f) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = inotify_init1(0x80800) r6 = dup2(r4, r5) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100, 0xfffffffffffffffe}) r7 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x766) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x74, 0x0, &(0x7f0000000280)=[@dead_binder_done, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x1}, @free_buffer={0x40086303, r7}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat=@handle={0x73682a85, 0xa, 0xf79}, @fda={0x66646185, 0x1, 0x2, 0x13}, @fda={0x66646185, 0x7, 0x1, 0x1d}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x400}], 0xf2, 0x0, &(0x7f0000000300)="92ecf3f7abec501a0c37032c2209705181de38911690fcf7a08e2ada8b84fc08dcf5e73cd528920e21bf2d333ad15bc934fceb05b4719678c725912bc3067279b5e4ed6019c49c53fe72a74e9f66e6916a83ae4619f7f17b00040f240d20f3f313cb3cb6af4477a89e1c2e9c0086c3d0872023f2dea5c67de502645fa51140ca50fe681eb38fc0c4691252091da244ddfce8bb73877df2b2fa68548aa906f35dbaf3fe66da410be99e11b6cf1f02e8045aba48dee223742b8643aa13db0d82385dfe9e6ccb43309595140bc36d7740edcaa952619cd0584796086124d9577844942585458855a4535bc04e829ea617cab173"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:34 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="b9ffe0ff600d698cff9e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 03:36:34 executing program 4: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$hidraw(r0, &(0x7f0000000300)=""/230, 0xe6) 03:36:34 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 03:36:34 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, 0x0, 0x0) 03:36:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000000d67) 03:36:34 executing program 0: r0 = creat(&(0x7f0000001240)='./file0\x00', 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001500)) [ 2632.039565][ T5762] binder: 5754:5762 ioctl c0306201 20001480 returned -22 03:36:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_tables_matches\x00') ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x11) 03:36:34 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000840)={0x3, 0x400, 0x0, 0x8000, 0x3, [{0x5, 0x9, 0x9, '\x00', 0x900}, {0x0, 0x4, 0x0, '\x00', 0x800}, {0x800, 0x9, 0x9, '\x00', 0x880}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = memfd_secret(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05630400"], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000700)=[@exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000014c0)=""/4096, 0x1000, 0x2, 0x36}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x40}, @clear_death={0x400c630f, 0x3}], 0x9f, 0x0, &(0x7f0000000780)="0a7b3cb1140440e30069e5cdc2e01fef6ba19d4e2d0ef3fb6464ab28d225c69f3521b2a1f8dc2ddb058758d96d32bcfb7115d7d48bd4e35fccc7e2bc8f18feb296d6c91a19798c4937cf949e69bfac909f6a1ad4aebc2699f61865ab16016fd5067e1bece149ba9828ceec23c7199baba717aaadf9cf938cfe9c1f917475a93ce4cdc3e1aaf4200da81fdaa8f93a5bd3598b0c183f42f7bbfb026a87eca945"}) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="852a64660000000025ec3f29131cf3a26e0c45eee84114a6929d95d131591a7630fc34dd818405b552d89e0d18ac41003decfacd06", @ANYRES32=r6, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a627359b4aa8a0100"/36], &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:34 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000600)=ANY=[@ANYBLOB="000000005649bf701419a04333aac6ad6abb06907bbd60170fa82e5fc4b001541d35d87e8303bd78bdc51a037434a92de5b247c65fffd20a1eca8b6c29", @ANYRES16=0x0, @ANYBLOB="10efffffff00000000005700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8894}, 0x24040000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x88004}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x2008000}, 0x4014) [ 2632.207077][ T5776] binder: 5771:5776 unknown command 287493 [ 2632.207099][ T5776] binder: 5771:5776 ioctl c0306201 20001480 returned -22 [ 2632.444065][T18213] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2632.634282][T18213] usb 6-1: device descriptor read/64, error 18 [ 2632.904193][T18213] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 2633.094222][T18213] usb 6-1: device descriptor read/64, error 18 [ 2633.214739][T18213] usb usb6-port1: attempt power cycle [ 2633.626263][T18213] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2633.714297][T18213] usb 6-1: Invalid ep0 maxpacket: 0 [ 2633.864146][T18213] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2633.954189][T18213] usb 6-1: Invalid ep0 maxpacket: 0 [ 2633.955756][T18213] usb usb6-port1: unable to enumerate USB device 03:36:37 executing program 5: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x0, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:37 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/bus/usb', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0) 03:36:37 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000840)={0x3, 0x400, 0x0, 0x8000, 0x3, [{0x5, 0x9, 0x9, '\x00', 0x900}, {0x0, 0x4, 0x0, '\x00', 0x800}, {0x800, 0x9, 0x9, '\x00', 0x880}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = memfd_secret(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) dup2(r2, 0xffffffffffffffff) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05630400"], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000700)=[@exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000014c0)=""/4096, 0x1000, 0x2, 0x36}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x40}, @clear_death={0x400c630f, 0x3}], 0x9f, 0x0, &(0x7f0000000780)="0a7b3cb1140440e30069e5cdc2e01fef6ba19d4e2d0ef3fb6464ab28d225c69f3521b2a1f8dc2ddb058758d96d32bcfb7115d7d48bd4e35fccc7e2bc8f18feb296d6c91a19798c4937cf949e69bfac909f6a1ad4aebc2699f61865ab16016fd5067e1bece149ba9828ceec23c7199baba717aaadf9cf938cfe9c1f917475a93ce4cdc3e1aaf4200da81fdaa8f93a5bd3598b0c183f42f7bbfb026a87eca945"}) (async, rerun: 32) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) (rerun: 32) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="852a64660000000025ec3f29131cf3a26e0c45eee84114a6929d95d131591a7630fc34dd818405b552d89e0d18ac41003decfacd06", @ANYRES32=r6, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a627359b4aa8a0100"/36], &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001400)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 03:36:37 executing program 3: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"], 0x29, r0) 03:36:37 executing program 2: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, 0x0, 0x0) 03:36:37 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}}], 0x1, 0x1, 0x0) 03:36:37 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$binderfs(0xffffffffffffff9c, 0x0, 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:36:37 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xde280, 0x0) 03:36:37 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x20580, 0x0) [ 2635.157932][ T5834] binder: 5824:5834 unknown command 287493 [ 2635.157954][ T5834] binder: 5824:5834 ioctl c0306201 20001480 returned -22 03:36:38 executing program 1: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000840)={0x3, 0x400, 0x0, 0x8000, 0x3, [{0x5, 0x9, 0x9, '\x00', 0x900}, {0x0, 0x4, 0x0, '\x00', 0x800}, {0x800, 0x9, 0x9, '\x00', 0x880}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = memfd_secret(0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05630400"], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000700)=[@exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000014c0)=""/4096, 0x1000, 0x2, 0x36}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x40}, @clear_death={0x400c630f, 0x3}], 0x9f, 0x0, &(0x7f0000000780)="0a7b3cb1140440e30069e5cdc2e01fef6ba19d4e2d0ef3fb6464ab28d225c69f3521b2a1f8dc2ddb058758d96d32bcfb7115d7d48bd4e35fccc7e2bc8f18feb296d6c91a19798c4937cf949e69bfac909f6a1ad4aebc2699f61865ab16016fd5067e1bece149ba9828ceec23c7199baba717aaadf9cf938cfe9c1f917475a93ce4cdc3e1aaf4200da81fdaa8f93a5bd3598b0c183f42f7bbfb026a87eca945"}) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="852a64660000000025ec3f29131cf3a26e0c45eee84114a6929d95d131591a7630fc34dd818405b552d89e0d18ac41003decfacd06", @ANYRES32=r6, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a627359b4aa8a0100"/36], &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) (async) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000840)={0x3, 0x400, 0x0, 0x8000, 0x3, [{0x5, 0x9, 0x9, '\x00', 0x900}, {0x0, 0x4, 0x0, '\x00', 0x800}, {0x800, 0x9, 0x9, '\x00', 0x880}]}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) memfd_secret(0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) (async) dup2(r2, 0xffffffffffffffff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r3) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="05630400"], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11f06) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x60, 0x0, &(0x7f0000000700)=[@exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000014c0)=""/4096, 0x1000, 0x2, 0x36}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x40}, @clear_death={0x400c630f, 0x3}], 0x9f, 0x0, &(0x7f0000000780)="0a7b3cb1140440e30069e5cdc2e01fef6ba19d4e2d0ef3fb6464ab28d225c69f3521b2a1f8dc2ddb058758d96d32bcfb7115d7d48bd4e35fccc7e2bc8f18feb296d6c91a19798c4937cf949e69bfac909f6a1ad4aebc2699f61865ab16016fd5067e1bece149ba9828ceec23c7199baba717aaadf9cf938cfe9c1f917475a93ce4cdc3e1aaf4200da81fdaa8f93a5bd3598b0c183f42f7bbfb026a87eca945"}) (async) preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x64, 0x0, &(0x7f0000000240)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="852a64660000000025ec3f29131cf3a26e0c45eee84114a6929d95d131591a7630fc34dd818405b552d89e0d18ac41003decfacd06", @ANYRES32=r6, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32, @ANYBLOB="000000000000000000000000852a627359b4aa8a0100"/36], &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) 03:36:38 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x33}]}, 0x10) [ 2635.335005][ T5849] binder: 5846:5849 unknown command 287493 [ 2635.335027][ T5849] binder: 5846:5849 ioctl c0306201 20001480 returned -22 [ 2635.371425][ T5849] binder_alloc: binder_alloc_mmap_handler: 5846 20ffc000-20ffd000 already mapped failed -16 [ 2635.614403][T18213] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2635.824066][T18213] usb 6-1: device descriptor read/64, error 18 [ 2636.114078][T18213] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2636.304107][T18213] usb 6-1: device descriptor read/64, error 18 [ 2636.425687][T18213] usb usb6-port1: attempt power cycle [ 2636.834157][T18213] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2636.924219][T18213] usb 6-1: Invalid ep0 maxpacket: 0 [ 2637.074034][T18213] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2637.164100][T18213] usb 6-1: Invalid ep0 maxpacket: 0 [ 2637.164257][T18213] usb usb6-port1: unable to enumerate USB device 03:36:40 executing program 5: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x0, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:40 executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x507401, 0x0) 03:36:40 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f00000015c0), 0x90040, 0x0) 03:36:40 executing program 0: syz_mount_image$msdos(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)) 03:36:40 executing program 3: mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x88004}, 0xc, 0x0}, 0x0) 03:36:40 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="df260e630440"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xc0, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x3}, @decrefs, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x6, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x9, 0x0, 0x9}, @fda={0x66646185, 0x9, 0x2, 0x3b}, @flat=@weak_binder={0x77622a85, 0x1202, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x400}], 0xcf, 0x0, &(0x7f0000000700)="6158dffcc9ab008f58a5d07c428905bf8d8d790ec3aa390a59f4ea25fafc730c41041e91976c66231742b077040b918e4801bc2b9c22459e982c11de1ab6b799b8abde099de0fd699c5ac1feec7f188a575ccfe8f17fa24701857f194ae174daa91a60fec042e6ce86bb12d9759670de8d8307da01b003c2c469cd06218e996bb0d5a5c20f1f9667bc9d778ed8ffd033e063b697e8c5a3c3201f54ee60b589b09490eed1f8c53c76d74192f9dd985014bcb35f570eaa9e7cf42b71ba4621018f8d5dd1e51db26974572a339180a286"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r3, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000400)=0x6, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) 03:36:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 03:36:41 executing program 0: syz_mount_image$msdos(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x1001808, &(0x7f0000000ac0)) 03:36:41 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={0x0, 0x28}}, 0x0) [ 2638.252730][ T5868] binder: 5861:5868 unknown command 1661871839 [ 2638.252754][ T5868] binder: 5861:5868 ioctl c0306201 20000080 returned -22 [ 2638.271910][ T5868] binder: BINDER_SET_CONTEXT_MGR already set 03:36:41 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2\x00', 0x1ff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) 03:36:41 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="df260e630440"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xc0, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x3}, @decrefs, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x6, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x9, 0x0, 0x9}, @fda={0x66646185, 0x9, 0x2, 0x3b}, @flat=@weak_binder={0x77622a85, 0x1202, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x400}], 0xcf, 0x0, &(0x7f0000000700)="6158dffcc9ab008f58a5d07c428905bf8d8d790ec3aa390a59f4ea25fafc730c41041e91976c66231742b077040b918e4801bc2b9c22459e982c11de1ab6b799b8abde099de0fd699c5ac1feec7f188a575ccfe8f17fa24701857f194ae174daa91a60fec042e6ce86bb12d9759670de8d8307da01b003c2c469cd06218e996bb0d5a5c20f1f9667bc9d778ed8ffd033e063b697e8c5a3c3201f54ee60b589b09490eed1f8c53c76d74192f9dd985014bcb35f570eaa9e7cf42b71ba4621018f8d5dd1e51db26974572a339180a286"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r3, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000400)=0x6, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="df260e630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xc0, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x3}, @decrefs, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x6, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x9, 0x0, 0x9}, @fda={0x66646185, 0x9, 0x2, 0x3b}, @flat=@weak_binder={0x77622a85, 0x1202, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x400}], 0xcf, 0x0, &(0x7f0000000700)="6158dffcc9ab008f58a5d07c428905bf8d8d790ec3aa390a59f4ea25fafc730c41041e91976c66231742b077040b918e4801bc2b9c22459e982c11de1ab6b799b8abde099de0fd699c5ac1feec7f188a575ccfe8f17fa24701857f194ae174daa91a60fec042e6ce86bb12d9759670de8d8307da01b003c2c469cd06218e996bb0d5a5c20f1f9667bc9d778ed8ffd033e063b697e8c5a3c3201f54ee60b589b09490eed1f8c53c76d74192f9dd985014bcb35f570eaa9e7cf42b71ba4621018f8d5dd1e51db26974572a339180a286"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r3, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r3, r4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000400)=0x6, 0x4) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) (async) [ 2638.271923][ T5868] binder: 5861:5868 ioctl 4018620d 20000000 returned -16 [ 2638.272267][ T5868] binder: 5861:5868 ioctl c0306201 20001480 returned -14 03:36:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003580)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0xfffffffffffffcf9}}, 0x0) [ 2638.386149][ T5881] binder: 5877:5881 unknown command 1661871839 [ 2638.388526][ T5881] binder: 5877:5881 ioctl c0306201 20000080 returned -22 [ 2638.392579][ T5881] binder: BINDER_SET_CONTEXT_MGR already set [ 2638.392589][ T5881] binder: 5877:5881 ioctl 4018620d 20000000 returned -16 [ 2638.392814][ T5881] binder: 5877:5881 ioctl c0306201 20001480 returned -14 [ 2638.436989][ T5885] binder: BINDER_SET_CONTEXT_MGR already set [ 2638.437000][ T5885] binder: 5877:5885 ioctl 40046207 0 returned -16 [ 2638.656572][T20802] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2638.894261][T20802] usb 6-1: Using ep0 maxpacket: 16 [ 2639.014167][T20802] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2639.014200][T20802] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 2639.014257][T20802] usb 6-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2639.014285][T20802] usb 6-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2639.014311][T20802] usb 6-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2639.014339][T20802] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2639.014395][T20802] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2639.374171][T20802] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2639.374204][T20802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2639.374228][T20802] usb 6-1: SerialNumber: syz [ 2639.375909][T20802] usb 6-1: config 0 descriptor?? [ 2639.394849][ T5871] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2639.635468][T20802] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2640.074099][T20802] gspca_spca508: reg_read err -71 [ 2640.094274][T20802] gspca_spca508: reg_read err -71 [ 2640.114194][T20802] gspca_spca508: reg_read err -71 [ 2640.134115][T20802] gspca_spca508: reg_read err -71 [ 2640.154164][T20802] gspca_spca508: reg write: error -71 [ 2640.154203][T20802] spca508: probe of 6-1:0.0 failed with error -71 [ 2640.161700][T20802] usb 6-1: USB disconnect, device number 35 03:36:43 executing program 5: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:43 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffb) 03:36:43 executing program 2: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) 03:36:43 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="df260e630440"], 0x0, 0x0, 0x0}) r2 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0xc0, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x3}, @decrefs, @release={0x40046306, 0x3}, @free_buffer={0x40086303, r2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x6, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1, 0x1}}, &(0x7f0000000040)={0x0, 0x20, 0x38}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x9, 0x0, 0x9}, @fda={0x66646185, 0x9, 0x2, 0x3b}, @flat=@weak_binder={0x77622a85, 0x1202, 0x3}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}, 0x400}], 0xcf, 0x0, &(0x7f0000000700)="6158dffcc9ab008f58a5d07c428905bf8d8d790ec3aa390a59f4ea25fafc730c41041e91976c66231742b077040b918e4801bc2b9c22459e982c11de1ab6b799b8abde099de0fd699c5ac1feec7f188a575ccfe8f17fa24701857f194ae174daa91a60fec042e6ce86bb12d9759670de8d8307da01b003c2c469cd06218e996bb0d5a5c20f1f9667bc9d778ed8ffd033e063b697e8c5a3c3201f54ee60b589b09490eed1f8c53c76d74192f9dd985014bcb35f570eaa9e7cf42b71ba4621018f8d5dd1e51db26974572a339180a286"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r3, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r3, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000400)=0x6, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440), 0x200000, 0x0) 03:36:43 executing program 0: openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) 03:36:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 03:36:43 executing program 0: socket$inet(0x2, 0x3, 0xff) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) [ 2640.592182][ T5901] binder: 5899:5901 unknown command 1661871839 [ 2640.592212][ T5901] binder: 5899:5901 ioctl c0306201 20000080 returned -22 [ 2640.619956][ T5901] binder: BINDER_SET_CONTEXT_MGR already set 03:36:43 executing program 3: r0 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)) 03:36:43 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x38, 0x0) 03:36:43 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0563044000000000bdaf80553e7e5d94ef87d4e7bc4947b130d79779d3cea6f7bf2e426c782802182572e0814593aac17c489f6dc93453d387ad4f387fe0d28f819814dbd5bd5317649e086a1f3b26869b6212efcc2991d6e21b1df1e118e33cac48bda468abd8dfeb333ac7d574ff3d9a5a3ebad39f2d2a"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) sendto$ax25(r6, &(0x7f00000001c0)="6763b0c94504b763f0ab7b624e8db9fcd0575b8b5e6d4ba8c0c8fba5d7d67535ff91a011fafb8a4a61e7ecb93da03343", 0x30, 0x4000000, &(0x7f0000000200)={{0x3, @null, 0x3}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}, 0x1000}], 0x0, 0x0, 0x0}) [ 2640.619967][ T5901] binder: 5899:5901 ioctl 4018620d 20000000 returned -16 03:36:43 executing program 2: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000140)=0x4) 03:36:43 executing program 3: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) shmat(0x0, &(0x7f0000ff7000/0x3000)=nil, 0x0) [ 2640.620196][ T5901] binder: 5899:5901 ioctl c0306201 20001480 returned -14 [ 2640.758541][ T5919] binder: 5916:5919 ioctl c0189379 20000040 returned -22 [ 2640.763489][ T28] audit: type=1400 audit(2000000203.509:2381): avc: denied { write } for pid=5916 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2640.924159][T27454] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2641.174180][T27454] usb 6-1: Using ep0 maxpacket: 16 [ 2641.324246][T27454] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2641.324281][T27454] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 2641.324310][T27454] usb 6-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2641.324339][T27454] usb 6-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2641.324367][T27454] usb 6-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2641.324395][T27454] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2641.324423][T27454] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2641.734238][T27454] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2641.734275][T27454] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2641.734300][T27454] usb 6-1: SerialNumber: syz [ 2641.736632][T27454] usb 6-1: config 0 descriptor?? [ 2641.764802][ T5910] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2641.786389][T27454] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2641.994222][T27454] gspca_spca508: reg_read err -32 [ 2642.274188][T27454] gspca_spca508: reg_read err -71 [ 2642.294214][T27454] gspca_spca508: reg_read err -71 [ 2642.314209][T27454] gspca_spca508: reg_read err -71 [ 2642.334286][T27454] gspca_spca508: reg write: error -71 [ 2642.334335][T27454] spca508: probe of 6-1:0.0 failed with error -71 [ 2642.343421][T27454] usb 6-1: USB disconnect, device number 36 03:36:45 executing program 5: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0563044000000000bdaf80553e7e5d94ef87d4e7bc4947b130d79779d3cea6f7bf2e426c782802182572e0814593aac17c489f6dc93453d387ad4f387fe0d28f819814dbd5bd5317649e086a1f3b26869b6212efcc2991d6e21b1df1e118e33cac48bda468abd8dfeb333ac7d574ff3d9a5a3ebad39f2d2a"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) sendto$ax25(r6, &(0x7f00000001c0)="6763b0c94504b763f0ab7b624e8db9fcd0575b8b5e6d4ba8c0c8fba5d7d67535ff91a011fafb8a4a61e7ecb93da03343", 0x30, 0x4000000, &(0x7f0000000200)={{0x3, @null, 0x3}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}, 0x1000}], 0x0, 0x0, 0x0}) 03:36:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r0, 0x0, 0x30, 0x0, &(0x7f0000000200)) 03:36:45 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x7, 0x7f}, {0x6, 0x0, 0x0, 0xff}]}) 03:36:45 executing program 3: syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x4, &(0x7f00000019c0)=[{&(0x7f00000009c0)="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", 0xffd, 0x4}, {&(0x7f0000000480)}, {0x0}, {0x0}], 0x0, &(0x7f0000001ac0)={[{@four_active_logs}, {@norecovery}, {@background_gc_on}, {@extent_cache}, {@disable_ext_identify}, {@background_gc_off}]}) 03:36:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 03:36:45 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b40)) [ 2642.810305][ T5933] loop3: detected capacity change from 0 to 8 [ 2642.812715][ T28] audit: type=1326 audit(2000000205.559:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5925 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55f7889109 code=0x0 [ 2642.848242][ T5933] Dev loop3: unable to read RDB block 8 [ 2642.848280][ T5933] loop3: unable to read partition table [ 2642.848434][ T5933] loop3: partition table beyond EOD, truncated [ 2642.848745][ T5933] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x5d0d6be2) [ 2642.848769][ T5933] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 03:36:45 executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 03:36:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0563044000000000bdaf80553e7e5d94ef87d4e7bc4947b130d79779d3cea6f7bf2e426c782802182572e0814593aac17c489f6dc93453d387ad4f387fe0d28f819814dbd5bd5317649e086a1f3b26869b6212efcc2991d6e21b1df1e118e33cac48bda468abd8dfeb333ac7d574ff3d9a5a3ebad39f2d2a"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0xca) sendto$ax25(r6, &(0x7f00000001c0)="6763b0c94504b763f0ab7b624e8db9fcd0575b8b5e6d4ba8c0c8fba5d7d67535ff91a011fafb8a4a61e7ecb93da03343", 0x30, 0x4000000, &(0x7f0000000200)={{0x3, @null, 0x3}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}, 0x1000}], 0x0, 0x0, 0x0}) 03:36:45 executing program 3: epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0)={[0x20]}, 0x8) [ 2642.848880][ T5933] F2FS-fs (loop3): Unable to read 2th superblock 03:36:45 executing program 2: socketpair(0x2c, 0x0, 0x0, &(0x7f00000019c0)) 03:36:45 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x402000, 0x0) [ 2642.907460][ T5939] binder: 5929:5939 ioctl c0189379 20000040 returned -22 [ 2643.005800][ T28] audit: type=1400 audit(2000000205.759:2383): avc: denied { getopt } for pid=5944 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2643.048855][ T5948] binder: 5946:5948 ioctl c0189379 20000040 returned -22 [ 2643.093992][T17997] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2643.334013][T17997] usb 6-1: Using ep0 maxpacket: 16 [ 2643.454199][T17997] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2643.454233][T17997] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 2643.454260][T17997] usb 6-1: config 0 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2643.454288][T17997] usb 6-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2643.454313][T17997] usb 6-1: config 0 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2643.454340][T17997] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2643.454366][T17997] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2643.824196][T17997] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2643.824231][T17997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2643.824256][T17997] usb 6-1: SerialNumber: syz [ 2643.825743][T17997] usb 6-1: config 0 descriptor?? [ 2643.849432][ T5936] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2643.866358][T17997] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2644.084085][T17997] gspca_spca508: reg_read err -32 [ 2644.344176][T17997] gspca_spca508: reg_read err -71 [ 2644.364211][T17997] gspca_spca508: reg_read err -71 [ 2644.384253][T17997] gspca_spca508: reg_read err -71 [ 2644.404135][T17997] gspca_spca508: reg write: error -71 [ 2644.404170][T17997] spca508: probe of 6-1:0.0 failed with error -71 [ 2644.413125][T17997] usb 6-1: USB disconnect, device number 37 03:36:47 executing program 5: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:47 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x0, 0x0, 0x9, 0x228b}, {0x6}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 03:36:47 executing program 2: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)={0x8001}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1f]}, 0x8}) 03:36:47 executing program 0: ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, 0x0) fsopen(0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f00000008c0), 0x80) 03:36:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 03:36:47 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0473c1ae"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000040)=[@exit_looper, @exit_looper], 0xa4, 0x0, &(0x7f0000000240)="32f7b0b0cbcad6b0ed6d870796a25316090ed9aeb178f970a1bc6daa67c81bc91d03bf4f5652efd36f6a76096ce66d8fc1f10fb17d27f256f733f80b83f3acb1a258c228e08cab89c9baf86cc2e17bf0cf6f21505e1c006f2f324cb560e2a3d673ebd743dd028ad78eb09d2cf8361dd5f9482de64aed0df8bbee05588129c1bfb5eaa0268a126391462a20e9edc3a5a0557274a10fda3e6d469cea49b218ece51405e4e3"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) readahead(r7, 0xa5d, 0x4) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:47 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000600)={&(0x7f0000000500), 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x14}, 0xfffffdef}}, 0x0) 03:36:47 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x3, 0xffffffffffffffff, 0x0, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 2644.878215][ T5963] binder: 5961:5963 unknown command 2931913476 [ 2644.878240][ T5963] binder: 5961:5963 ioctl c0306201 20000080 returned -22 03:36:47 executing program 0: r0 = epoll_create(0xe5) epoll_pwait2(r0, &(0x7f0000000080)=[{}], 0x1, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000100), 0x8) [ 2644.883878][ T5963] binder: 5961:5963 ioctl c0306201 20001480 returned -14 03:36:47 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0473c1ae"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000040)=[@exit_looper, @exit_looper], 0xa4, 0x0, &(0x7f0000000240)="32f7b0b0cbcad6b0ed6d870796a25316090ed9aeb178f970a1bc6daa67c81bc91d03bf4f5652efd36f6a76096ce66d8fc1f10fb17d27f256f733f80b83f3acb1a258c228e08cab89c9baf86cc2e17bf0cf6f21505e1c006f2f324cb560e2a3d673ebd743dd028ad78eb09d2cf8361dd5f9482de64aed0df8bbee05588129c1bfb5eaa0268a126391462a20e9edc3a5a0557274a10fda3e6d469cea49b218ece51405e4e3"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) readahead(r7, 0xa5d, 0x4) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0473c1ae"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r3) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000040)=[@exit_looper, @exit_looper], 0xa4, 0x0, &(0x7f0000000240)="32f7b0b0cbcad6b0ed6d870796a25316090ed9aeb178f970a1bc6daa67c81bc91d03bf4f5652efd36f6a76096ce66d8fc1f10fb17d27f256f733f80b83f3acb1a258c228e08cab89c9baf86cc2e17bf0cf6f21505e1c006f2f324cb560e2a3d673ebd743dd028ad78eb09d2cf8361dd5f9482de64aed0df8bbee05588129c1bfb5eaa0268a126391462a20e9edc3a5a0557274a10fda3e6d469cea49b218ece51405e4e3"}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) (async) readahead(r7, 0xa5d, 0x4) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) [ 2644.917318][ T28] audit: type=1326 audit(2000000207.669:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f153ec89109 code=0x0 03:36:47 executing program 2: socketpair(0xb, 0x0, 0x0, &(0x7f0000000440)) 03:36:47 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000540)) [ 2645.059868][ T5977] binder: 5976:5977 unknown command 2931913476 [ 2645.059892][ T5977] binder: 5976:5977 ioctl c0306201 20000080 returned -22 [ 2645.093351][ T5977] binder: 5976:5977 ioctl c0306201 20001480 returned -14 [ 2645.110404][ T5982] binder: BINDER_SET_CONTEXT_MGR already set [ 2645.110417][ T5982] binder: 5976:5982 ioctl 40046207 0 returned -16 [ 2645.234212][ T6192] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2645.474102][ T6192] usb 6-1: Using ep0 maxpacket: 16 [ 2645.604720][ T6192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2645.604754][ T6192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2645.604782][ T6192] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2645.604818][ T6192] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2645.604845][ T6192] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2645.604873][ T6192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2646.004417][ T6192] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2646.004454][ T6192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2646.004480][ T6192] usb 6-1: SerialNumber: syz [ 2646.008325][ T6192] usb 6-1: config 0 descriptor?? [ 2646.033063][ T5971] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2646.053610][ T6192] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2646.264415][ T6192] gspca_spca508: reg_read err -32 [ 2646.534156][ T6192] gspca_spca508: reg_read err -71 [ 2646.556583][ T6192] gspca_spca508: reg_read err -71 [ 2646.584140][ T6192] gspca_spca508: reg_read err -71 [ 2646.604216][ T6192] gspca_spca508: reg write: error -71 [ 2646.604272][ T6192] spca508: probe of 6-1:0.0 failed with error -71 [ 2646.613196][ T6192] usb 6-1: USB disconnect, device number 38 03:36:49 executing program 5: r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x950b0000}, 0x0) 03:36:49 executing program 2: syz_io_uring_setup(0x777f, &(0x7f0000000640)={0x0, 0x0, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 03:36:49 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0473c1ae"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000040)=[@exit_looper, @exit_looper], 0xa4, 0x0, &(0x7f0000000240)="32f7b0b0cbcad6b0ed6d870796a25316090ed9aeb178f970a1bc6daa67c81bc91d03bf4f5652efd36f6a76096ce66d8fc1f10fb17d27f256f733f80b83f3acb1a258c228e08cab89c9baf86cc2e17bf0cf6f21505e1c006f2f324cb560e2a3d673ebd743dd028ad78eb09d2cf8361dd5f9482de64aed0df8bbee05588129c1bfb5eaa0268a126391462a20e9edc3a5a0557274a10fda3e6d469cea49b218ece51405e4e3"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) readahead(r7, 0xa5d, 0x4) (async, rerun: 64) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async, rerun: 64) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:49 executing program 4: pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:36:49 executing program 3: fsopen(&(0x7f00000005c0)='v7\x00', 0x0) 03:36:49 executing program 3: openat$vmci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) syz_usbip_server_init(0x5) fsopen(&(0x7f00000005c0)='v7\x00', 0x0) [ 2647.051363][ T5994] binder: 5989:5994 unknown command 2931913476 [ 2647.051462][ T5994] binder: 5989:5994 ioctl c0306201 20000080 returned -22 03:36:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000100)={'nat\x00'}, &(0x7f0000000040)=0x54) 03:36:49 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18", @ANYRES32, @ANYRES32], &(0x7f0000000140)='GPL\x00', 0x7, 0x8f, &(0x7f0000000180)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:36:49 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x3, 0x3, 0x401}, 0x14}}, 0x0) [ 2647.059232][ T5994] binder: 5989:5994 ioctl c0306201 20001480 returned -14 [ 2647.070988][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 03:36:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40006101, 0x0) 03:36:49 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000022a1f00000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x1f) [ 2647.071052][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 [ 2647.071112][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 [ 2647.071177][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 [ 2647.071237][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 [ 2647.071296][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 [ 2647.071355][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 [ 2647.071415][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 [ 2647.071475][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 [ 2647.073662][ T5995] binder_alloc: binder_alloc_mmap_handler: 5989 20ffc000-20ffd000 already mapped failed -16 [ 2647.182242][ T6003] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 2647.182273][ T6003] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2647.182368][ T6003] vhci_hcd vhci_hcd.0: Device attached [ 2647.183094][ T6005] vhci_hcd: connection closed [ 2647.183394][ T1383] vhci_hcd: stop threads [ 2647.183407][ T1383] vhci_hcd: release socket [ 2647.183421][ T1383] vhci_hcd: disconnect device [ 2647.404017][ T7851] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2647.644167][ T7851] usb 6-1: Using ep0 maxpacket: 16 [ 2647.764368][ T7851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2647.764441][ T7851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2647.764510][ T7851] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2647.764578][ T7851] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2647.764621][ T7851] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2647.764649][ T7851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2648.124239][ T7851] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2648.124273][ T7851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2648.124297][ T7851] usb 6-1: SerialNumber: syz [ 2648.126492][ T7851] usb 6-1: config 0 descriptor?? [ 2648.147711][ T6001] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2648.168418][ T7851] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2648.384137][ T7851] gspca_spca508: reg_read err -32 [ 2648.644142][ T7851] gspca_spca508: reg_read err -71 [ 2648.664253][ T7851] gspca_spca508: reg_read err -71 [ 2648.684131][ T7851] gspca_spca508: reg_read err -71 [ 2648.704083][ T7851] gspca_spca508: reg write: error -71 [ 2648.704136][ T7851] spca508: probe of 6-1:0.0 failed with error -71 [ 2648.714145][ T7851] usb 6-1: USB disconnect, device number 39 03:36:51 executing program 5: r0 = syz_usb_connect(0x0, 0x71, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x6, 0xb3, 0x7f, 0xfb, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:51 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x1ff, 0x13, "e59a291a5a7db8025d74e7f204579327f85bea"}) 03:36:51 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, 0x0) 03:36:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x0, 0x3, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c}}, 0x0) 03:36:51 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x2, &(0x7f00000000c0)) 03:36:51 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0500004000000000"], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:51 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) 03:36:51 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) fsmount(r0, 0x0, 0x0) 03:36:52 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 03:36:52 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 03:36:52 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0500004000000000"], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2649.206339][ T6023] binder: 6021:6023 unknown command 1073741829 [ 2649.206363][ T6023] binder: 6021:6023 ioctl c0306201 20001480 returned -22 03:36:52 executing program 0: bpf$OBJ_GET_PROG(0xa, 0x0, 0x0) [ 2649.332168][ T6035] binder: 6034:6035 unknown command 1073741829 [ 2649.332190][ T6035] binder: 6034:6035 ioctl c0306201 20001480 returned -22 [ 2649.494063][T18213] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2649.734066][T18213] usb 6-1: Using ep0 maxpacket: 16 [ 2649.854236][T18213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2649.854271][T18213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2649.854298][T18213] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2649.854323][T18213] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2649.854347][T18213] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2650.214366][T18213] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2650.214402][T18213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2650.214428][T18213] usb 6-1: SerialNumber: syz [ 2650.216476][T18213] usb 6-1: config 0 descriptor?? [ 2650.244327][ T6029] raw-gadget gadget.5: fail, usb_ep_enable returned -22 [ 2650.258698][T18213] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2650.474069][T18213] gspca_spca508: reg_read err -32 [ 2650.734135][T18213] gspca_spca508: reg_read err -71 [ 2650.754366][T18213] gspca_spca508: reg_read err -71 [ 2650.774174][T18213] gspca_spca508: reg_read err -71 [ 2650.794094][T18213] gspca_spca508: reg write: error -71 [ 2650.794147][T18213] spca508: probe of 6-1:0.0 failed with error -71 [ 2650.804986][T18213] usb 6-1: USB disconnect, device number 40 03:36:53 executing program 5: r0 = syz_usb_connect(0x0, 0x66, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xb3, 0x7f, 0xfb, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:53 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0500004000000000"], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, 0x2, 0x9, 0x301, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x0, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x50) 03:36:53 executing program 3: socketpair(0xa, 0x3, 0x7, &(0x7f0000000000)) 03:36:53 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="182000", @ANYBLOB='\x00\x00\x00\x00\x00\b'], &(0x7f0000000140)='GPL\x00', 0x7, 0x8f, &(0x7f0000000180)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:36:53 executing program 2: bpf$MAP_CREATE(0xd, &(0x7f0000000180), 0x48) 03:36:54 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, 0x2, 0x9, 0x301, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x0, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x50) 03:36:54 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000180), 0x0, &(0x7f0000000240)={0x8}, 0x0) [ 2651.251853][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:54 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:36:54 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000003400)) 03:36:54 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180), 0xcf, 0x0, &(0x7f0000000180)="f436a1a4efc506a102ca7c23117f1761e98c7d8fdf4ab5ed53c5f651a60039bffc79b29554628e43446779ae01f7491b6177a3a932691f7a924ead28cdf554b00814a7c157b092b28859356cccfe6e40de5ef03ee7cdbae6df9c5ae2e2635f99a9ccd9530d1d07215360e773298f2755373eb994172f86dc4afd8e555f1c8d1e06136b6090e7e4e0fa16673365404324ea4cd604eacdcf41092bbaa3db1cdf52a4cdcb01c18ec77e7cb86d8d06120fdd9a9dded219284358ca35180c49fed5376ccc914897d50e065eed3644c5f293"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r5, r6, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, &(0x7f0000000280)}) [ 2651.304800][ T6057] binder: 6047:6057 unknown command 1073741829 [ 2651.304823][ T6057] binder: 6047:6057 ioctl c0306201 20001480 returned -22 03:36:54 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="300100000002010200000000000000000a0000050800044000000005ac00038014000180080001007f00000108000200e0000002060003400004000014000180080001000000000008000200ac1e00010c00028005000100880000002c00018014000300fe88000000000000000000000000010114000400ff0200000000000000000000000000012c00018014000300000000000000a600000000000000000014000400ff01000000000000000000000000000106000340000400000c0002800500010084000000080008400000000006"], 0x130}}, 0x0) [ 2651.376778][ T6065] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2651.430621][ T6070] binder: 6069:6070 ioctl c0306201 20001480 returned -14 [ 2651.469691][ T6072] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2651.484069][ T6073] binder: transaction release 7848 bad object at offset 0, size 0 [ 2651.484090][ T6073] binder: transaction release 7848 bad object at offset 0, size 0 [ 2651.484106][ T6073] binder: transaction release 7848 bad object at offset 0, size 0 [ 2651.484956][ T28] audit: type=1800 audit(2000000214.239:2385): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1168 res=0 errno=0 [ 2651.485934][ T28] audit: type=1804 audit(2000000214.239:2386): pid=6073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3459/file0" dev="sda1" ino=1168 res=1 errno=0 [ 2651.547075][ T1230] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.547128][ T1230] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.594079][T18213] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2651.834003][T18213] usb 6-1: Using ep0 maxpacket: 16 [ 2651.954171][T18213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2651.954212][T18213] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2651.954246][T18213] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2651.954273][T18213] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2652.314245][T18213] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2652.314281][T18213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2652.314305][T18213] usb 6-1: SerialNumber: syz [ 2652.315800][T18213] usb 6-1: config 0 descriptor?? [ 2652.357929][T18213] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2652.574374][T18213] gspca_spca508: reg_read err -32 [ 2652.834097][T18213] gspca_spca508: reg_read err -71 [ 2652.854131][T18213] gspca_spca508: reg_read err -71 [ 2652.874211][T18213] gspca_spca508: reg_read err -71 [ 2652.894190][T18213] gspca_spca508: reg write: error -71 [ 2652.894244][T18213] spca508: probe of 6-1:0.0 failed with error -71 [ 2652.902554][T18213] usb 6-1: USB disconnect, device number 41 03:36:56 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000200)) pipe(&(0x7f0000000480)) 03:36:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, 0x2, 0x9, 0x301, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x0, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x50) 03:36:56 executing program 0: r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) 03:36:56 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x4}, 0x0, 0x0) 03:36:56 executing program 5: r0 = syz_usb_connect(0x0, 0x56, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xb3, 0x7f, 0xfb, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:56 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180), 0xcf, 0x0, &(0x7f0000000180)="f436a1a4efc506a102ca7c23117f1761e98c7d8fdf4ab5ed53c5f651a60039bffc79b29554628e43446779ae01f7491b6177a3a932691f7a924ead28cdf554b00814a7c157b092b28859356cccfe6e40de5ef03ee7cdbae6df9c5ae2e2635f99a9ccd9530d1d07215360e773298f2755373eb994172f86dc4afd8e555f1c8d1e06136b6090e7e4e0fa16673365404324ea4cd604eacdcf41092bbaa3db1cdf52a4cdcb01c18ec77e7cb86d8d06120fdd9a9dded219284358ca35180c49fed5376ccc914897d50e065eed3644c5f293"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) (async) sendfile(r5, r6, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, &(0x7f0000000280)}) 03:36:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 03:36:56 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000000)=0xbda, 0x4) 03:36:56 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x40, 0x2, 0x9, 0x301, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x1}}, @NFCTH_NAME={0x0, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x50) 03:36:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) [ 2653.387344][ T6087] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2653.391456][ T6084] binder: 6076:6084 ioctl c0306201 20001480 returned -14 03:36:56 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180), 0xcf, 0x0, &(0x7f0000000180)="f436a1a4efc506a102ca7c23117f1761e98c7d8fdf4ab5ed53c5f651a60039bffc79b29554628e43446779ae01f7491b6177a3a932691f7a924ead28cdf554b00814a7c157b092b28859356cccfe6e40de5ef03ee7cdbae6df9c5ae2e2635f99a9ccd9530d1d07215360e773298f2755373eb994172f86dc4afd8e555f1c8d1e06136b6090e7e4e0fa16673365404324ea4cd604eacdcf41092bbaa3db1cdf52a4cdcb01c18ec77e7cb86d8d06120fdd9a9dded219284358ca35180c49fed5376ccc914897d50e065eed3644c5f293"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r5, r6, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, &(0x7f0000000280)}) 03:36:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c}}, 0x0) 03:36:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0x2c}}, 0x0) [ 2653.510933][ T6096] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 03:36:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x4b47, 0x0) 03:36:56 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4c000, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000a40)={0xfc, 0x0, &(0x7f0000000900)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0xa, 0x1, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/168, 0xa8, 0x0, 0x21}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x5, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r7}, @flat=@handle={0x73682a85, 0x81}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @register_looper, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/194, 0xc2, 0x2, 0x2}, @flat=@weak_handle={0x77682a85, 0x180, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x400}, @dead_binder_done, @acquire={0x40046305, 0x3}], 0x1a, 0x0, &(0x7f0000000a00)="50371a4aa09800ac7fee9998f635b397fb3de0af01a49fae3df6"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x2}, @register_looper, @free_buffer={0x40086303, r5}], 0x85, 0x0, &(0x7f00000001c0)="b7e9aabe08e93e76ac03e9552b9b10e777ebbf799931302ed7ac7ff4786730717d112ab4e274653e9500a24c32a48e9e48c612888dc68e218ce784c653455593e0a92c4ed6594594baae1f2757e181b6201fa3e47216d04215b9f1d1b328ecb5803490da8c852e60387ef10e143c3cfb7eeb53c8a96cda0c97278cb27bac8070923942ed12"}) r8 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:56 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x2, 0x3}, 0x14}}, 0x0) [ 2653.563578][ T6098] binder: 6097:6098 ioctl c0306201 20001480 returned -14 [ 2653.664145][ T6192] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2653.673316][ T6112] binder: 6110:6112 unknown command 0 [ 2653.673336][ T6112] binder: 6110:6112 ioctl c0306201 20001480 returned -22 [ 2653.924148][ T6192] usb 6-1: Using ep0 maxpacket: 16 [ 2654.084123][ T6192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2654.084157][ T6192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2654.084185][ T6192] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2654.504260][ T6192] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2654.504296][ T6192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2654.504322][ T6192] usb 6-1: SerialNumber: syz [ 2654.506373][ T6192] usb 6-1: config 0 descriptor?? [ 2654.556417][ T6192] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2654.774166][ T6192] gspca_spca508: reg_read err -32 [ 2655.024094][ T6192] gspca_spca508: reg_read err -71 [ 2655.044230][ T6192] gspca_spca508: reg_read err -71 [ 2655.072888][ T6192] gspca_spca508: reg_read err -71 [ 2655.084131][ T6192] gspca_spca508: reg write: error -71 [ 2655.084184][ T6192] spca508: probe of 6-1:0.0 failed with error -71 [ 2655.087058][ T6192] usb 6-1: USB disconnect, device number 42 [ 2655.093386][T14773] udevd[14773]: setting mode of /dev/bus/usb/006/042 to 020664 failed: No such file or directory [ 2655.093529][T14773] udevd[14773]: setting owner of /dev/bus/usb/006/042 to uid=0, gid=0 failed: No such file or directory 03:36:58 executing program 5: r0 = syz_usb_connect(0x0, 0x46, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xb3, 0x7f, 0xfb, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:36:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8910, &(0x7f0000000200)) 03:36:58 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x890d, 0x0) 03:36:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) 03:36:58 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4c000, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000a40)={0xfc, 0x0, &(0x7f0000000900)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0xa, 0x1, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/168, 0xa8, 0x0, 0x21}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x5, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r7}, @flat=@handle={0x73682a85, 0x81}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @register_looper, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/194, 0xc2, 0x2, 0x2}, @flat=@weak_handle={0x77682a85, 0x180, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x400}, @dead_binder_done, @acquire={0x40046305, 0x3}], 0x1a, 0x0, &(0x7f0000000a00)="50371a4aa09800ac7fee9998f635b397fb3de0af01a49fae3df6"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x2}, @register_looper, @free_buffer={0x40086303, r5}], 0x85, 0x0, &(0x7f00000001c0)="b7e9aabe08e93e76ac03e9552b9b10e777ebbf799931302ed7ac7ff4786730717d112ab4e274653e9500a24c32a48e9e48c612888dc68e218ce784c653455593e0a92c4ed6594594baae1f2757e181b6201fa3e47216d04215b9f1d1b328ecb5803490da8c852e60387ef10e143c3cfb7eeb53c8a96cda0c97278cb27bac8070923942ed12"}) (async, rerun: 32) r8 = dup2(r2, r3) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:36:58 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x416403, 0x0) 03:36:58 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x104) 03:36:58 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) 03:36:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8904, &(0x7f0000000200)) 03:36:58 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f00000019c0), 0x145803) [ 2655.593310][ T6125] binder: 6119:6125 unknown command 0 [ 2655.593330][ T6125] binder: 6119:6125 ioctl c0306201 20001480 returned -22 03:36:58 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 64) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4c000, 0x0) (async, rerun: 64) r5 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x4) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000a40)={0xfc, 0x0, &(0x7f0000000900)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0xa, 0x1, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/168, 0xa8, 0x0, 0x21}, @flat=@handle={0x73682a85, 0x1000, 0x1}}, &(0x7f00000003c0)={0x0, 0x20, 0x48}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000700)={@fda={0x66646185, 0x5, 0x0, 0x1e}, @fd={0x66642a85, 0x0, r7}, @flat=@handle={0x73682a85, 0x81}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @register_looper, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/194, 0xc2, 0x2, 0x2}, @flat=@weak_handle={0x77682a85, 0x180, 0x2}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x400}, @dead_binder_done, @acquire={0x40046305, 0x3}], 0x1a, 0x0, &(0x7f0000000a00)="50371a4aa09800ac7fee9998f635b397fb3de0af01a49fae3df6"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x2}, @register_looper, @free_buffer={0x40086303, r5}], 0x85, 0x0, &(0x7f00000001c0)="b7e9aabe08e93e76ac03e9552b9b10e777ebbf799931302ed7ac7ff4786730717d112ab4e274653e9500a24c32a48e9e48c612888dc68e218ce784c653455593e0a92c4ed6594594baae1f2757e181b6201fa3e47216d04215b9f1d1b328ecb5803490da8c852e60387ef10e143c3cfb7eeb53c8a96cda0c97278cb27bac8070923942ed12"}) (async) r8 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (rerun: 32) 03:36:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x2}, 0x0) [ 2655.944075][ T7851] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2656.184073][ T7851] usb 6-1: Using ep0 maxpacket: 16 [ 2656.305726][ T7851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2656.305761][ T7851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 2656.664170][ T7851] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2656.664213][ T7851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2656.664238][ T7851] usb 6-1: SerialNumber: syz [ 2656.667099][ T7851] usb 6-1: config 0 descriptor?? [ 2656.706359][ T7851] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2656.924071][ T7851] gspca_spca508: reg_read err -32 [ 2657.184060][ T7851] gspca_spca508: reg_read err -71 [ 2657.204112][ T7851] gspca_spca508: reg_read err -71 [ 2657.224205][ T7851] gspca_spca508: reg_read err -71 [ 2657.244052][ T7851] gspca_spca508: reg write: error -71 [ 2657.244092][ T7851] spca508: probe of 6-1:0.0 failed with error -71 [ 2657.246741][ T7851] usb 6-1: USB disconnect, device number 43 03:37:00 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000300)='GPL\x00', 0x6, 0xcf, &(0x7f0000000400)=""/207, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, 0x0}, 0x80) 03:37:00 executing program 4: bpf$MAP_CREATE(0x14, &(0x7f0000000180), 0x48) 03:37:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x6a, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bond_slave_1\x00'}) 03:37:00 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x10002, 0x0) 03:37:00 executing program 5: r0 = syz_usb_connect(0x0, 0x3d, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xb3, 0x7f, 0xfb, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) r8 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x11ed9454) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304400000000006630440000000000f630c4001000000000000000000000003630840", @ANYRES64=r8, @ANYBLOB="20d275e5042f9f618846d0ed6ec75313fecac76899754d39053d6ddf4c76b05c45e6d13481ee0d9e6c2212b0f215b0ff162f31497b2b4c4e20ff8162e67c726820673e19f98f3a82f108536e4c8a3d28635f4b314bebc009c68835c445cfd4de92767fad339b78b1bb073316f2cf8cc0f157c9646d3b19ba37c0d7b1a45fcda422512648ea0a414080", @ANYRES64=0x0], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0/file0\x00'}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000001480)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:00 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0xf0}, 0x0) 03:37:00 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x0, 0x0, 0x400}, 0x48) 03:37:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5421, &(0x7f0000000200)) 03:37:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x8, 0x4) 03:37:00 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) r8 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x11ed9454) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304400000000006630440000000000f630c4001000000000000000000000003630840", @ANYRES64=r8, @ANYBLOB="20d275e5042f9f618846d0ed6ec75313fecac76899754d39053d6ddf4c76b05c45e6d13481ee0d9e6c2212b0f215b0ff162f31497b2b4c4e20ff8162e67c726820673e19f98f3a82f108536e4c8a3d28635f4b314bebc009c68835c445cfd4de92767fad339b78b1bb073316f2cf8cc0f157c9646d3b19ba37c0d7b1a45fcda422512648ea0a414080", @ANYRES64=0x0], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0/file0\x00'}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000001480)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r7, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) (async) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x11ed9454) (async) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304400000000006630440000000000f630c4001000000000000000000000003630840", @ANYRES64=r8, @ANYBLOB="20d275e5042f9f618846d0ed6ec75313fecac76899754d39053d6ddf4c76b05c45e6d13481ee0d9e6c2212b0f215b0ff162f31497b2b4c4e20ff8162e67c726820673e19f98f3a82f108536e4c8a3d28635f4b314bebc009c68835c445cfd4de92767fad339b78b1bb073316f2cf8cc0f157c9646d3b19ba37c0d7b1a45fcda422512648ea0a414080", @ANYRES64=0x0], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0/file0\x00'}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000001480)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) 03:37:00 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='cpuhp_multi_enter\x00', r0}, 0x10) 03:37:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000004080500000000000000030000040c000480"], 0x5c}}, 0x0) 03:37:00 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:37:00 executing program 4: msgsnd(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xb3, 0x0) 03:37:00 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000702000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x1f) [ 2657.913307][ T6173] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2658.070141][T21524] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 2658.334155][T21524] usb 6-1: Using ep0 maxpacket: 16 [ 2658.474120][T21524] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2658.844265][T21524] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2658.844313][T21524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2658.844338][T21524] usb 6-1: SerialNumber: syz [ 2658.846475][T21524] usb 6-1: config 0 descriptor?? [ 2658.896608][T21524] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2659.104089][T21524] gspca_spca508: reg_read err -32 [ 2659.364252][T21524] gspca_spca508: reg_read err -71 [ 2659.384232][T21524] gspca_spca508: reg_read err -71 [ 2659.404188][T21524] gspca_spca508: reg_read err -71 [ 2659.424175][T21524] gspca_spca508: reg write: error -71 [ 2659.424212][T21524] spca508: probe of 6-1:0.0 failed with error -71 [ 2659.426520][T21524] usb 6-1: USB disconnect, device number 44 03:37:02 executing program 5: r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xb3, 0x7f, 0xfb, 0x0, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:02 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) r3 = dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) r8 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x11ed9454) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056304400000000006630440000000000f630c4001000000000000000000000003630840", @ANYRES64=r8, @ANYBLOB="20d275e5042f9f618846d0ed6ec75313fecac76899754d39053d6ddf4c76b05c45e6d13481ee0d9e6c2212b0f215b0ff162f31497b2b4c4e20ff8162e67c726820673e19f98f3a82f108536e4c8a3d28635f4b314bebc009c68835c445cfd4de92767fad339b78b1bb073316f2cf8cc0f157c9646d3b19ba37c0d7b1a45fcda422512648ea0a414080", @ANYRES64=0x0], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r7, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0/file0\x00'}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000001480)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r8}], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:02 executing program 2: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000100)) 03:37:02 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000004837e5"], 0x5c}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r0) 03:37:02 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3ff, 0xd3, &(0x7f0000000080)=""/211, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:02 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x2, &(0x7f0000000200)) 03:37:02 executing program 0: syz_open_dev$usbfs(&(0x7f0000000200), 0x152b, 0x2d00b) 03:37:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x80002) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 03:37:02 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000400)) pselect6(0x40, &(0x7f0000000000)={0x6c}, 0x0, 0x0, 0x0, 0x0) 03:37:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x3, 0x0, @remote}, 0x10) 03:37:02 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x202601, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000000)='/sys/kernel/debug/sync/info\x00', &(0x7f0000000040)='./file0\x00', r0) 03:37:02 executing program 4: renameat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') [ 2660.244210][T21524] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 2660.494254][T21524] usb 6-1: Using ep0 maxpacket: 16 [ 2661.014298][T21524] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2661.014335][T21524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2661.014367][T21524] usb 6-1: SerialNumber: syz [ 2661.018173][T21524] usb 6-1: config 0 descriptor?? [ 2661.056601][T21524] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2661.274143][T21524] gspca_spca508: reg_read err -32 [ 2661.534236][T21524] gspca_spca508: reg_read err -71 [ 2661.554226][T21524] gspca_spca508: reg_read err -71 [ 2661.584344][T21524] gspca_spca508: reg_read err -71 [ 2661.604724][T21524] gspca_spca508: reg write: error -71 [ 2661.604784][T21524] spca508: probe of 6-1:0.0 failed with error -71 [ 2661.609468][T21524] usb 6-1: USB disconnect, device number 45 03:37:04 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f0000000040)='GPL\x00', 0x7, 0xa5, &(0x7f0000000080)=""/165, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100), 0x4) 03:37:04 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) r6 = getgid() syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x961a}}, {}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@permit_directio}]}}) r7 = getgid() syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x961a}}, {}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@permit_directio}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x140400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, './binderfs/binder0\x00'}}, {@posixacl}, {@aname={'aname', 0x3d, '\xdf/\x88^+.'}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@version_9p2000}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '+'}}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}]}}) 03:37:04 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) 03:37:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:04 executing program 0: socket(0x28, 0x0, 0x8) 03:37:04 executing program 4: syz_open_dev$usbfs(&(0x7f0000000200), 0x1527, 0x0) 03:37:04 executing program 0: socketpair(0x10, 0x3, 0x0, &(0x7f0000000440)) 03:37:04 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r0, 0x0, 0x0, 0x0) 03:37:04 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) getsockname$inet(r0, 0x0, &(0x7f00000000c0)) [ 2662.094700][ T6218] binder: 6211:6218 ioctl c0306201 20001480 returned -14 03:37:04 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000002010100000000000000000000000008000b008dac7d57"], 0x1c}}, 0x0) [ 2662.151895][ T6221] binder: transaction release 7888 bad object at offset 0, size 0 [ 2662.151919][ T6221] binder: transaction release 7888 bad object at offset 0, size 0 03:37:04 executing program 0: add_key$fscrypt_v1(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffff8) 03:37:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x40000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r2, 0x0) r3 = dup(r1) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)) write$binfmt_misc(r3, &(0x7f00000000c0)=ANY=[], 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) 03:37:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, 0x0, &(0x7f0000000080)) [ 2662.151935][ T6221] binder: transaction release 7888 bad object at offset 0, size 0 [ 2662.364249][T17997] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 2662.604069][T17997] usb 6-1: Using ep0 maxpacket: 16 03:37:05 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="db"], &(0x7f0000000140)='GPL\x00', 0x7, 0x8f, &(0x7f0000000180)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:05 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x24}}, 0x0) [ 2663.084155][T17997] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2663.084192][T17997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2663.084217][T17997] usb 6-1: SerialNumber: syz [ 2663.086501][T17997] usb 6-1: config 0 descriptor?? [ 2663.128210][T17997] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2663.344050][T17997] gspca_spca508: reg_read err -32 [ 2663.604039][T17997] gspca_spca508: reg_read err -71 [ 2663.624104][T17997] gspca_spca508: reg_read err -71 [ 2663.644093][T17997] gspca_spca508: reg_read err -71 [ 2663.664096][T17997] gspca_spca508: reg write: error -71 [ 2663.664160][T17997] spca508: probe of 6-1:0.0 failed with error -71 [ 2663.668462][T17997] usb 6-1: USB disconnect, device number 46 03:37:06 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) r6 = getgid() syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x961a}}, {}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@permit_directio}]}}) (async) r7 = getgid() syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x961a}}, {}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@permit_directio}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x140400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, './binderfs/binder0\x00'}}, {@posixacl}, {@aname={'aname', 0x3d, '\xdf/\x88^+.'}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@version_9p2000}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '+'}}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}]}}) 03:37:06 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x12, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bond_slave_1\x00'}) 03:37:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x40000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r2, 0x0) r3 = dup(r1) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)) write$binfmt_misc(r3, &(0x7f00000000c0)=ANY=[], 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) 03:37:06 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0xe9c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe64, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "894c155c9a68e3126d4fcad44b8eca00ffc7eafd8039bd52169f6773f3d46d1b6664c6270f941083e5868d21864df46b319943c324f216f59ada66a118f69a1c5f9a8a9421987ae1509e0ffe1d5a2f22bc1c39f420e53e12d7f41a278d787f7ef2dd586dc46e23f584e24605fbb884a14b19d3150fd9d8b567eefc95d07c4e6206d029be19213ae51cb9853df5a009f3bdef533b2fca130aca127b04af18877b850cff86b65944f630fb34f38312d2f96daead686a84bf5e60930801f0d83dde579538c3461fb0f551425e946423916ca7"}, @NFTA_DATA_VALUE={0xf9, 0x1, "15a158a98ee623707194bc80b7a5105a2926a82595921aef8d5714dab149004632eb96b2fa2ce19a0dc773a59b33bc6a35696980a609d7d0f4a0017bd87ac9ae41f810623e6360bbb788a6123956d0d93863a24ce46d05c9ec3d5ae580755b31d4eb7cf5b02ff393c3ab075850849bed98c7a3870cde279429119a7fe0a368aa10460639f9e28b3c94555e1b6367c5ea1ca7aa52a2aaf1a4c80c64b3fa6326cdab98a661bdf48d4dfe23b1b5c4d8c77edc6a91529bb2e93e831840e23930a7997b327befe64b3abfc84bf2b1b2cb0bae2ea9adf08c731ec4c84d23588e8ba606d100d3ea3c5ca84ce18742cd5c405a585cc5c4e637"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x360, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "9d251701bc0e1d4676180d0b2cd28cc28e73aab33126c8e70ae9f87e986675d9b7efbc18b6d1326b924c059d1ea2d503d1aa89e919427a0d407a5d7ce584e7d297091e8622c4d57d05f39cb6a6a6911cfcae9c8bb446d9e6f4e14a98fb5b58dc35180fc04bc259b6b471ad483b3a61002d765a4943b7cf43564d7cf1096da34340e7c19982a19298bb3b85bb418997d4f2f5d3b75a1df18ca5ab"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "ea78c5975569c88beec43ee586a59574ea0da5b3952f8190907566bbf6e056dd6a7c5a13ffcb7ff84852978fe2f08320268db9cdbe390ab87f349b001c2fbadb4cac3dde78a72620e3905cf066c791991ff2fe71e2f8c87329c3503de6436414e16e79b26c765d7ba409f38b4c40054b651153021ebf48952f27d6f7db9dada386f0b6f974a48884bb3ede1092267616389d83786c7bbbd0f0533c5c997c0eb3da01e84f978226c63175667f6fa9bba91b59a0f443c95a3531"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "8d15dce87a7f2fadbad812cd4bc983605bd55ed083000c82f3fb1d3c7b826ebabfb0dcfd83796a64a0a71e78181ac62c16e0ed88150bf0862a68f651e570240e5cf4f7905e5882ac8d155dc77a4ee68184f9dd9ce2f6b1b2538cca64f3701933984a0c606e39ddd12f934bfe95c0222ff261b74f5dea083e158a7da2d2f4811552b853e9cf47d9eba9c93603626ba3ee76b44530acf3eb2b1e983aa3cdd4ad8b44ec3d2fb7ccffe7941ce1cad9c40925b86af3379d8574af84e3d54ebbdd987db5e77ca71c2e68ed7c8c5bf9fc0db76cc177d4be89d72060ccab4b8409ef58a59013685e21453d31b00bd04040de95db92"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "fe2348b110d3564be8586a855d0801c43e8585e8dd8a1bb2a877123665b3b596fb75290300993eab3d"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "fed1037f9b5dc9c260820e249a124b01289693339c3e2564df3ba19ac4c75abddf3208bf07"}, @NFTA_DATA_VALUE={0xd5, 0x1, "2a29ecc8da081d9dc81af9cfa93aeeb083acb331f0d7ab640f47688ab8fd7ca8e487e929959c16cebbc9b1ebd68ec0f801a05f0c9dd95ba38f6dfd341a243a9d34a7ae959c61dcb5fd51031964fadd2b4db5911d339f9110ecd338916568638cb8bfa4f87723f330f732b48352797768f591695107fde8e7b38f833eee90b37796459676b8c7535b1fc7f282a7d801c997c9cadf36127ba8c7845f8db59561706e0d4275cd84f99a819c40f5a440b953755b7ecd8bb934d55f8580da2b7e690a06813821cd7fb8b759fae6f31c53e3e0f0"}]}]}, {0x720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x3d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "3657f249115ca8cbbfbd5b1e70561b04c9168326977ab9b0169d93c621195577157ea3289a401e2ab6fe42285abbf8f968b7d5755514e36b38d0a7fe140e82a49bba8ed4bf8009f66a7334de919c79f91f47cce85ab7a8ae8e2bea0b5288c092c16886c82f380444aee8d0c883446090d6c88faa2874c5d1aa309cd97ae3ff5a10f665fe29b0c56288a9b21a89059837a99679f08545b12ef62e6691053138b9243d4dd3cf750a79c67508b6a230915c11a61aa7858a2847fda05ca4df9d7d05c29e8daa672d4f3349f523cba00fc37f43fb1e18226575158d4ca0096cb90c6470581bcf35832405f1"}, @NFTA_DATA_VALUE={0xc9, 0x1, "4a927ada391430f01eb0961c5c0fb8dfe3d951dfddceb46458750094a3fa57ae024c930d7a806f39bcfe74a26055ea9c29bb579768cabf788ab39538f190e47ad8863a18b5749c69b5beea9a814dbf9a349a037c9cd012f31574f7d81538ade7f08ea5b660ffe96dd2d07291d2a7ac9649a25a357c6b076bda9e66d64f1b99f04b4abfe52eacb7212ed94afe9e844df54b66648988abc9d3d26e838c3f68e7e0347435310332d05e5bfee9866717da09b29ba374a43e3bd6cf6295bf767ed869c91f8ca1da"}, @NFTA_DATA_VALUE={0xb1, 0x1, "d4e514af8a1d839c17f4794ffb8843576e21bbf453510540adc4c5eb10487eea670145261cfde7b0eb30554c9fc848d1f018991a05ba8b3e43c69ad2750bf817dacfbeeed3342eaf6fafbeaa69caf1bb9539ba0f57bbe9e350ec8626f5b84bfdf53da21fa077ed6aae1efc415538e45a83f4418ef491a662ccaff0aa9e9659483743bd5246110754890286bb6b51d0097e84e8a9196f70f876cd68089fe6d3e629961d4780eec7bca7b52c8f2b"}, @NFTA_DATA_VALUE={0x61, 0x1, "5f2680cdf725b78177322cf868701106c9eee87f6fcbe1d82d1c72595a7c465d033cd9de9d8e340ba31682a04deb8c7cef030af0843cc6c9ce33c7170391d428fa688bce5ce6e965fa4ca112fe3f6a2b32a554d11291d3c8ebc1b3ec7d"}, @NFTA_DATA_VALUE={0xf9, 0x1, "62e99ea9ebd4032657c932b15a527ab6060f4c6f9e2bd184839eaadb9f0d822c621a2683b231cd7909aa3cd668d9890148bd8d0fdb2cad29a837e164097abab8d7b7ac5e060daa8f389bfb589c0122173283367b49c1595ac074819d3db89953e0c3ab48e15ea49d66e7659aa9c4c72a86d2a1010834d4e91182d6382c7f253745a8b21cd8c76188e9615d3a89f73e245ccf42699c43e12a942ce3b154fb6f36f663b3a1328ce6ecc5ec6bb6f78e4b8c6fb06b16b023bddde2499740e2a45c1cd980a0c3c89dc018f5b1e1607fd9a9f091a4a8037b2cbb4d35db1a21a56309daf20e963b5f066ec49ada768330e5f7d6c7c188cbd1"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x31c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x2de, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 03:37:06 executing program 0: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$usbfs(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x14, 0x11, r0, 0x0) 03:37:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:06 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)) 03:37:06 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0xe9c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe64, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "894c155c9a68e3126d4fcad44b8eca00ffc7eafd8039bd52169f6773f3d46d1b6664c6270f941083e5868d21864df46b319943c324f216f59ada66a118f69a1c5f9a8a9421987ae1509e0ffe1d5a2f22bc1c39f420e53e12d7f41a278d787f7ef2dd586dc46e23f584e24605fbb884a14b19d3150fd9d8b567eefc95d07c4e6206d029be19213ae51cb9853df5a009f3bdef533b2fca130aca127b04af18877b850cff86b65944f630fb34f38312d2f96daead686a84bf5e60930801f0d83dde579538c3461fb0f551425e946423916ca7"}, @NFTA_DATA_VALUE={0xf9, 0x1, "15a158a98ee623707194bc80b7a5105a2926a82595921aef8d5714dab149004632eb96b2fa2ce19a0dc773a59b33bc6a35696980a609d7d0f4a0017bd87ac9ae41f810623e6360bbb788a6123956d0d93863a24ce46d05c9ec3d5ae580755b31d4eb7cf5b02ff393c3ab075850849bed98c7a3870cde279429119a7fe0a368aa10460639f9e28b3c94555e1b6367c5ea1ca7aa52a2aaf1a4c80c64b3fa6326cdab98a661bdf48d4dfe23b1b5c4d8c77edc6a91529bb2e93e831840e23930a7997b327befe64b3abfc84bf2b1b2cb0bae2ea9adf08c731ec4c84d23588e8ba606d100d3ea3c5ca84ce18742cd5c405a585cc5c4e637"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffff382}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x360, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "9d251701bc0e1d4676180d0b2cd28cc28e73aab33126c8e70ae9f87e986675d9b7efbc18b6d1326b924c059d1ea2d503d1aa89e919427a0d407a5d7ce584e7d297091e8622c4d57d05f39cb6a6a6911cfcae9c8bb446d9e6f4e14a98fb5b58dc35180fc04bc259b6b471ad483b3a61002d765a4943b7cf43564d7cf1096da34340e7c19982a19298bb3b85bb418997d4f2f5d3b75a1df18ca5ab8d99"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "ea78c5975569c88beec43ee586a59574ea0da5b3952f8190907566bbf6e056dd6a7c5a13ffcb7ff84852978fe2f08320268db9cdbe390ab87f349b001c2fbadb4cac3dde78a72620e3905cf066c791991ff2fe71e2f8c87329c3503de6436414e16e79b26c765d7ba409f38b4c40054b651153021ebf48952f27d6f7db9dada386f0b6f974a48884bb3ede1092267616389d83786c7bbbd0f0533c5c997c0eb3da01e84f978226c63175667f6fa9bba91b59a0f443c95a3531"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "8d15dce87a7f2fadbad812cd4bc983605bd55ed083000c82f3fb1d3c7b826ebabfb0dcfd83796a64a0a71e78181ac62c16e0ed88150bf0862a68f651e570240e5cf4f7905e5882ac8d155dc77a4ee68184f9dd9ce2f6b1b2538cca64f3701933984a0c606e39ddd12f934bfe95c0222ff261b74f5dea083e158a7da2d2f4811552b853e9cf47d9eba9c93603626ba3ee76b44530acf3eb2b1e983aa3cdd4ad8b44ec3d2fb7ccffe7941ce1cad9c40925b86af3379d8574af84e3d54ebbdd987db5e77ca71c2e68ed7c8c5bf9fc0db76cc177d4be89d72060ccab4b8409ef58a59013685e21453d31b00bd04040de95db92"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "fe2348b110d3564be8586a855d0801c43e8585e8dd8a1bb2a877123665b3b596fb75290300993eab3d"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "fed1037f9b5dc9c260820e249a124b01289693339c3e2564df3ba19ac4c75abddf3208bf076e3999"}, @NFTA_DATA_VALUE={0xd5, 0x1, "2a29ecc8da081d9dc81af9cfa93aeeb083acb331f0d7ab640f47688ab8fd7ca8e487e929959c16cebbc9b1ebd68ec0f801a05f0c9dd95ba38f6dfd341a243a9d34a7ae959c61dcb5fd51031964fadd2b4db5911d339f9110ecd338916568638cb8bfa4f87723f330f732b48352797768f591695107fde8e7b38f833eee90b37796459676b8c7535b1fc7f282a7d801c997c9cadf36127ba8c7845f8db59561706e0d4275cd84f99a819c40f5a440b953755b7ecd8bb934d55f8580da2b7e690a06813821cd7fb8b759fae6f31c53e3e0f0"}]}]}, {0x720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x3d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "3657f249115ca8cbbfbd5b1e70561b04c9168326977ab9b0169d93c621195577157ea3289a401e2ab6fe42285abbf8f968b7d5755514e36b38d0a7fe140e82a49bba8ed4bf8009f66a7334de919c79f91f47cce85ab7a8ae8e2bea0b5288c092c16886c82f380444aee8d0c883446090d6c88faa2874c5d1aa309cd97ae3ff5a10f665fe29b0c56288a9b21a89059837a99679f08545b12ef62e6691053138b9243d4dd3cf750a79c67508b6a230915c11a61aa7858a2847fda05ca4df9d7d05c29e8daa672d4f3349f523cba00fc37f43fb1e18226575158d4ca0096cb90c6470581bcf35832405f1"}, @NFTA_DATA_VALUE={0xc9, 0x1, "4a927ada391430f01eb0961c5c0fb8dfe3d951dfddceb46458750094a3fa57ae024c930d7a806f39bcfe74a26055ea9c29bb579768cabf788ab39538f190e47ad8863a18b5749c69b5beea9a814dbf9a349a037c9cd012f31574f7d81538ade7f08ea5b660ffe96dd2d07291d2a7ac9649a25a357c6b076bda9e66d64f1b99f04b4abfe52eacb7212ed94afe9e844df54b66648988abc9d3d26e838c3f68e7e0347435310332d05e5bfee9866717da09b29ba374a43e3bd6cf6295bf767ed869c91f8ca1da"}, @NFTA_DATA_VALUE={0xb1, 0x1, "d4e514af8a1d839c17f4794ffb8843576e21bbf453510540adc4c5eb10487eea670145261cfde7b0eb30554c9fc848d1f018991a05ba8b3e43c69ad2750bf817dacfbeeed3342eaf6fafbeaa69caf1bb9539ba0f57bbe9e350ec8626f5b84bfdf53da21fa077ed6aae1efc415538e45a83f4418ef491a662ccaff0aa9e9659483743bd5246110754890286bb6b51d0097e84e8a9196f70f876cd68089fe6d3e629961d4780eec7bca7b52c8f2b"}, @NFTA_DATA_VALUE={0x61, 0x1, "5f2680cdf725b78177322cf868701106c9eee87f6fcbe1d82d1c72595a7c465d033cd9de9d8e340ba31682a04deb8c7cef030af0843cc6c9ce33c7170391d428fa688bce5ce6e965fa4ca112fe3f6a2b32a554d11291d3c8ebc1b3ec7d"}, @NFTA_DATA_VALUE={0xf9, 0x1, "62e99ea9ebd4032657c932b15a527ab6060f4c6f9e2bd184839eaadb9f0d822c621a2683b231cd7909aa3cd668d9890148bd8d0fdb2cad29a837e164097abab8d7b7ac5e060daa8f389bfb589c0122173283367b49c1595ac074819d3db89953e0c3ab48e15ea49d66e7659aa9c4c72a86d2a1010834d4e91182d6382c7f253745a8b21cd8c76188e9615d3a89f73e245ccf42699c43e12a942ce3b154fb6f36f663b3a1328ce6ecc5ec6bb6f78e4b8c6fb06b16b023bddde2499740e2a45c1cd980a0c3c89dc018f5b1e1607fd9a9f091a4a8037b2cbb4d35db1a21a56309daf20e963b5f066ec49ada768330e5f7d6c7c188cbd1"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x31c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x2b9, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 03:37:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)={0x50, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) [ 2664.185168][ T6253] binder: 6243:6253 ioctl c0306201 20001480 returned -14 [ 2664.237019][ T6252] binder: transaction release 7894 bad object at offset 0, size 0 [ 2664.237041][ T6252] binder: transaction release 7894 bad object at offset 0, size 0 [ 2664.237056][ T6252] binder: transaction release 7894 bad object at offset 0, size 0 [ 2664.238539][ T6252] fuse: Bad value for 'fd' 03:37:07 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x14, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:07 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x9, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:07 executing program 3: bpf$OBJ_GET_PROG(0xd, &(0x7f00000003c0)={0x0, 0x0, 0x18}, 0x10) [ 2664.674036][T17997] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 2664.914006][T17997] usb 6-1: Using ep0 maxpacket: 16 03:37:07 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x40000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r2, 0x0) r3 = dup(r1) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)) write$binfmt_misc(r3, &(0x7f00000000c0)=ANY=[], 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) 03:37:07 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = getgid() syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x961a}}, {}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@permit_directio}]}}) r7 = getgid() syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x961a}}, {}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@permit_directio}]}}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x140400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cachetag={'cachetag', 0x3d, './binderfs/binder0\x00'}}, {@posixacl}, {@aname={'aname', 0x3d, '\xdf/\x88^+.'}}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@dfltgid={'dfltgid', 0x3d, r7}}, {@version_9p2000}, {@nodevmap}], [{@subj_user={'subj_user', 0x3d, '+'}}, {@seclabel}, {@context={'context', 0x3d, 'staff_u'}}]}}) 03:37:07 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0xe9c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe64, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "894c155c9a68e3126d4fcad44b8eca00ffc7eafd8039bd52169f6773f3d46d1b6664c6270f941083e5868d21864df46b319943c324f216f59ada66a118f69a1c5f9a8a9421987ae1509e0ffe1d5a2f22bc1c39f420e53e12d7f41a278d787f7ef2dd586dc46e23f584e24605fbb884a14b19d3150fd9d8b567eefc95d07c4e6206d029be19213ae51cb9853df5a009f3bdef533b2fca130aca127b04af18877b850cff86b65944f630fb34f38312d2f96daead686a84bf5e60930801f0d83dde579538c3461fb0f551425e946423916ca7"}, @NFTA_DATA_VALUE={0xf9, 0x1, "15a158a98ee623707194bc80b7a5105a2926a82595921aef8d5714dab149004632eb96b2fa2ce19a0dc773a59b33bc6a35696980a609d7d0f4a0017bd87ac9ae41f810623e6360bbb788a6123956d0d93863a24ce46d05c9ec3d5ae580755b31d4eb7cf5b02ff393c3ab075850849bed98c7a3870cde279429119a7fe0a368aa10460639f9e28b3c94555e1b6367c5ea1ca7aa52a2aaf1a4c80c64b3fa6326cdab98a661bdf48d4dfe23b1b5c4d8c77edc6a91529bb2e93e831840e23930a7997b327befe64b3abfc84bf2b1b2cb0bae2ea9adf08c731ec4c84d23588e8ba606d100d3ea3c5ca84ce18742cd5c405a585cc5c4e637"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x360, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "9d251701bc0e1d4676180d0b2cd28cc28e73aab33126c8e70ae9f87e986675d9b7efbc18b6d1326b924c059d1ea2d503d1aa89e919427a0d407a5d7ce584e7d297091e8622c4d57d05f39cb6a6a6911cfcae9c8bb446d9e6f4e14a98fb5b58dc35180fc04bc259b6b471ad483b3a61002d765a4943b7cf43564d7cf1096da34340e7c19982a19298bb3b85bb418997d4f2f5d3b75a1df18ca5"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "ea78c5975569c88beec43ee586a59574ea0da5b3952f8190907566bbf6e056dd6a7c5a13ffcb7ff84852978fe2f08320268db9cdbe390ab87f349b001c2fbadb4cac3dde78a72620e3905cf066c791991ff2fe71e2f8c87329c3503de6436414e16e79b26c765d7ba409f38b4c40054b651153021ebf48952f27d6f7db9dada386f0b6f974a48884bb3ede1092267616389d83786c7bbbd0f0533c5c997c0eb3da01e84f978226c63175667f6fa9bba91b59a0f443c95a3531"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "8d15dce87a7f2fadbad812cd4bc983605bd55ed083000c82f3fb1d3c7b826ebabfb0dcfd83796a64a0a71e78181ac62c16e0ed88150bf0862a68f651e570240e5cf4f7905e5882ac8d155dc77a4ee68184f9dd9ce2f6b1b2538cca64f3701933984a0c606e39ddd12f934bfe95c0222ff261b74f5dea083e158a7da2d2f4811552b853e9cf47d9eba9c93603626ba3ee76b44530acf3eb2b1e983aa3cdd4ad8b44ec3d2fb7ccffe7941ce1cad9c40925b86af3379d8574af84e3d54ebbdd987db5e77ca71c2e68ed7c8c5bf9fc0db76cc177d4be89d72060ccab4b8409ef58a59013685e21453d31b00bd04040de95db92"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "fe2348b110d3564be8586a855d0801c43e8585e8dd8a1bb2a877123665b3b596fb75290300993eab3d"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "fed1037f9b5dc9c260820e249a124b01289693339c3e2564df3ba19ac4c75abddf3208bf07"}, @NFTA_DATA_VALUE={0xd5, 0x1, "2a29ecc8da081d9dc81af9cfa93aeeb083acb331f0d7ab640f47688ab8fd7ca8e487e929959c16cebbc9b1ebd68ec0f801a05f0c9dd95ba38f6dfd341a243a9d34a7ae959c61dcb5fd51031964fadd2b4db5911d339f9110ecd338916568638cb8bfa4f87723f330f732b48352797768f591695107fde8e7b38f833eee90b37796459676b8c7535b1fc7f282a7d801c997c9cadf36127ba8c7845f8db59561706e0d4275cd84f99a819c40f5a440b953755b7ecd8bb934d55f8580da2b7e690a06813821cd7fb8b759fae6f31c53e3e0f0"}]}]}, {0x720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x3d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "3657f249115ca8cbbfbd5b1e70561b04c9168326977ab9b0169d93c621195577157ea3289a401e2ab6fe42285abbf8f968b7d5755514e36b38d0a7fe140e82a49bba8ed4bf8009f66a7334de919c79f91f47cce85ab7a8ae8e2bea0b5288c092c16886c82f380444aee8d0c883446090d6c88faa2874c5d1aa309cd97ae3ff5a10f665fe29b0c56288a9b21a89059837a99679f08545b12ef62e6691053138b9243d4dd3cf750a79c67508b6a230915c11a61aa7858a2847fda05ca4df9d7d05c29e8daa672d4f3349f523cba00fc37f43fb1e18226575158d4ca0096cb90c6470581bcf35832405f1"}, @NFTA_DATA_VALUE={0xc9, 0x1, "4a927ada391430f01eb0961c5c0fb8dfe3d951dfddceb46458750094a3fa57ae024c930d7a806f39bcfe74a26055ea9c29bb579768cabf788ab39538f190e47ad8863a18b5749c69b5beea9a814dbf9a349a037c9cd012f31574f7d81538ade7f08ea5b660ffe96dd2d07291d2a7ac9649a25a357c6b076bda9e66d64f1b99f04b4abfe52eacb7212ed94afe9e844df54b66648988abc9d3d26e838c3f68e7e0347435310332d05e5bfee9866717da09b29ba374a43e3bd6cf6295bf767ed869c91f8ca1da"}, @NFTA_DATA_VALUE={0xb1, 0x1, "d4e514af8a1d839c17f4794ffb8843576e21bbf453510540adc4c5eb10487eea670145261cfde7b0eb30554c9fc848d1f018991a05ba8b3e43c69ad2750bf817dacfbeeed3342eaf6fafbeaa69caf1bb9539ba0f57bbe9e350ec8626f5b84bfdf53da21fa077ed6aae1efc415538e45a83f4418ef491a662ccaff0aa9e9659483743bd5246110754890286bb6b51d0097e84e8a9196f70f876cd68089fe6d3e629961d4780eec7bca7b52c8f2b"}, @NFTA_DATA_VALUE={0x61, 0x1, "5f2680cdf725b78177322cf868701106c9eee87f6fcbe1d82d1c72595a7c465d033cd9de9d8e340ba31682a04deb8c7cef030af0843cc6c9ce33c7170391d428fa688bce5ce6e965fa4ca112fe3f6a2b32a554d11291d3c8ebc1b3ec7d"}, @NFTA_DATA_VALUE={0xf9, 0x1, "62e99ea9ebd4032657c932b15a527ab6060f4c6f9e2bd184839eaadb9f0d822c621a2683b231cd7909aa3cd668d9890148bd8d0fdb2cad29a837e164097abab8d7b7ac5e060daa8f389bfb589c0122173283367b49c1595ac074819d3db89953e0c3ab48e15ea49d66e7659aa9c4c72a86d2a1010834d4e91182d6382c7f253745a8b21cd8c76188e9615d3a89f73e245ccf42699c43e12a942ce3b154fb6f36f663b3a1328ce6ecc5ec6bb6f78e4b8c6fb06b16b023bddde2499740e2a45c1cd980a0c3c89dc018f5b1e1607fd9a9f091a4a8037b2cbb4d35db1a21a56309daf20e963b5f066ec49ada768330e5f7d6c7c188cbd1"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x31c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x2d5, 0x1, "0fbce66c828d17d1ac5006a8e7496518b0f48f4eaaa242d0dbf86f46c4c8abc15c069b9e9a24688583350f4b102a2f95b500026b5434020bf120a5170d014baeb8cf71a96c5a2e95e703521ce6c983f7c1a471b4f572da8e11e3f53822e840d668364b832942651d54f2a409d916e769e1077a60489ef1173c605a09ac0a6cf420a09bdd51e9f8e61e5f3c0c1498a73e9cdd5afad0f0d120bef9ac47e94e12e5e452229a106c20b08f1f9dc2cd612e3174f93a9d04fddc1c8d4939bbf8ca052dbdf554a4d29843cc6a0decc98644bab481d05d08f946646e43d6d86ea4d5792877837b4171d3e2c111dd3041fe0d09d380b630a2d91ea132a7682cc95d5527ef110e066e1d4955f7ebe337702c6591e8e7ca9a25a0c9847abb4bfaf27cea6fbde2e2a5eaa0255848df28680d71954d2f6006e23bac1d50caa0aab9c27ddea4393ff2d76a44de354bc87f308043ba2bf3e69a347a242713064c9362592a9058bb92bdfc0db618890d11475f3ff97b42014aead4883bc29546e1003b86677db34e5146a1242410c878eadd62633e80f37d77f7d8c85d77213e8ed17b14d3762091a0f917e3f10e142eef0163498aca79a611c704779680a3161443c0cf4fb34df41de0b0312b4f894bcdf85feadfb5a7e877553536482eb41d4c0ad0b567465cb0656231dde1a336f613ecda539a6023ae0391a520a47badd4cfa8198f476dd2a3aef7396087d0f468f32f33fd661a01167ac6f81e431fd18ab798f721d063a00442b3eb01ed81d84faf136d301db9d57649204a884726706caaee5f5d12b442da659a54327ff7db53fc1c67fceb2d84870d08bb4fadaaf6519677f7a9941d3d3ab0cc06b6073cf9c056533b49a28fa909b0220ca7aff9e86506808e2308a53c9f07e5886fada348197cf14b4cb09712694e54b1f658261bba998ff46f65892fac4ce8a145228c0c0842e1ed62de566de23511ae0d56cc9c2611e5398531cba0e2dc5c4a2ebafb9df808b94c99e6361d2efb"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 03:37:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xffffffffffffff09, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x0, 0x0, 0x0, {}, ["", "", "", "", ""]}, 0x14}}, 0x0) 03:37:07 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x9, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2665.092572][ T6281] binder: 6280:6281 ioctl c0306201 20001480 returned -14 [ 2665.103532][ T6284] binder_alloc: 6280: binder_alloc_buf, no vma [ 2665.111022][ T6283] binder_alloc: 6280: binder_alloc_buf, no vma [ 2665.194335][T17997] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2665.194372][T17997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2665.194398][T17997] usb 6-1: Product: syz [ 2665.194416][T17997] usb 6-1: Manufacturer: syz [ 2665.194436][T17997] usb 6-1: SerialNumber: syz [ 2665.196797][T17997] usb 6-1: config 0 descriptor?? [ 2665.238476][T17997] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2665.454165][T17997] gspca_spca508: reg_read err -32 [ 2665.714166][T17997] gspca_spca508: reg_read err -71 [ 2665.734385][T17997] gspca_spca508: reg_read err -71 [ 2665.754127][T17997] gspca_spca508: reg_read err -71 [ 2665.774203][T17997] gspca_spca508: reg write: error -71 [ 2665.774258][T17997] spca508: probe of 6-1:0.0 failed with error -71 [ 2665.776227][T17997] usb 6-1: USB disconnect, device number 47 03:37:08 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:08 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) 03:37:08 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x1ff, 0x1, "e5"}) 03:37:08 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x9, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff}, 0x80) 03:37:08 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x52ada93b, 0x4, 0x81, 0x1, 0x3f, 0x5}, {0x8, 0xaf78, 0x5, 0x69, 0x1, 0x80000001}], ['\x00', '\x00']}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) 03:37:08 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) unshare(0x40000000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r2, 0x0) r3 = dup(r1) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000000)) write$binfmt_misc(r3, &(0x7f00000000c0)=ANY=[], 0x4) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) 03:37:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000002090102000100000000000007000001090001007380080001"], 0x2c}}, 0x0) 03:37:09 executing program 4: socket$inet6(0xa, 0x5, 0x2) [ 2666.249946][ T6292] binder: 6289:6292 unknown command 0 [ 2666.249969][ T6292] binder: 6289:6292 ioctl c0306201 20000080 returned -22 03:37:09 executing program 0: bpf$OBJ_GET_PROG(0x13, 0x0, 0x0) 03:37:09 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x52ada93b, 0x4, 0x81, 0x1, 0x3f, 0x5}, {0x8, 0xaf78, 0x5, 0x69, 0x1, 0x80000001}], ['\x00', '\x00']}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) 03:37:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000040)={{0x2, 0x0, @dev}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast2}}) 03:37:09 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB='i'], &(0x7f0000000140)='GPL\x00', 0x7, 0x8f, &(0x7f0000000180)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2666.409919][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2666.456134][ T6307] binder: 6306:6307 unknown command 0 [ 2666.456154][ T6307] binder: 6306:6307 ioctl c0306201 20000080 returned -22 [ 2666.464736][ T6308] binder: BINDER_SET_CONTEXT_MGR already set [ 2666.464746][ T6308] binder: 6306:6308 ioctl 4018620d 20000000 returned -16 [ 2666.584120][T17997] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 2666.824050][T17997] usb 6-1: Using ep0 maxpacket: 16 [ 2667.104083][T17997] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2667.104119][T17997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2667.104144][T17997] usb 6-1: Product: syz [ 2667.104161][T17997] usb 6-1: Manufacturer: syz [ 2667.104178][T17997] usb 6-1: SerialNumber: syz [ 2667.106289][T17997] usb 6-1: config 0 descriptor?? [ 2667.146308][T17997] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2667.584168][T17997] gspca_spca508: reg_read err -71 [ 2667.604359][T17997] gspca_spca508: reg_read err -71 [ 2667.624160][T17997] gspca_spca508: reg_read err -71 [ 2667.644131][T17997] gspca_spca508: reg_read err -71 [ 2667.664161][T17997] gspca_spca508: reg write: error -71 [ 2667.664215][T17997] spca508: probe of 6-1:0.0 failed with error -71 [ 2667.668016][T17997] usb 6-1: USB disconnect, device number 48 03:37:10 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffff1f}, 0x0) 03:37:10 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@cb_func, @map_fd]}, &(0x7f0000000300)='GPL\x00', 0x6, 0xcf, &(0x7f0000000400)=""/207, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:10 executing program 4: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f00000007c0)='keyring\x00', &(0x7f0000000800)={'syz', 0x2}, &(0x7f0000000840)='\x00', 0x0) 03:37:10 executing program 2: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000000040)=ANY=[], 0x1010) 03:37:10 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x52ada93b, 0x4, 0x81, 0x1, 0x3f, 0x5}, {0x8, 0xaf78, 0x5, 0x69, 0x1, 0x80000001}], ['\x00', '\x00']}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r3) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r7, 0x0, 0x0}, 0x0) (async) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x52ada93b, 0x4, 0x81, 0x1, 0x3f, 0x5}, {0x8, 0xaf78, 0x5, 0x69, 0x1, 0x80000001}], ['\x00', '\x00']}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) (async) 03:37:10 executing program 0: bpf$OBJ_GET_PROG(0x7, 0x0, 0x2) 03:37:10 executing program 2: bpf$PROG_LOAD_XDP(0xa, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x1f) [ 2668.120998][ T6322] binder: 6317:6322 unknown command 0 [ 2668.121020][ T6322] binder: 6317:6322 ioctl c0306201 20000080 returned -22 03:37:10 executing program 4: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x202601, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x0) 03:37:10 executing program 3: bpf$OBJ_GET_PROG(0x14, 0x0, 0x0) 03:37:11 executing program 2: bpf$OBJ_GET_PROG(0x17, 0x0, 0x0) [ 2668.186334][ T6327] binder: BINDER_SET_CONTEXT_MGR already set [ 2668.186346][ T6327] binder: 6317:6327 ioctl 40046207 0 returned -16 [ 2668.215933][ T6328] binder: BINDER_SET_CONTEXT_MGR already set 03:37:11 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x894b, &(0x7f0000000200)) [ 2668.215944][ T6328] binder: 6317:6328 ioctl 4018620d 20000000 returned -16 [ 2668.484077][T25453] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 2668.733967][T25453] usb 6-1: Using ep0 maxpacket: 16 [ 2669.024156][T25453] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2669.024191][T25453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2669.024224][T25453] usb 6-1: Product: syz [ 2669.024243][T25453] usb 6-1: Manufacturer: syz [ 2669.024261][T25453] usb 6-1: SerialNumber: syz [ 2669.026358][T25453] usb 6-1: config 0 descriptor?? [ 2669.070685][T25453] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2669.504287][T25453] gspca_spca508: reg_read err -71 [ 2669.524350][T25453] gspca_spca508: reg_read err -71 [ 2669.544246][T25453] gspca_spca508: reg_read err -71 [ 2669.575983][T25453] gspca_spca508: reg_read err -71 [ 2669.594094][T25453] gspca_spca508: reg write: error -71 [ 2669.594149][T25453] spca508: probe of 6-1:0.0 failed with error -71 [ 2669.597756][T25453] usb 6-1: USB disconnect, device number 49 03:37:12 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:12 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x304}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) 03:37:12 executing program 4: r0 = epoll_create(0x51) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x3, r1, &(0x7f0000000080)={0x10000000}) 03:37:12 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x10, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff}, 0x80) 03:37:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x33fe0}}, 0x0) 03:37:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x14a, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r3, 0x14a, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x100, 0x0, &(0x7f00000007c0)=[@decrefs={0x40046307, 0x3}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/158, 0x9e, 0x2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/204, 0xcc, 0x2, 0x14}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0000000000ac7dc173000000852a640700000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a6873000100000000000000000000000013843fed00cfa1a6a549de7b2380000000000000"], &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0xa, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/171, 0xab, 0x0, 0x32}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000600)={0x0, 0x20, 0x48}}}, @acquire_done={0x40106309, 0x3}], 0x6f, 0x0, &(0x7f00000008c0)="296c1158ff455855612302bc98a0500bed8663d413ee49411584570d9a8112929fbab8bffe9265571044e587bfb4449c39584898e788ac3a55044a72652c17b8db4dda451c2fead04560e980d8bd4485ad2fde573776cd13bb711e0df4c3b88b28ca49a7695fa50863ffdd60721c53"}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0452eba2a0375d630440"], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r5, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder0\x00', 0x802, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r5, r6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8914, &(0x7f0000000200)) 03:37:12 executing program 3: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) setns(r0, 0x0) 03:37:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x8}, 0x0) 03:37:12 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0xb, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff}, 0x80) [ 2670.070511][ T6355] binder: 6353:6355 unknown command 2733330948 [ 2670.070533][ T6355] binder: 6353:6355 ioctl c0306201 20000080 returned -22 03:37:12 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x14a, 0x0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r3, 0x14a, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x100, 0x0, &(0x7f00000007c0)=[@decrefs={0x40046307, 0x3}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/158, 0x9e, 0x2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/204, 0xcc, 0x2, 0x14}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0000000000ac7dc173000000852a640700000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a6873000100000000000000000000000013843fed00cfa1a6a549de7b2380000000000000"], &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0xa, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/171, 0xab, 0x0, 0x32}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000600)={0x0, 0x20, 0x48}}}, @acquire_done={0x40106309, 0x3}], 0x6f, 0x0, &(0x7f00000008c0)="296c1158ff455855612302bc98a0500bed8663d413ee49411584570d9a8112929fbab8bffe9265571044e587bfb4449c39584898e788ac3a55044a72652c17b8db4dda451c2fead04560e980d8bd4485ad2fde573776cd13bb711e0df4c3b88b28ca49a7695fa50863ffdd60721c53"}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0452eba2a0375d630440"], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r5, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder0\x00', 0x802, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r5, r6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) io_uring_enter(r1, 0x14a, 0x0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) io_uring_enter(r3, 0x14a, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x100, 0x0, &(0x7f00000007c0)=[@decrefs={0x40046307, 0x3}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/158, 0x9e, 0x2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/204, 0xcc, 0x2, 0x14}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0000000000ac7dc173000000852a640700000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a6873000100000000000000000000000013843fed00cfa1a6a549de7b2380000000000000"], &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0xa, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/171, 0xab, 0x0, 0x32}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000600)={0x0, 0x20, 0x48}}}, @acquire_done={0x40106309, 0x3}], 0x6f, 0x0, &(0x7f00000008c0)="296c1158ff455855612302bc98a0500bed8663d413ee49411584570d9a8112929fbab8bffe9265571044e587bfb4449c39584898e788ac3a55044a72652c17b8db4dda451c2fead04560e980d8bd4485ad2fde573776cd13bb711e0df4c3b88b28ca49a7695fa50863ffdd60721c53"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0452eba2a0375d630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r5, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder0\x00', 0x802, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r5, r6) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) 03:37:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x3, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0x1c}}, 0x0) [ 2670.083575][ T6355] binder: 6353:6355 ioctl c0306201 20001480 returned -14 [ 2670.243035][ T6373] binder: 6371:6373 unknown command 2733330948 [ 2670.243056][ T6373] binder: 6371:6373 ioctl c0306201 20000080 returned -22 [ 2670.250689][ T6373] binder: 6371:6373 ioctl c0306201 20001480 returned -14 [ 2670.288063][ T6376] binder: BINDER_SET_CONTEXT_MGR already set [ 2670.288107][ T6376] binder: 6371:6376 ioctl 40046207 0 returned -16 [ 2670.374088][T17997] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 2670.614046][T17997] usb 6-1: Using ep0 maxpacket: 16 [ 2670.894275][T17997] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2670.894297][T17997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2670.894310][T17997] usb 6-1: Product: syz [ 2670.894320][T17997] usb 6-1: Manufacturer: syz [ 2670.894330][T17997] usb 6-1: SerialNumber: syz [ 2670.895775][T17997] usb 6-1: config 0 descriptor?? [ 2670.936244][T17997] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2671.374191][T17997] gspca_spca508: reg_read err -71 [ 2671.394178][T17997] gspca_spca508: reg_read err -71 [ 2671.414143][T17997] gspca_spca508: reg_read err -71 [ 2671.434115][T17997] gspca_spca508: reg_read err -71 [ 2671.454202][T17997] gspca_spca508: reg write: error -71 [ 2671.454239][T17997] spca508: probe of 6-1:0.0 failed with error -71 [ 2671.458609][T17997] usb 6-1: USB disconnect, device number 50 03:37:14 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:14 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18200000", @ANYRES32], &(0x7f0000000140)='GPL\x00', 0x7, 0x8f, &(0x7f0000000180)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:14 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x5452, &(0x7f0000000040)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bond_slave_1\x00'}) 03:37:14 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:14 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x14a, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r3 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (rerun: 64) io_uring_enter(r3, 0x14a, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x100, 0x0, &(0x7f00000007c0)=[@decrefs={0x40046307, 0x3}, @release={0x40046306, 0x3}, @request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/158, 0x9e, 0x2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/204, 0xcc, 0x2, 0x14}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0000000000ac7dc173000000852a640700000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a6873000100000000000000000000000013843fed00cfa1a6a549de7b2380000000000000"], &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000500)={@fda={0x66646185, 0xa, 0x1, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/171, 0xab, 0x0, 0x32}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000600)={0x0, 0x20, 0x48}}}, @acquire_done={0x40106309, 0x3}], 0x6f, 0x0, &(0x7f00000008c0)="296c1158ff455855612302bc98a0500bed8663d413ee49411584570d9a8112929fbab8bffe9265571044e587bfb4449c39584898e788ac3a55044a72652c17b8db4dda451c2fead04560e980d8bd4485ad2fde573776cd13bb711e0df4c3b88b28ca49a7695fa50863ffdd60721c53"}) (async, rerun: 32) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0452eba2a0375d630440"], 0x0, 0x0, 0x0}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r5, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000980)='./binderfs/binder0\x00', 0x802, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup2(r5, r6) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000000)) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async, rerun: 32) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (rerun: 32) 03:37:14 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x0, @dev}}}, 0x88) 03:37:14 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040)) 03:37:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0xe9c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe64, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "894c155c9a68e3126d4fcad44b8eca00ffc7eafd8039bd52169f6773f3d46d1b6664c6270f941083e5868d21864df46b319943c324f216f59ada66a118f69a1c5f9a8a9421987ae1509e0ffe1d5a2f22bc1c39f420e53e12d7f41a278d787f7ef2dd586dc46e23f584e24605fbb884a14b19d3150fd9d8b567eefc95d07c4e6206d029be19213ae51cb9853df5a009f3bdef533b2fca130aca127b04af18877b850cff86b65944f630fb34f38312d2f96daead686a84bf5e60930801f0d83dde579538c3461fb0f551425e946423916ca7"}, @NFTA_DATA_VALUE={0xf9, 0x1, "15a158a98ee623707194bc80b7a5105a2926a82595921aef8d5714dab149004632eb96b2fa2ce19a0dc773a59b33bc6a35696980a609d7d0f4a0017bd87ac9ae41f810623e6360bbb788a6123956d0d93863a24ce46d05c9ec3d5ae580755b31d4eb7cf5b02ff393c3ab075850849bed98c7a3870cde279429119a7fe0a368aa10460639f9e28b3c94555e1b6367c5ea1ca7aa52a2aaf1a4c80c64b3fa6326cdab98a661bdf48d4dfe23b1b5c4d8c77edc6a91529bb2e93e831840e23930a7997b327befe64b3abfc84bf2b1b2cb0bae2ea9adf08c731ec4c84d23588e8ba606d100d3ea3c5ca84ce18742cd5c405a585cc5c4e637"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffff382}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x360, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "9d251701bc0e1d4676180d0b2cd28cc28e73aab33126c8e70ae9f87e986675d9b7efbc18b6d1326b924c059d1ea2d503d1aa89e919427a0d407a5d7ce584e7d297091e8622c4d57d05f39cb6a6a6911cfcae9c8bb446d9e6f4e14a98fb5b58dc35180fc04bc259b6b471ad483b3a61002d765a4943b7cf43564d7cf1096da34340e7c19982a19298bb3b85bb418997d4f2f5d3b75a1df18ca5ab8d99"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "ea78c5975569c88beec43ee586a59574ea0da5b3952f8190907566bbf6e056dd6a7c5a13ffcb7ff84852978fe2f08320268db9cdbe390ab87f349b001c2fbadb4cac3dde78a72620e3905cf066c791991ff2fe71e2f8c87329c3503de6436414e16e79b26c765d7ba409f38b4c40054b651153021ebf48952f27d6f7db9dada386f0b6f974a48884bb3ede1092267616389d83786c7bbbd0f0533c5c997c0eb3da01e84f978226c63175667f6fa9bba91b59a0f443c95a35311503ce"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "8d15dce87a7f2fadbad812cd4bc983605bd55ed083000c82f3fb1d3c7b826ebabfb0dcfd83796a64a0a71e78181ac62c16e0ed88150bf0862a68f651e570240e5cf4f7905e5882ac8d155dc77a4ee68184f9dd9ce2f6b1b2538cca64f3701933984a0c606e39ddd12f934bfe95c0222ff261b74f5dea083e158a7da2d2f4811552b853e9cf47d9eba9c93603626ba3ee76b44530acf3eb2b1e983aa3cdd4ad8b44ec3d2fb7ccffe7941ce1cad9c40925b86af3379d8574af84e3d54ebbdd987db5e77ca71c2e68ed7c8c5bf9fc0db76cc177d4be89d72060ccab4b8409ef58a59013685e21453d31b00bd04040de95db92"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x2f, 0x6, 0x1, 0x0, "fe2348b110d3564be8586a855d0801c43e8585e8dd8a1bb2a877123665b3b596fb75290300993eab3d6f71"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x110, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "fed1037f9b5dc9c260820e249a124b01289693339c3e2564df3ba19ac4c75abddf3208bf07"}, @NFTA_DATA_VALUE={0xa1, 0x1, "2a29ecc8da081d9dc81af9cfa93aeeb083acb331f0d7ab640f47688ab8fd7ca8e487e929959c16cebbc9b1ebd68ec0f801a05f0c9dd95ba38f6dfd341a243a9d34a7ae959c61dcb5fd51031964fadd2b4db5911d339f9110ecd338916568638cb8bfa4f87723f330f732b48352797768f591695107fde8e7b38f833eee90b37796459676b8c7535b1fc7f282a7d801c997c9cadf36127ba8c7845f8db5"}]}]}, {0x754, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x3b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "3657f249115ca8cbbfbd5b1e70561b04c9168326977ab9b0169d93c621195577157ea3289a401e2ab6fe42285abbf8f968b7d5755514e36b38d0a7fe140e82a49bba8ed4bf8009f66a7334de919c79f91f47cce85ab7a8ae8e2bea0b5288c092c16886c82f380444aee8d0c883446090d6c88faa2874c5d1aa309cd97ae3ff5a10f665fe29b0c56288a9b21a89059837a99679f08545b12ef62e6691053138b9243d4dd3cf750a79c67508b6a230915c11a61aa7858a2847fda05ca4df9d7d05c29e8daa672d4f3349f523cba00fc37f43fb1e18226575158d4ca0096cb90c6470581bcf35832405f1"}, @NFTA_DATA_VALUE={0xa7, 0x1, "4a927ada391430f01eb0961c5c0fb8dfe3d951dfddceb46458750094a3fa57ae024c930d7a806f39bcfe74a26055ea9c29bb579768cabf788ab39538f190e47ad8863a18b5749c69b5beea9a814dbf9a349a037c9cd012f31574f7d81538ade7f08ea5b660ffe96dd2d07291d2a7ac9649a25a357c6b076bda9e66d64f1b99f04b4abfe52eacb7212ed94afe9e844df54b66648988abc9d3d26e838c3f68e7e0347435"}, @NFTA_DATA_VALUE={0xb1, 0x1, "d4e514af8a1d839c17f4794ffb8843576e21bbf453510540adc4c5eb10487eea670145261cfde7b0eb30554c9fc848d1f018991a05ba8b3e43c69ad2750bf817dacfbeeed3342eaf6fafbeaa69caf1bb9539ba0f57bbe9e350ec8626f5b84bfdf53da21fa077ed6aae1efc415538e45a83f4418ef491a662ccaff0aa9e9659483743bd5246110754890286bb6b51d0097e84e8a9196f70f876cd68089fe6d3e629961d4780eec7bca7b52c8f2b"}, @NFTA_DATA_VALUE={0x63, 0x1, "5f2680cdf725b78177322cf868701106c9eee87f6fcbe1d82d1c72595a7c465d033cd9de9d8e340ba31682a04deb8c7cef030af0843cc6c9ce33c7170391d428fa688bce5ce6e965fa4ca112fe3f6a2b32a554d11291d3c8ebc1b3ec7d0e64"}, @NFTA_DATA_VALUE={0xf9, 0x1, "62e99ea9ebd4032657c932b15a527ab6060f4c6f9e2bd184839eaadb9f0d822c621a2683b231cd7909aa3cd668d9890148bd8d0fdb2cad29a837e164097abab8d7b7ac5e060daa8f389bfb589c0122173283367b49c1595ac074819d3db89953e0c3ab48e15ea49d66e7659aa9c4c72a86d2a1010834d4e91182d6382c7f253745a8b21cd8c76188e9615d3a89f73e245ccf42699c43e12a942ce3b154fb6f36f663b3a1328ce6ecc5ec6bb6f78e4b8c6fb06b16b023bddde2499740e2a45c1cd980a0c3c89dc018f5b1e1607fd9a9f091a4a8037b2cbb4d35db1a21a56309daf20e963b5f066ec49ada768330e5f7d6c7c188cbd1"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x374, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x346, 0x1, "0fbce66c828d17d1ac5006a8e7496518b0f48f4eaaa242d0dbf86f46c4c8abc15c069b9e9a24688583350f4b102a2f95b500026b5434020bf120a5170d014baeb8cf71a96c5a2e95e703521ce6c983f7c1a471b4f572da8e11e3f53822e840d668364b832942651d54f2a409d916e769e1077a60489ef1173c605a09ac0a6cf420a09bdd51e9f8e61e5f3c0c1498a73e9cdd5afad0f0d120bef9ac47e94e12e5e452229a106c20b08f1f9dc2cd612e3174f93a9d04fddc1c8d4939bbf8ca052dbdf554a4d29843cc6a0decc98644bab481d05d08f946646e43d6d86ea4d5792877837b4171d3e2c111dd3041fe0d09d380b630a2d91ea132a7682cc95d5527ef110e066e1d4955f7ebe337702c6591e8e7ca9a25a0c9847abb4bfaf27cea6fbde2e2a5eaa0255848df28680d71954d2f6006e23bac1d50caa0aab9c27ddea4393ff2d76a44de354bc87f308043ba2bf3e69a347a242713064c9362592a9058bb92bdfc0db618890d11475f3ff97b42014aead4883bc29546e1003b86677db34e5146a1242410c878eadd62633e80f37d77f7d8c85d77213e8ed17b14d3762091a0f917e3f10e142eef0163498aca79a611c704779680a3161443c0cf4fb34df41de0b0312b4f894bcdf85feadfb5a7e877553536482eb41d4c0ad0b567465cb0656231dde1a336f613ecda539a6023ae0391a520a47badd4cfa8198f476dd2a3aef7396087d0f468f32f33fd661a01167ac6f81e431fd18ab798f721d063a00442b3eb01ed81d84faf136d301db9d57649204a884726706caaee5f5d12b442da659a54327ff7db53fc1c67fceb2d84870d08bb4fadaaf6519677f7a9941d3d3ab0cc06b6073cf9c056533b49a28fa909b0220ca7aff9e86506808e2308a53c9f07e5886fada348197cf14b4cb09712694e54b1f658261bba998ff46f65892fac4ce8a145228c0c0842e1ed62de566de23511ae0d56cc9c2611e5398531cba0e2dc5c4a2ebafb9df808b94c99e6361d2efb9840f9d01d67c6ac28010cf44baac888123387204114d27c8816e54d0f85f98dc05d01cdb2c3f5f0bf34c3a2ac450801262cb58dc52b3df36d6ae6f0769e469de8953d5d64ed82b22ceb2cc86b48be0ccf6bcbb687eb3c97a4627d658b1821d49fbbe44752f01c258781110596e14df9c5"}]}]}]}]}], {0x14}}, 0xec4}}, 0x40) 03:37:14 executing program 3: pipe(0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000080)) pipe(0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) 03:37:14 executing program 0: open$dir(&(0x7f0000000080)='./file0\x00', 0x70142, 0x0) 03:37:14 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0xa, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 03:37:14 executing program 0: r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='%/\x00', 0x0, 0x0) [ 2672.234214][T25453] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 2672.504104][T25453] usb 6-1: Using ep0 maxpacket: 16 [ 2672.796745][T25453] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2672.796781][T25453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2672.796807][T25453] usb 6-1: Product: syz [ 2672.796825][T25453] usb 6-1: Manufacturer: syz [ 2672.796844][T25453] usb 6-1: SerialNumber: syz [ 2672.800471][T25453] usb 6-1: config 0 descriptor?? [ 2672.846161][T25453] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2673.054259][T25453] gspca_spca508: reg_read err -71 [ 2673.074108][T25453] gspca_spca508: reg_read err -71 [ 2673.094170][T25453] gspca_spca508: reg_read err -71 [ 2673.114059][T25453] gspca_spca508: reg_read err -71 [ 2673.135664][T25453] gspca_spca508: reg_read err -71 [ 2673.154057][T25453] gspca_spca508: reg write: error -71 [ 2673.154095][T25453] spca508: probe of 6-1:0.0 failed with error -71 [ 2673.161993][T25453] usb 6-1: USB disconnect, device number 51 03:37:16 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000000)="af3e2f6d", 0x4) 03:37:16 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100a}) dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xc6af) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r6, r7, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}, 0x400}], 0x0, 0x0, 0x0}) 03:37:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8934, &(0x7f0000000200)) 03:37:16 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000480)) select(0x40, &(0x7f0000000180), &(0x7f00000001c0)={0x4}, &(0x7f0000000240)={0x8}, 0x0) 03:37:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa}, 0x48) 03:37:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 03:37:16 executing program 4: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) request_key(&(0x7f0000000500)='big_key\x00', &(0x7f0000000540)={'syz', 0x1}, 0x0, r0) 03:37:16 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)={&(0x7f0000000640)='./file0\x00'}, 0x10) [ 2673.622848][ T6425] binder: 6417:6425 ioctl c0306201 20001480 returned -14 [ 2673.687773][ T28] audit: type=1800 audit(2000000236.439:2387): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1163 res=0 errno=0 03:37:16 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_1\x00'}) 03:37:16 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x4000}, 0x0) 03:37:16 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0xe9c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe64, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "894c155c9a68e3126d4fcad44b8eca00ffc7eafd8039bd52169f6773f3d46d1b6664c6270f941083e5868d21864df46b319943c324f216f59ada66a118f69a1c5f9a8a9421987ae1509e0ffe1d5a2f22bc1c39f420e53e12d7f41a278d787f7ef2dd586dc46e23f584e24605fbb884a14b19d3150fd9d8b567eefc95d07c4e6206d029be19213ae51cb9853df5a009f3bdef533b2fca130aca127b04af18877b850cff86b65944f630fb34f38312d2f96daead686a84bf5e60930801f0d83dde579538c3461fb0f551425e946423916ca7"}, @NFTA_DATA_VALUE={0xf9, 0x1, "15a158a98ee623707194bc80b7a5105a2926a82595921aef8d5714dab149004632eb96b2fa2ce19a0dc773a59b33bc6a35696980a609d7d0f4a0017bd87ac9ae41f810623e6360bbb788a6123956d0d93863a24ce46d05c9ec3d5ae580755b31d4eb7cf5b02ff393c3ab075850849bed98c7a3870cde279429119a7fe0a368aa10460639f9e28b3c94555e1b6367c5ea1ca7aa52a2aaf1a4c80c64b3fa6326cdab98a661bdf48d4dfe23b1b5c4d8c77edc6a91529bb2e93e831840e23930a7997b327befe64b3abfc84bf2b1b2cb0bae2ea9adf08c731ec4c84d23588e8ba606d100d3ea3c5ca84ce18742cd5c405a585cc5c4e637"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffff382}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x360, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "9d251701bc0e1d4676180d0b2cd28cc28e73aab33126c8e70ae9f87e986675d9b7efbc18b6d1326b924c059d1ea2d503d1aa89e919427a0d407a5d7ce584e7d297091e8622c4d57d05f39cb6a6a6911cfcae9c8bb446d9e6f4e14a98fb5b58dc35180fc04bc259b6b471ad483b3a61002d765a4943b7cf43564d7cf1096da34340e7c19982a19298bb3b85bb418997d4f2f5d3b75a1df18ca5ab8d99"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xc0, 0x1, "ea78c5975569c88beec43ee586a59574ea0da5b3952f8190907566bbf6e056dd6a7c5a13ffcb7ff84852978fe2f08320268db9cdbe390ab87f349b001c2fbadb4cac3dde78a72620e3905cf066c791991ff2fe71e2f8c87329c3503de6436414e16e79b26c765d7ba409f38b4c40054b651153021ebf48952f27d6f7db9dada386f0b6f974a48884bb3ede1092267616389d83786c7bbbd0f0533c5c997c0eb3da01e84f978226c63175667f6fa9bba91b59a0f443c95a35311503ce"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "8d15dce87a7f2fadbad812cd4bc983605bd55ed083000c82f3fb1d3c7b826ebabfb0dcfd83796a64a0a71e78181ac62c16e0ed88150bf0862a68f651e570240e5cf4f7905e5882ac8d155dc77a4ee68184f9dd9ce2f6b1b2538cca64f3701933984a0c606e39ddd12f934bfe95c0222ff261b74f5dea083e158a7da2d2f4811552b853e9cf47d9eba9c93603626ba3ee76b44530acf3eb2b1e983aa3cdd4ad8b44ec3d2fb7ccffe7941ce1cad9c40925b86af3379d8574af84e3d54ebbdd987db5e77ca71c2e68ed7c8c5bf9fc0db76cc177d4be89d72060ccab4b8409ef58a59013685e21453d31b00bd04040de95db92"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_USERDATA={0x2f, 0x6, 0x1, 0x0, "fe2348b110d3564be8586a855d0801c43e8585e8dd8a1bb2a877123665b3b596fb75290300993eab3d6f71"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "fed1037f9b5dc9c260820e249a124b01289693339c3e2564df3ba19ac4c75abddf3208bf076e3999"}, @NFTA_DATA_VALUE={0xd5, 0x1, "2a29ecc8da081d9dc81af9cfa93aeeb083acb331f0d7ab640f47688ab8fd7ca8e487e929959c16cebbc9b1ebd68ec0f801a05f0c9dd95ba38f6dfd341a243a9d34a7ae959c61dcb5fd51031964fadd2b4db5911d339f9110ecd338916568638cb8bfa4f87723f330f732b48352797768f591695107fde8e7b38f833eee90b37796459676b8c7535b1fc7f282a7d801c997c9cadf36127ba8c7845f8db59561706e0d4275cd84f99a819c40f5a440b953755b7ecd8bb934d55f8580da2b7e690a06813821cd7fb8b759fae6f31c53e3e0f0"}]}]}, {0x720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x3d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "3657f249115ca8cbbfbd5b1e70561b04c9168326977ab9b0169d93c621195577157ea3289a401e2ab6fe42285abbf8f968b7d5755514e36b38d0a7fe140e82a49bba8ed4bf8009f66a7334de919c79f91f47cce85ab7a8ae8e2bea0b5288c092c16886c82f380444aee8d0c883446090d6c88faa2874c5d1aa309cd97ae3ff5a10f665fe29b0c56288a9b21a89059837a99679f08545b12ef62e6691053138b9243d4dd3cf750a79c67508b6a230915c11a61aa7858a2847fda05ca4df9d7d05c29e8daa672d4f3349f523cba00fc37f43fb1e18226575158d4ca0096cb90c6470581bcf35832405f1"}, @NFTA_DATA_VALUE={0xcb, 0x1, "4a927ada391430f01eb0961c5c0fb8dfe3d951dfddceb46458750094a3fa57ae024c930d7a806f39bcfe74a26055ea9c29bb579768cabf788ab39538f190e47ad8863a18b5749c69b5beea9a814dbf9a349a037c9cd012f31574f7d81538ade7f08ea5b660ffe96dd2d07291d2a7ac9649a25a357c6b076bda9e66d64f1b99f04b4abfe52eacb7212ed94afe9e844df54b66648988abc9d3d26e838c3f68e7e0347435310332d05e5bfee9866717da09b29ba374a43e3bd6cf6295bf767ed869c91f8ca1da8c8e"}, @NFTA_DATA_VALUE={0xb1, 0x1, "d4e514af8a1d839c17f4794ffb8843576e21bbf453510540adc4c5eb10487eea670145261cfde7b0eb30554c9fc848d1f018991a05ba8b3e43c69ad2750bf817dacfbeeed3342eaf6fafbeaa69caf1bb9539ba0f57bbe9e350ec8626f5b84bfdf53da21fa077ed6aae1efc415538e45a83f4418ef491a662ccaff0aa9e9659483743bd5246110754890286bb6b51d0097e84e8a9196f70f876cd68089fe6d3e629961d4780eec7bca7b52c8f2b"}, @NFTA_DATA_VALUE={0x61, 0x1, "5f2680cdf725b78177322cf868701106c9eee87f6fcbe1d82d1c72595a7c465d033cd9de9d8e340ba31682a04deb8c7cef030af0843cc6c9ce33c7170391d428fa688bce5ce6e965fa4ca112fe3f6a2b32a554d11291d3c8ebc1b3ec7d"}, @NFTA_DATA_VALUE={0xf9, 0x1, "62e99ea9ebd4032657c932b15a527ab6060f4c6f9e2bd184839eaadb9f0d822c621a2683b231cd7909aa3cd668d9890148bd8d0fdb2cad29a837e164097abab8d7b7ac5e060daa8f389bfb589c0122173283367b49c1595ac074819d3db89953e0c3ab48e15ea49d66e7659aa9c4c72a86d2a1010834d4e91182d6382c7f253745a8b21cd8c76188e9615d3a89f73e245ccf42699c43e12a942ce3b154fb6f36f663b3a1328ce6ecc5ec6bb6f78e4b8c6fb06b16b023bddde2499740e2a45c1cd980a0c3c89dc018f5b1e1607fd9a9f091a4a8037b2cbb4d35db1a21a56309daf20e963b5f066ec49ada768330e5f7d6c7c188cbd1"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x31c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x2d5, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x40) [ 2673.687823][ T28] audit: type=1804 audit(2000000236.439:2388): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3477/file0" dev="sda1" ino=1163 res=1 errno=0 [ 2673.851257][ T28] audit: type=1400 audit(2000000236.599:2389): avc: denied { ioctl } for pid=6438 comm="syz-executor.4" path="socket:[231912]" dev="sockfs" ino=231912 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2673.914047][T18213] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2674.154098][T18213] usb 6-1: Using ep0 maxpacket: 16 [ 2674.434268][T18213] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2674.434310][T18213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2674.434334][T18213] usb 6-1: Product: syz [ 2674.434351][T18213] usb 6-1: Manufacturer: syz [ 2674.434368][T18213] usb 6-1: SerialNumber: syz [ 2674.438754][T18213] usb 6-1: config 0 descriptor?? [ 2674.478905][T18213] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2674.694131][T18213] gspca_spca508: reg_read err -71 [ 2674.714248][T18213] gspca_spca508: reg_read err -71 [ 2674.734374][T18213] gspca_spca508: reg_read err -71 [ 2674.754175][T18213] gspca_spca508: reg_read err -71 [ 2674.774081][T18213] gspca_spca508: reg_read err -71 [ 2674.794121][T18213] gspca_spca508: reg write: error -71 [ 2674.794201][T18213] spca508: probe of 6-1:0.0 failed with error -71 [ 2674.795998][T18213] usb 6-1: USB disconnect, device number 52 03:37:17 executing program 5: syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan3\x00'}) 03:37:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000), 0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5452, &(0x7f0000000200)) 03:37:17 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x89a0, &(0x7f0000000040)={{0x2, 0x0, @broadcast}, {0x0, @link_local}, 0x12, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bond_slave_1\x00'}) 03:37:17 executing program 0: bpf$MAP_CREATE(0x9, &(0x7f0000000180), 0x48) 03:37:17 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100a}) (async) dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xc6af) (async) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r6, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r6, r7, 0x0, 0x11f06) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}, 0x400}], 0x0, 0x0, 0x0}) 03:37:18 executing program 3: r0 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='%/\x00', &(0x7f00000000c0)='U', 0x1) 03:37:18 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000000900)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f4500000000000000000000000000000000000000000000000000000000000100000101000001000808001c0000000000001c18000000000000000000001a0000000022001e", 0x9f, 0x8800}, {&(0x7f0000011100)="88", 0x1, 0xe000}, {&(0x7f0000000f00)="22001e0000000000001e00080000000008007809140b2a3a0802", 0x1a, 0xf000}], 0x0, &(0x7f00000010c0)={[{@utf8}, {@gid}]}) 03:37:18 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100a}) dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xc6af) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r6, r7, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100a}) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xc6af) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r6, &(0x7f0000001400)="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"/3584, 0xe00) (async) sendfile(r6, r7, 0x0, 0x11f06) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}, 0x400}], 0x0, 0x0, 0x0}) (async) [ 2675.254704][ T6451] binder: BINDER_SET_CONTEXT_MGR already set [ 2675.254716][ T6451] binder: 6448:6451 ioctl 4018620d 20000000 returned -16 03:37:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1820", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\b'], &(0x7f0000000140)='GPL\x00', 0x7, 0x8f, &(0x7f0000000180)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:18 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x1f) 03:37:18 executing program 0: bpf$OBJ_GET_PROG(0xe, &(0x7f00000003c0)={0x0, 0x0, 0x18}, 0x10) [ 2675.412081][ T6467] binder: 6465:6467 ioctl c0306201 20001480 returned -14 [ 2675.470218][ T28] audit: type=1800 audit(2000000238.219:2390): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1159 res=0 errno=0 [ 2675.470267][ T28] audit: type=1804 audit(2000000238.219:2391): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3479/file0" dev="sda1" ino=1159 res=1 errno=0 [ 2675.559054][ T6474] binder_alloc_mmap_handler: 54 callbacks suppressed [ 2675.559076][ T6474] binder_alloc: binder_alloc_mmap_handler: 6465 20ffc000-20ffd000 already mapped failed -16 [ 2675.594240][T21524] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2675.864129][T21524] usb 6-1: Using ep0 maxpacket: 16 [ 2676.144271][T21524] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2676.144305][T21524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2676.144365][T21524] usb 6-1: Product: syz [ 2676.144383][T21524] usb 6-1: Manufacturer: syz [ 2676.144402][T21524] usb 6-1: SerialNumber: syz [ 2676.146552][T21524] usb 6-1: config 0 descriptor?? [ 2676.188261][T21524] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2676.414311][T21524] gspca_spca508: reg_read err -71 [ 2676.436703][T21524] gspca_spca508: reg_read err -71 [ 2676.464107][T21524] gspca_spca508: reg_read err -71 [ 2676.484147][T21524] gspca_spca508: reg_read err -71 [ 2676.506815][T21524] gspca_spca508: reg_read err -71 [ 2676.534203][T21524] gspca_spca508: reg write: error -71 [ 2676.534238][T21524] spca508: probe of 6-1:0.0 failed with error -71 [ 2676.536196][T21524] usb 6-1: USB disconnect, device number 53 03:37:19 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000040)=0x8, 0x4) 03:37:19 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0xe9c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe64, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "894c155c9a68e3126d4fcad44b8eca00ffc7eafd8039bd52169f6773f3d46d1b6664c6270f941083e5868d21864df46b319943c324f216f59ada66a118f69a1c5f9a8a9421987ae1509e0ffe1d5a2f22bc1c39f420e53e12d7f41a278d787f7ef2dd586dc46e23f584e24605fbb884a14b19d3150fd9d8b567eefc95d07c4e6206d029be19213ae51cb9853df5a009f3bdef533b2fca130aca127b04af18877b850cff86b65944f630fb34f38312d2f96daead686a84bf5e60930801f0d83dde579538c3461fb0f551425e946423916ca7"}, @NFTA_DATA_VALUE={0xf9, 0x1, "15a158a98ee623707194bc80b7a5105a2926a82595921aef8d5714dab149004632eb96b2fa2ce19a0dc773a59b33bc6a35696980a609d7d0f4a0017bd87ac9ae41f810623e6360bbb788a6123956d0d93863a24ce46d05c9ec3d5ae580755b31d4eb7cf5b02ff393c3ab075850849bed98c7a3870cde279429119a7fe0a368aa10460639f9e28b3c94555e1b6367c5ea1ca7aa52a2aaf1a4c80c64b3fa6326cdab98a661bdf48d4dfe23b1b5c4d8c77edc6a91529bb2e93e831840e23930a7997b327befe64b3abfc84bf2b1b2cb0bae2ea9adf08c731ec4c84d23588e8ba606d100d3ea3c5ca84ce18742cd5c405a585cc5c4e637"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffff382}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x360, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0x9e, 0x1, "9d251701bc0e1d4676180d0b2cd28cc28e73aab33126c8e70ae9f87e986675d9b7efbc18b6d1326b924c059d1ea2d503d1aa89e919427a0d407a5d7ce584e7d297091e8622c4d57d05f39cb6a6a6911cfcae9c8bb446d9e6f4e14a98fb5b58dc35180fc04bc259b6b471ad483b3a61002d765a4943b7cf43564d7cf1096da34340e7c19982a19298bb3b85bb418997d4f2f5d3b75a1df18ca5ab"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "ea78c5975569c88beec43ee586a59574ea0da5b3952f8190907566bbf6e056dd6a7c5a13ffcb7ff84852978fe2f08320268db9cdbe390ab87f349b001c2fbadb4cac3dde78a72620e3905cf066c791991ff2fe71e2f8c87329c3503de6436414e16e79b26c765d7ba409f38b4c40054b651153021ebf48952f27d6f7db9dada386f0b6f974a48884bb3ede1092267616389d83786c7bbbd0f0533c5c997c0eb3da01e84f978226c63175667f6fa9bba91b59a0f443c95a3531"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "8d15dce87a7f2fadbad812cd4bc983605bd55ed083000c82f3fb1d3c7b826ebabfb0dcfd83796a64a0a71e78181ac62c16e0ed88150bf0862a68f651e570240e5cf4f7905e5882ac8d155dc77a4ee68184f9dd9ce2f6b1b2538cca64f3701933984a0c606e39ddd12f934bfe95c0222ff261b74f5dea083e158a7da2d2f4811552b853e9cf47d9eba9c93603626ba3ee76b44530acf3eb2b1e983aa3cdd4ad8b44ec3d2fb7ccffe7941ce1cad9c40925b86af3379d8574af84e3d54ebbdd987db5e77ca71c2e68ed7c8c5bf9fc0db76cc177d4be89d72060ccab4b8409ef58a59013685e21453d31b00bd04040de95db92"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x200}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "fe2348b110d3564be8586a855d0801c43e8585e8dd8a1bb2a877123665b3b596fb75290300993eab3d"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "fed1037f9b5dc9c260820e249a124b01289693339c3e2564df3ba19ac4c75abddf3208bf076e3999"}, @NFTA_DATA_VALUE={0xd5, 0x1, "2a29ecc8da081d9dc81af9cfa93aeeb083acb331f0d7ab640f47688ab8fd7ca8e487e929959c16cebbc9b1ebd68ec0f801a05f0c9dd95ba38f6dfd341a243a9d34a7ae959c61dcb5fd51031964fadd2b4db5911d339f9110ecd338916568638cb8bfa4f87723f330f732b48352797768f591695107fde8e7b38f833eee90b37796459676b8c7535b1fc7f282a7d801c997c9cadf36127ba8c7845f8db59561706e0d4275cd84f99a819c40f5a440b953755b7ecd8bb934d55f8580da2b7e690a06813821cd7fb8b759fae6f31c53e3e0f0"}]}]}, {0x720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x3d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "3657f249115ca8cbbfbd5b1e70561b04c9168326977ab9b0169d93c621195577157ea3289a401e2ab6fe42285abbf8f968b7d5755514e36b38d0a7fe140e82a49bba8ed4bf8009f66a7334de919c79f91f47cce85ab7a8ae8e2bea0b5288c092c16886c82f380444aee8d0c883446090d6c88faa2874c5d1aa309cd97ae3ff5a10f665fe29b0c56288a9b21a89059837a99679f08545b12ef62e6691053138b9243d4dd3cf750a79c67508b6a230915c11a61aa7858a2847fda05ca4df9d7d05c29e8daa672d4f3349f523cba00fc37f43fb1e18226575158d4ca0096cb90c6470581bcf35832405f1"}, @NFTA_DATA_VALUE={0xc9, 0x1, "4a927ada391430f01eb0961c5c0fb8dfe3d951dfddceb46458750094a3fa57ae024c930d7a806f39bcfe74a26055ea9c29bb579768cabf788ab39538f190e47ad8863a18b5749c69b5beea9a814dbf9a349a037c9cd012f31574f7d81538ade7f08ea5b660ffe96dd2d07291d2a7ac9649a25a357c6b076bda9e66d64f1b99f04b4abfe52eacb7212ed94afe9e844df54b66648988abc9d3d26e838c3f68e7e0347435310332d05e5bfee9866717da09b29ba374a43e3bd6cf6295bf767ed869c91f8ca1da"}, @NFTA_DATA_VALUE={0xb1, 0x1, "d4e514af8a1d839c17f4794ffb8843576e21bbf453510540adc4c5eb10487eea670145261cfde7b0eb30554c9fc848d1f018991a05ba8b3e43c69ad2750bf817dacfbeeed3342eaf6fafbeaa69caf1bb9539ba0f57bbe9e350ec8626f5b84bfdf53da21fa077ed6aae1efc415538e45a83f4418ef491a662ccaff0aa9e9659483743bd5246110754890286bb6b51d0097e84e8a9196f70f876cd68089fe6d3e629961d4780eec7bca7b52c8f2b"}, @NFTA_DATA_VALUE={0x61, 0x1, "5f2680cdf725b78177322cf868701106c9eee87f6fcbe1d82d1c72595a7c465d033cd9de9d8e340ba31682a04deb8c7cef030af0843cc6c9ce33c7170391d428fa688bce5ce6e965fa4ca112fe3f6a2b32a554d11291d3c8ebc1b3ec7d"}, @NFTA_DATA_VALUE={0xf9, 0x1, "62e99ea9ebd4032657c932b15a527ab6060f4c6f9e2bd184839eaadb9f0d822c621a2683b231cd7909aa3cd668d9890148bd8d0fdb2cad29a837e164097abab8d7b7ac5e060daa8f389bfb589c0122173283367b49c1595ac074819d3db89953e0c3ab48e15ea49d66e7659aa9c4c72a86d2a1010834d4e91182d6382c7f253745a8b21cd8c76188e9615d3a89f73e245ccf42699c43e12a942ce3b154fb6f36f663b3a1328ce6ecc5ec6bb6f78e4b8c6fb06b16b023bddde2499740e2a45c1cd980a0c3c89dc018f5b1e1607fd9a9f091a4a8037b2cbb4d35db1a21a56309daf20e963b5f066ec49ada768330e5f7d6c7c188cbd1"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x324, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x319, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x40) 03:37:19 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000b000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x1f) 03:37:19 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x12000000, 0x0, 0x400}, 0x48) 03:37:19 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r0, r1, 0x0, 0x11f06) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x20c, 0x15, 0x1, 0x70bd29, 0x25dfdbfe, {0x31}, [@INET_DIAG_REQ_BYTECODE={0x73, 0x1, "4dd27cc67483baba68c35181c889728bf46bb4aad8fbbaa56fe4ba86f6ce5f3c75a12a88b8aee13131d238043dac8d0bea464b0c0a3eb431d95da9ea39604c5d3977633bbaccc4c20d454e5309ede62d4165b7273b8d9155f55bd992b0e0ad77bed0d460e3e66abbd8e7599c625b60"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "c49e57e4b1c3a113115e12332505bc7aae02cd965ba4af0d002faa3bad92d4f9b8423536583703ef2f8f79b78c944e13ecccdb62ba9e8c78546d9e133683c157aaf0a1bae5e31353e73feea526dfa0e63e85b171a72f37d71dd6fdba492afd33a8f32882351a0d15f516ec1c0568482e37f314b474c0c347a3727459e06ef3"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "41f791b200cbfa0c57cf72d92730dfc17490aac97cfd8e4032963f0cd76a97c04b4e2baf4508112ccc903c43636af177f210ea1570e3bbfc7c61fa7fa765f8c33421afb0a794a53c48679e801a7131334fa72796f3f3737820d512c2a72e0a05c5605d64cc8370c380766d90a92e8d8121d912cf5b3777f69e8a632d19f54da6762a594f526be4e39e4de41092bb9b11c3ec47a1ffcecb003ee869d8ef525cc4af55c4515598b99e7f7a208f1220d2b18430316e2e7d9448d61c9c3487a3e6755374b637a175eff402b3e5d0fb75f348e181865ac960bc7a6f28e88ddb17450838eada779a26c5697bc896dcf36c82deb54ba8bc881ee40418"}]}, 0x20c}, 0x1, 0x0, 0x0, 0xc010}, 0xc0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup2(r4, r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) r7 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x44000) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000500)=0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:19 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0xd, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff}, 0x80) 03:37:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, 0xffffffffffffffff, 0x0) 03:37:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 03:37:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x0, 0x0, 0xffff}, 0x48) [ 2676.962810][ T28] audit: type=1800 audit(2000000239.709:2392): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1165 res=0 errno=0 03:37:19 executing program 3: bpf$OBJ_GET_PROG(0xb, &(0x7f00000003c0)={0x0, 0x0, 0x18}, 0x10) 03:37:19 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18200000", @ANYRES32, @ANYBLOB="0000000000080000186c000001000000000000000600000085000000ad00000005750200f0ffffff182b00", @ANYRES32, @ANYBLOB="00cc"], &(0x7f0000000140)='GPL\x00', 0x7, 0x8f, &(0x7f0000000180)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2676.993075][ T28] audit: type=1804 audit(2000000239.739:2393): pid=6497 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3480/file0" dev="sda1" ino=1165 res=1 errno=0 [ 2677.089301][ T6506] binder: 6493:6506 ioctl c0306201 20001480 returned -14 [ 2677.089995][ T6506] binder_alloc: 6493: binder_alloc_buf, no vma [ 2677.090314][ T6506] binder_alloc: 6493: binder_alloc_buf, no vma [ 2677.244486][T17997] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 2677.484058][T17997] usb 6-1: Using ep0 maxpacket: 16 [ 2677.764163][T17997] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2677.764200][T17997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2677.764226][T17997] usb 6-1: Product: syz [ 2677.764245][T17997] usb 6-1: Manufacturer: syz [ 2677.764264][T17997] usb 6-1: SerialNumber: syz [ 2677.766345][T17997] usb 6-1: config 0 descriptor?? [ 2677.806246][T17997] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2678.244640][T17997] gspca_spca508: reg_read err -71 [ 2678.264179][T17997] gspca_spca508: reg_read err -71 [ 2678.284116][T17997] gspca_spca508: reg_read err -71 [ 2678.304153][T17997] gspca_spca508: reg_read err -71 [ 2678.324064][T17997] gspca_spca508: reg write: error -71 [ 2678.324099][T17997] spca508: probe of 6-1:0.0 failed with error -71 [ 2678.325618][T17997] usb 6-1: USB disconnect, device number 54 03:37:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 03:37:21 executing program 4: mmap$usbfs(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x30, 0xffffffffffffffff, 0x0) 03:37:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="30010000000201"], 0x130}}, 0x0) 03:37:21 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5}, 0x48) 03:37:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x40049409, &(0x7f0000000200)) 03:37:21 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async, rerun: 64) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 64) write(r0, &(0x7f0000001400)="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"/3584, 0xe00) (async) sendfile(r0, r1, 0x0, 0x11f06) (async) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x20c, 0x15, 0x1, 0x70bd29, 0x25dfdbfe, {0x31}, [@INET_DIAG_REQ_BYTECODE={0x73, 0x1, "4dd27cc67483baba68c35181c889728bf46bb4aad8fbbaa56fe4ba86f6ce5f3c75a12a88b8aee13131d238043dac8d0bea464b0c0a3eb431d95da9ea39604c5d3977633bbaccc4c20d454e5309ede62d4165b7273b8d9155f55bd992b0e0ad77bed0d460e3e66abbd8e7599c625b60"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "c49e57e4b1c3a113115e12332505bc7aae02cd965ba4af0d002faa3bad92d4f9b8423536583703ef2f8f79b78c944e13ecccdb62ba9e8c78546d9e133683c157aaf0a1bae5e31353e73feea526dfa0e63e85b171a72f37d71dd6fdba492afd33a8f32882351a0d15f516ec1c0568482e37f314b474c0c347a3727459e06ef3"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "41f791b200cbfa0c57cf72d92730dfc17490aac97cfd8e4032963f0cd76a97c04b4e2baf4508112ccc903c43636af177f210ea1570e3bbfc7c61fa7fa765f8c33421afb0a794a53c48679e801a7131334fa72796f3f3737820d512c2a72e0a05c5605d64cc8370c380766d90a92e8d8121d912cf5b3777f69e8a632d19f54da6762a594f526be4e39e4de41092bb9b11c3ec47a1ffcecb003ee869d8ef525cc4af55c4515598b99e7f7a208f1220d2b18430316e2e7d9448d61c9c3487a3e6755374b637a175eff402b3e5d0fb75f348e181865ac960bc7a6f28e88ddb17450838eada779a26c5697bc896dcf36c82deb54ba8bc881ee40418"}]}, 0x20c}, 0x1, 0x0, 0x0, 0xc010}, 0xc0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r2) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup2(r4, r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async, rerun: 64) r7 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x44000) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000500)=0x1) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:21 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x80108906, 0x0) 03:37:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [], {0x14}}, 0x28}}, 0x0) 03:37:21 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x0, 0x1, &(0x7f00000008c0)=@raw=[@ldst], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:21 executing program 2: pkey_mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0xffffffffffffffff) [ 2678.791808][ T6522] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2678.805803][ T28] audit: type=1800 audit(2000000241.559:2394): pid=6519 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1160 res=0 errno=0 03:37:21 executing program 1: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) (async) sendfile(r0, r1, 0x0, 0x11f06) (async) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x20c, 0x15, 0x1, 0x70bd29, 0x25dfdbfe, {0x31}, [@INET_DIAG_REQ_BYTECODE={0x73, 0x1, "4dd27cc67483baba68c35181c889728bf46bb4aad8fbbaa56fe4ba86f6ce5f3c75a12a88b8aee13131d238043dac8d0bea464b0c0a3eb431d95da9ea39604c5d3977633bbaccc4c20d454e5309ede62d4165b7273b8d9155f55bd992b0e0ad77bed0d460e3e66abbd8e7599c625b60"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "c49e57e4b1c3a113115e12332505bc7aae02cd965ba4af0d002faa3bad92d4f9b8423536583703ef2f8f79b78c944e13ecccdb62ba9e8c78546d9e133683c157aaf0a1bae5e31353e73feea526dfa0e63e85b171a72f37d71dd6fdba492afd33a8f32882351a0d15f516ec1c0568482e37f314b474c0c347a3727459e06ef3"}, @INET_DIAG_REQ_BYTECODE={0xfd, 0x1, "41f791b200cbfa0c57cf72d92730dfc17490aac97cfd8e4032963f0cd76a97c04b4e2baf4508112ccc903c43636af177f210ea1570e3bbfc7c61fa7fa765f8c33421afb0a794a53c48679e801a7131334fa72796f3f3737820d512c2a72e0a05c5605d64cc8370c380766d90a92e8d8121d912cf5b3777f69e8a632d19f54da6762a594f526be4e39e4de41092bb9b11c3ec47a1ffcecb003ee869d8ef525cc4af55c4515598b99e7f7a208f1220d2b18430316e2e7d9448d61c9c3487a3e6755374b637a175eff402b3e5d0fb75f348e181865ac960bc7a6f28e88ddb17450838eada779a26c5697bc896dcf36c82deb54ba8bc881ee40418"}]}, 0x20c}, 0x1, 0x0, 0x0, 0xc010}, 0xc0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r2) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup2(r4, r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x44000) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000500)=0x1) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17, 0x0, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x48) [ 2678.806724][ T28] audit: type=1804 audit(2000000241.559:2395): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3481/file0" dev="sda1" ino=1160 res=1 errno=0 [ 2678.807139][ T28] audit: type=1804 audit(2000000241.559:2396): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3481/file0" dev="sda1" ino=1160 res=1 errno=0 [ 2678.807470][ T28] audit: type=1804 audit(2000000241.559:2397): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3481/file0" dev="sda1" ino=1160 res=1 errno=0 [ 2678.831735][ T28] audit: type=1804 audit(2000000241.569:2398): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3481/file0" dev="sda1" ino=1160 res=1 errno=0 [ 2678.831792][ T28] audit: type=1804 audit(2000000241.569:2399): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3481/file0" dev="sda1" ino=1160 res=1 errno=0 [ 2678.831836][ T28] audit: type=1804 audit(2000000241.569:2400): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3481/file0" dev="sda1" ino=1160 res=1 errno=0 [ 2678.831879][ T28] audit: type=1804 audit(2000000241.569:2401): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3481/file0" dev="sda1" ino=1160 res=1 errno=0 [ 2678.831919][ T28] audit: type=1804 audit(2000000241.579:2402): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3481/file0" dev="sda1" ino=1160 res=1 errno=0 [ 2678.831962][ T28] audit: type=1804 audit(2000000241.579:2403): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3481/file0" dev="sda1" ino=1160 res=1 errno=0 [ 2679.052423][ T6541] binder: BINDER_SET_CONTEXT_MGR already set [ 2679.052435][ T6541] binder: 6538:6541 ioctl 4018620d 20000000 returned -16 [ 2679.124084][ T7851] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 2679.394066][ T7851] usb 6-1: Using ep0 maxpacket: 16 [ 2679.674089][ T7851] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2679.674125][ T7851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2679.674151][ T7851] usb 6-1: Product: syz [ 2679.674169][ T7851] usb 6-1: Manufacturer: syz [ 2679.674188][ T7851] usb 6-1: SerialNumber: syz [ 2679.676487][ T7851] usb 6-1: config 0 descriptor?? [ 2679.716281][ T7851] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2679.937072][ T7851] gspca_spca508: reg_read err -71 [ 2679.954046][ T7851] gspca_spca508: reg_read err -71 [ 2679.974044][ T7851] gspca_spca508: reg_read err -71 [ 2679.994092][ T7851] gspca_spca508: reg_read err -71 [ 2680.014158][ T7851] gspca_spca508: reg_read err -71 [ 2680.034085][ T7851] gspca_spca508: reg write: error -71 [ 2680.034125][ T7851] spca508: probe of 6-1:0.0 failed with error -71 [ 2680.040173][ T7851] usb 6-1: USB disconnect, device number 55 03:37:23 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 03:37:23 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000241, 0x0) 03:37:23 executing program 3: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x719e00, 0x0) 03:37:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) 03:37:23 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8903, &(0x7f0000000200)) 03:37:23 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x802, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:23 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 03:37:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfd}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, 0x0, 0x400, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}}, 0x4040) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 03:37:23 executing program 0: r0 = epoll_create1(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)) 03:37:23 executing program 4: bpf$OBJ_GET_PROG(0x9, &(0x7f00000003c0)={0x0, 0x0, 0x18}, 0x10) 03:37:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) 03:37:23 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x802, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2680.503848][ T6549] binder: 6544:6549 ioctl c0306201 20001480 returned -14 [ 2680.685580][ T6571] binder: 6566:6571 ioctl c0306201 20001480 returned -14 [ 2680.794035][ T7851] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 2681.036355][ T7851] usb 6-1: Using ep0 maxpacket: 16 [ 2681.314088][ T7851] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2681.314121][ T7851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2681.314147][ T7851] usb 6-1: Product: syz [ 2681.314164][ T7851] usb 6-1: Manufacturer: syz [ 2681.314179][ T7851] usb 6-1: SerialNumber: syz [ 2681.316648][ T7851] usb 6-1: config 0 descriptor?? [ 2681.358516][ T7851] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2681.574087][ T7851] gspca_spca508: reg_read err -71 [ 2681.594055][ T7851] gspca_spca508: reg_read err -71 [ 2681.614167][ T7851] gspca_spca508: reg_read err -71 [ 2681.634067][ T7851] gspca_spca508: reg_read err -71 [ 2681.654063][ T7851] gspca_spca508: reg_read err -71 [ 2681.674147][ T7851] gspca_spca508: reg write: error -71 [ 2681.674182][ T7851] spca508: probe of 6-1:0.0 failed with error -71 [ 2681.680351][ T7851] usb 6-1: USB disconnect, device number 56 03:37:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 03:37:24 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) 03:37:24 executing program 3: r0 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='/sys/kernel/debug/sync/info\x00', &(0x7f00000000c0)='/sys/kernel/debug/sync/info\x00', 0x0) 03:37:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x802, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:24 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYBLOB="84c66900331d83711683"], &(0x7f0000000140)='GPL\x00', 0x7, 0x8f, &(0x7f0000000180)=""/143, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:24 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x6c) 03:37:24 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x401}, 0x14}}, 0x0) 03:37:24 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x12, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x1f) 03:37:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0xe9c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xe64, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "894c155c9a68e3126d4fcad44b8eca00ffc7eafd8039bd52169f6773f3d46d1b6664c6270f941083e5868d21864df46b319943c324f216f59ada66a118f69a1c5f9a8a9421987ae1509e0ffe1d5a2f22bc1c39f420e53e12d7f41a278d787f7ef2dd586dc46e23f584e24605fbb884a14b19d3150fd9d8b567eefc95d07c4e6206d029be19213ae51cb9853df5a009f3bdef533b2fca130aca127b04af18877b850cff86b65944f630fb34f38312d2f96daead686a84bf5e60930801f0d83dde579538c3461fb0f551425e946423916ca7"}, @NFTA_DATA_VALUE={0xf9, 0x1, "15a158a98ee623707194bc80b7a5105a2926a82595921aef8d5714dab149004632eb96b2fa2ce19a0dc773a59b33bc6a35696980a609d7d0f4a0017bd87ac9ae41f810623e6360bbb788a6123956d0d93863a24ce46d05c9ec3d5ae580755b31d4eb7cf5b02ff393c3ab075850849bed98c7a3870cde279429119a7fe0a368aa10460639f9e28b3c94555e1b6367c5ea1ca7aa52a2aaf1a4c80c64b3fa6326cdab98a661bdf48d4dfe23b1b5c4d8c77edc6a91529bb2e93e831840e23930a7997b327befe64b3abfc84bf2b1b2cb0bae2ea9adf08c731ec4c84d23588e8ba606d100d3ea3c5ca84ce18742cd5c405a585cc5c4e637"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffff382}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x360, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "9d251701bc0e1d4676180d0b2cd28cc28e73aab33126c8e70ae9f87e986675d9b7efbc18b6d1326b924c059d1ea2d503d1aa89e919427a0d407a5d7ce584e7d297091e8622c4d57d05f39cb6a6a6911cfcae9c8bb446d9e6f4e14a98fb5b58dc35180fc04bc259b6b471ad483b3a61002d765a4943b7cf43564d7cf1096da34340e7c19982a19298bb3b85bb418997d4f2f5d3b75a1df18ca5"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "ea78c5975569c88beec43ee586a59574ea0da5b3952f8190907566bbf6e056dd6a7c5a13ffcb7ff84852978fe2f08320268db9cdbe390ab87f349b001c2fbadb4cac3dde78a72620e3905cf066c791991ff2fe71e2f8c87329c3503de6436414e16e79b26c765d7ba409f38b4c40054b651153021ebf48952f27d6f7db9dada386f0b6f974a48884bb3ede1092267616389d83786c7bbbd0f0533c5c997c0eb3da01e84f978226c63175667f6fa9bba91b59a0f443c95a3531"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "8d15dce87a7f2fadbad812cd4bc983605bd55ed083000c82f3fb1d3c7b826ebabfb0dcfd83796a64a0a71e78181ac62c16e0ed88150bf0862a68f651e570240e5cf4f7905e5882ac8d155dc77a4ee68184f9dd9ce2f6b1b2538cca64f3701933984a0c606e39ddd12f934bfe95c0222ff261b74f5dea083e158a7da2d2f4811552b853e9cf47d9eba9c93603626ba3ee76b44530acf3eb2b1e983aa3cdd4ad8b44ec3d2fb7ccffe7941ce1cad9c40925b86af3379d8574af84e3d54ebbdd987db5e77ca71c2e68ed7c8c5bf9fc0db76cc177d4be89d72060ccab4b8409ef58a59013685e21453d31b00bd04040de95db92"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "fe2348b110d3564be8586a855d0801c43e8585e8dd8a1bb2a877123665b3b596fb75290300993eab3d"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "fed1037f9b5dc9c260820e249a124b01289693339c3e2564df3ba19ac4c75abddf3208bf07"}, @NFTA_DATA_VALUE={0xd5, 0x1, "2a29ecc8da081d9dc81af9cfa93aeeb083acb331f0d7ab640f47688ab8fd7ca8e487e929959c16cebbc9b1ebd68ec0f801a05f0c9dd95ba38f6dfd341a243a9d34a7ae959c61dcb5fd51031964fadd2b4db5911d339f9110ecd338916568638cb8bfa4f87723f330f732b48352797768f591695107fde8e7b38f833eee90b37796459676b8c7535b1fc7f282a7d801c997c9cadf36127ba8c7845f8db59561706e0d4275cd84f99a819c40f5a440b953755b7ecd8bb934d55f8580da2b7e690a06813821cd7fb8b759fae6f31c53e3e0f0"}]}]}, {0x720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x3d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "3657f249115ca8cbbfbd5b1e70561b04c9168326977ab9b0169d93c621195577157ea3289a401e2ab6fe42285abbf8f968b7d5755514e36b38d0a7fe140e82a49bba8ed4bf8009f66a7334de919c79f91f47cce85ab7a8ae8e2bea0b5288c092c16886c82f380444aee8d0c883446090d6c88faa2874c5d1aa309cd97ae3ff5a10f665fe29b0c56288a9b21a89059837a99679f08545b12ef62e6691053138b9243d4dd3cf750a79c67508b6a230915c11a61aa7858a2847fda05ca4df9d7d05c29e8daa672d4f3349f523cba00fc37f43fb1e18226575158d4ca0096cb90c6470581bcf35832405f1"}, @NFTA_DATA_VALUE={0xc9, 0x1, "4a927ada391430f01eb0961c5c0fb8dfe3d951dfddceb46458750094a3fa57ae024c930d7a806f39bcfe74a26055ea9c29bb579768cabf788ab39538f190e47ad8863a18b5749c69b5beea9a814dbf9a349a037c9cd012f31574f7d81538ade7f08ea5b660ffe96dd2d07291d2a7ac9649a25a357c6b076bda9e66d64f1b99f04b4abfe52eacb7212ed94afe9e844df54b66648988abc9d3d26e838c3f68e7e0347435310332d05e5bfee9866717da09b29ba374a43e3bd6cf6295bf767ed869c91f8ca1da"}, @NFTA_DATA_VALUE={0xb1, 0x1, "d4e514af8a1d839c17f4794ffb8843576e21bbf453510540adc4c5eb10487eea670145261cfde7b0eb30554c9fc848d1f018991a05ba8b3e43c69ad2750bf817dacfbeeed3342eaf6fafbeaa69caf1bb9539ba0f57bbe9e350ec8626f5b84bfdf53da21fa077ed6aae1efc415538e45a83f4418ef491a662ccaff0aa9e9659483743bd5246110754890286bb6b51d0097e84e8a9196f70f876cd68089fe6d3e629961d4780eec7bca7b52c8f2b"}, @NFTA_DATA_VALUE={0x61, 0x1, "5f2680cdf725b78177322cf868701106c9eee87f6fcbe1d82d1c72595a7c465d033cd9de9d8e340ba31682a04deb8c7cef030af0843cc6c9ce33c7170391d428fa688bce5ce6e965fa4ca112fe3f6a2b32a554d11291d3c8ebc1b3ec7d"}, @NFTA_DATA_VALUE={0xf9, 0x1, "62e99ea9ebd4032657c932b15a527ab6060f4c6f9e2bd184839eaadb9f0d822c621a2683b231cd7909aa3cd668d9890148bd8d0fdb2cad29a837e164097abab8d7b7ac5e060daa8f389bfb589c0122173283367b49c1595ac074819d3db89953e0c3ab48e15ea49d66e7659aa9c4c72a86d2a1010834d4e91182d6382c7f253745a8b21cd8c76188e9615d3a89f73e245ccf42699c43e12a942ce3b154fb6f36f663b3a1328ce6ecc5ec6bb6f78e4b8c6fb06b16b023bddde2499740e2a45c1cd980a0c3c89dc018f5b1e1607fd9a9f091a4a8037b2cbb4d35db1a21a56309daf20e963b5f066ec49ada768330e5f7d6c7c188cbd1"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x324, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x319, 0x1, "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"}]}]}]}]}], {0x14}}, 0xec4}}, 0x0) 03:37:24 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0, 0x0, 0x28}, 0x10) 03:37:24 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2682.105465][ T6583] binder: 6575:6583 ioctl c0306201 20001480 returned -14 03:37:25 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x16, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff}, 0x80) [ 2682.228864][ T6592] binder: 6587:6592 ioctl c0306201 20001480 returned -14 [ 2682.282007][ T6596] binder: 6587:6596 ioctl c0189379 20000040 returned -22 [ 2682.282393][ T6596] binder: transaction release 7962 bad object at offset 0, size 0 [ 2682.282411][ T6596] binder: transaction release 7962 bad object at offset 0, size 0 [ 2682.282427][ T6596] binder: transaction release 7962 bad object at offset 0, size 0 [ 2682.464117][ T6192] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 2682.714176][ T6192] usb 6-1: Using ep0 maxpacket: 16 [ 2683.054323][ T6192] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2683.054357][ T6192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2683.054383][ T6192] usb 6-1: Product: syz [ 2683.054399][ T6192] usb 6-1: Manufacturer: syz [ 2683.054418][ T6192] usb 6-1: SerialNumber: syz [ 2683.056463][ T6192] usb 6-1: config 0 descriptor?? [ 2683.097298][ T6192] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2683.324118][ T6192] gspca_spca508: reg_read err -71 [ 2683.344246][ T6192] gspca_spca508: reg_read err -71 [ 2683.364441][ T6192] gspca_spca508: reg_read err -71 [ 2683.384076][ T6192] gspca_spca508: reg_read err -71 [ 2683.404713][ T6192] gspca_spca508: reg_read err -71 [ 2683.428111][ T6192] gspca_spca508: reg write: error -71 [ 2683.428147][ T6192] spca508: probe of 6-1:0.0 failed with error -71 [ 2683.434279][ T6192] usb 6-1: USB disconnect, device number 57 03:37:26 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002a40)={0x1c, 0x0, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:26 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x1d, 0xf4240, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x1f) 03:37:26 executing program 4: syz_open_dev$usbfs(&(0x7f0000000200), 0x152b, 0x201) 03:37:26 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff}, 0x80) 03:37:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x1100}, 0x48) 03:37:26 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000040)) 03:37:26 executing program 2: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) utimensat(r0, 0x0, 0x0, 0x0) [ 2683.859958][ T6607] binder: 6603:6607 ioctl c0306201 20001480 returned -14 03:37:26 executing program 4: add_key$fscrypt_v1(&(0x7f0000000980), 0x0, &(0x7f0000000a00)={0x0, "13f4086901d378d2ef650d8d658223f080975021bd7dc7c43f8270cb3e703ecd8a77f8a6a02baf367cc725d1d260ca2b9855256bd778c1bb886a323b79b7fa45"}, 0x48, 0xfffffffffffffff8) [ 2683.910308][ T6606] binder: 6603:6606 ioctl c0189379 20000040 returned -22 [ 2683.911146][ T6613] binder: transaction release 7968 bad object at offset 0, size 0 03:37:26 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x2}, 0x48) 03:37:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x894c, 0x0) [ 2683.911164][ T6613] binder: transaction release 7968 bad object at offset 0, size 0 [ 2683.911178][ T6613] binder: transaction release 7968 bad object at offset 0, size 0 03:37:26 executing program 4: r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20040, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, 0x0) [ 2684.214129][ T6192] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 2684.464011][ T6192] usb 6-1: Using ep0 maxpacket: 16 [ 2684.784119][ T6192] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2684.784153][ T6192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2684.784178][ T6192] usb 6-1: Product: syz [ 2684.784191][ T6192] usb 6-1: Manufacturer: syz [ 2684.784201][ T6192] usb 6-1: SerialNumber: syz [ 2684.785587][ T6192] usb 6-1: config 0 descriptor?? [ 2684.826353][ T6192] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2685.044072][ T6192] gspca_spca508: reg_read err -71 [ 2685.064146][ T6192] gspca_spca508: reg_read err -71 [ 2685.084237][ T6192] gspca_spca508: reg_read err -71 [ 2685.104116][ T6192] gspca_spca508: reg_read err -71 [ 2685.124073][ T6192] gspca_spca508: reg_read err -71 [ 2685.144174][ T6192] gspca_spca508: reg write: error -71 [ 2685.144228][ T6192] spca508: probe of 6-1:0.0 failed with error -71 [ 2685.151144][ T6192] usb 6-1: USB disconnect, device number 58 03:37:28 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002a40)={0x1c, 0x0, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0x1e9c, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1e64, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}, {0x5e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "894c155c9a68e3126d4fcad44b8eca00ffc7eafd8039bd52169f6773f3d46d1b6664c6270f941083e5868d21864df46b319943c324f216f59ada66a118f69a1c5f9a8a9421987ae1509e0ffe1d5a2f22bc1c39f420e53e12d7f41a278d787f7ef2dd586dc46e23f584e24605fbb884a14b19d3150fd9d8b567eefc95d07c4e6206d029be19213ae51cb9853df5a009f3bdef533b2fca130aca127b04af18877b850cff86b65944f630fb34f38312d2f96daead686a84bf5e60930801f0d83dde579538c3461fb0f551425e946423916ca7"}, @NFTA_DATA_VALUE={0xf9, 0x1, "15a158a98ee623707194bc80b7a5105a2926a82595921aef8d5714dab149004632eb96b2fa2ce19a0dc773a59b33bc6a35696980a609d7d0f4a0017bd87ac9ae41f810623e6360bbb788a6123956d0d93863a24ce46d05c9ec3d5ae580755b31d4eb7cf5b02ff393c3ab075850849bed98c7a3870cde279429119a7fe0a368aa10460639f9e28b3c94555e1b6367c5ea1ca7aa52a2aaf1a4c80c64b3fa6326cdab98a661bdf48d4dfe23b1b5c4d8c77edc6a91529bb2e93e831840e23930a7997b327befe64b3abfc84bf2b1b2cb0bae2ea9adf08c731ec4c84d23588e8ba606d100d3ea3c5ca84ce18742cd5c405a585cc5c4e637"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x360, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x9d, 0x1, "9d251701bc0e1d4676180d0b2cd28cc28e73aab33126c8e70ae9f87e986675d9b7efbc18b6d1326b924c059d1ea2d503d1aa89e919427a0d407a5d7ce584e7d297091e8622c4d57d05f39cb6a6a6911cfcae9c8bb446d9e6f4e14a98fb5b58dc35180fc04bc259b6b471ad483b3a61002d765a4943b7cf43564d7cf1096da34340e7c19982a19298bb3b85bb418997d4f2f5d3b75a1df18ca5"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "ea78c5975569c88beec43ee586a59574ea0da5b3952f8190907566bbf6e056dd6a7c5a13ffcb7ff84852978fe2f08320268db9cdbe390ab87f349b001c2fbadb4cac3dde78a72620e3905cf066c791991ff2fe71e2f8c87329c3503de6436414e16e79b26c765d7ba409f38b4c40054b651153021ebf48952f27d6f7db9dada386f0b6f974a48884bb3ede1092267616389d83786c7bbbd0f0533c5c997c0eb3da01e84f978226c63175667f6fa9bba91b59a0f443c95a3531"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf5, 0x1, "8d15dce87a7f2fadbad812cd4bc983605bd55ed083000c82f3fb1d3c7b826ebabfb0dcfd83796a64a0a71e78181ac62c16e0ed88150bf0862a68f651e570240e5cf4f7905e5882ac8d155dc77a4ee68184f9dd9ce2f6b1b2538cca64f3701933984a0c606e39ddd12f934bfe95c0222ff261b74f5dea083e158a7da2d2f4811552b853e9cf47d9eba9c93603626ba3ee76b44530acf3eb2b1e983aa3cdd4ad8b44ec3d2fb7ccffe7941ce1cad9c40925b86af3379d8574af84e3d54ebbdd987db5e77ca71c2e68ed7c8c5bf9fc0db76cc177d4be89d72060ccab4b8409ef58a59013685e21453d31b00bd04040de95db92"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "fe2348b110d3564be8586a855d0801c43e8585e8dd8a1bb2a877123665b3b596fb75290300993eab3d"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0x144, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "fed1037f9b5dc9c260820e249a124b01289693339c3e2564df3ba19ac4c75abddf3208bf07"}, @NFTA_DATA_VALUE={0xd5, 0x1, "2a29ecc8da081d9dc81af9cfa93aeeb083acb331f0d7ab640f47688ab8fd7ca8e487e929959c16cebbc9b1ebd68ec0f801a05f0c9dd95ba38f6dfd341a243a9d34a7ae959c61dcb5fd51031964fadd2b4db5911d339f9110ecd338916568638cb8bfa4f87723f330f732b48352797768f591695107fde8e7b38f833eee90b37796459676b8c7535b1fc7f282a7d801c997c9cadf36127ba8c7845f8db59561706e0d4275cd84f99a819c40f5a440b953755b7ecd8bb934d55f8580da2b7e690a06813821cd7fb8b759fae6f31c53e3e0f0"}]}]}, {0x1720, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x3d4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "3657f249115ca8cbbfbd5b1e70561b04c9168326977ab9b0169d93c621195577157ea3289a401e2ab6fe42285abbf8f968b7d5755514e36b38d0a7fe140e82a49bba8ed4bf8009f66a7334de919c79f91f47cce85ab7a8ae8e2bea0b5288c092c16886c82f380444aee8d0c883446090d6c88faa2874c5d1aa309cd97ae3ff5a10f665fe29b0c56288a9b21a89059837a99679f08545b12ef62e6691053138b9243d4dd3cf750a79c67508b6a230915c11a61aa7858a2847fda05ca4df9d7d05c29e8daa672d4f3349f523cba00fc37f43fb1e18226575158d4ca0096cb90c6470581bcf35832405f1"}, @NFTA_DATA_VALUE={0xc9, 0x1, "4a927ada391430f01eb0961c5c0fb8dfe3d951dfddceb46458750094a3fa57ae024c930d7a806f39bcfe74a26055ea9c29bb579768cabf788ab39538f190e47ad8863a18b5749c69b5beea9a814dbf9a349a037c9cd012f31574f7d81538ade7f08ea5b660ffe96dd2d07291d2a7ac9649a25a357c6b076bda9e66d64f1b99f04b4abfe52eacb7212ed94afe9e844df54b66648988abc9d3d26e838c3f68e7e0347435310332d05e5bfee9866717da09b29ba374a43e3bd6cf6295bf767ed869c91f8ca1da"}, @NFTA_DATA_VALUE={0xb1, 0x1, "d4e514af8a1d839c17f4794ffb8843576e21bbf453510540adc4c5eb10487eea670145261cfde7b0eb30554c9fc848d1f018991a05ba8b3e43c69ad2750bf817dacfbeeed3342eaf6fafbeaa69caf1bb9539ba0f57bbe9e350ec8626f5b84bfdf53da21fa077ed6aae1efc415538e45a83f4418ef491a662ccaff0aa9e9659483743bd5246110754890286bb6b51d0097e84e8a9196f70f876cd68089fe6d3e629961d4780eec7bca7b52c8f2b"}, @NFTA_DATA_VALUE={0x61, 0x1, "5f2680cdf725b78177322cf868701106c9eee87f6fcbe1d82d1c72595a7c465d033cd9de9d8e340ba31682a04deb8c7cef030af0843cc6c9ce33c7170391d428fa688bce5ce6e965fa4ca112fe3f6a2b32a554d11291d3c8ebc1b3ec7d"}, @NFTA_DATA_VALUE={0xf9, 0x1, "62e99ea9ebd4032657c932b15a527ab6060f4c6f9e2bd184839eaadb9f0d822c621a2683b231cd7909aa3cd668d9890148bd8d0fdb2cad29a837e164097abab8d7b7ac5e060daa8f389bfb589c0122173283367b49c1595ac074819d3db89953e0c3ab48e15ea49d66e7659aa9c4c72a86d2a1010834d4e91182d6382c7f253745a8b21cd8c76188e9615d3a89f73e245ccf42699c43e12a942ce3b154fb6f36f663b3a1328ce6ecc5ec6bb6f78e4b8c6fb06b16b023bddde2499740e2a45c1cd980a0c3c89dc018f5b1e1607fd9a9f091a4a8037b2cbb4d35db1a21a56309daf20e963b5f066ec49ada768330e5f7d6c7c188cbd1"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0x1098, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1001, 0x1, "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"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x284, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "81a149856a4ada2d5ab8406d50bac2891476b41ad16fe45458b97e1f2e113d381b41ea9f91c75284ec5f484329c06eb6a1f8b0df6d47c1ca3d9c696f7b69be225589723a01d7985689970af757e41e7a32b7abe17159b67254c507a3c73bfc7a665c216877afee43dd"}, @NFTA_DATA_VALUE={0xf5, 0x1, "f879c24aa679d52ee955f0618df8a45660a040a195aaf2bac0f7e05abbd15242221ce90d478b642eb3b25ebf0ce921f82995cbb80677e1b04e8334114d4bf1d93ac87042cc606b9f2d0cc90f88b1c8f180aa8ffcf6cead649e287c134956dff944da97de5fdf2092d63685ea41a680bd016340b6be1579e59192cc7335b15462cfb688b310adeacfbe069ccb7de79af6331155c4a4dcede6aa72d9e4255759733eb4074dddbd0c418f2c67ab316d98ab2ce060a1e194b77a77205b9c4ae62edca7ba2d1ef86c9f1494081d5c8177aec98a26f4669faae6f461cbd123714ffd00ed52ce944dcf22235cb7870c4eda353b80"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "87caabfad6dae8aa9f596c740ec0ceb368c60ed09c6b9c431d01d0ddbffa47ad93a087ba45b60fff57f3522dd45dd95a8137d4337fe11b10b4afa1da3ffb9f3a69a339ae703df000a452a936d182e3a8c71f0b5bbc70dd4e8f51aa3da3298526fe77f21005325f7f437e02c2364ad4c9821c6ceacddba8b0fe23fc302a4a18ed9a4c6b645bf49b0be2797aa7659c6e4c2c5d53e14c932145270c500c69a022a0bc67e9f446ac5bba171acd4a5a0778d65cc8552d0c5c55b168d65cfd9468b97fa237d838de28fc7ddc9c24d7c7106449b2"}]}]}]}]}], {0x14}}, 0x1ec4}}, 0x0) 03:37:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @fccp}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x34}}, 0x0) 03:37:28 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000000)="051d1b0864a4ec7cc6", 0x9, 0x0, &(0x7f0000000080), &(0x7f0000000180)="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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000012c0), 0x0, 0x200000) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={0xffffffffffffffff, r1, 0x4}) 03:37:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0xed0, 0xe, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xea4, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}]}, {0x438, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "894c155c9a68e3126d4fcad44b8eca00ffc7eafd8039bd52169f6773f3d46d1b6664c6270f941083e5868d21864df46b319943c324f216f59ada66a118f69a1c5f9a8a9421987ae1509e0ffe1d5a2f22bc1c39f420e53e12d7f41a278d787f7ef2dd586dc46e23f584e24605fbb884a14b19d3150fd9d8b567eefc95d07c4e6206d029be19213ae51cb9853df5a009f3bdef533b2fca130aca127b04af18877b850cff86b65944f630fb34f38312d2f96daead686a84bf5e60930801f0d83dde579538c3461fb0f551425e946423916ca7"}, @NFTA_DATA_VALUE={0xf9, 0x1, "15a158a98ee623707194bc80b7a5105a2926a82595921aef8d5714dab149004632eb96b2fa2ce19a0dc773a59b33bc6a35696980a609d7d0f4a0017bd87ac9ae41f810623e6360bbb788a6123956d0d93863a24ce46d05c9ec3d5ae580755b31d4eb7cf5b02ff393c3ab075850849bed98c7a3870cde279429119a7fe0a368aa10460639f9e28b3c94555e1b6367c5ea1ca7aa52a2aaf1a4c80c64b3fa6326cdab98a661bdf48d4dfe23b1b5c4d8c77edc6a91529bb2e93e831840e23930a7997b327befe64b3abfc84bf2b1b2cb0bae2ea9adf08c731ec4c84d23588e8ba606d100d3ea3c5ca84ce18742cd5c405a585cc5c4e637"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x400}, @NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xfffff382}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_DATA={0x1b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "9d251701bc0e1d4676180d0b2cd28cc28e73aab33126c8e70ae9f87e986675d9b7efbc18b6d1326b924c059d1ea2d503d1aa89e919427a0d407a5d7ce584e7d297091e8622c4d57d05f39cb6a6a6911cfcae9c8bb446d9e6f4e14a98fb5b58dc35180fc04bc259b6b471ad483b3a61002d765a4943b7cf43564d7cf1096da34340e7c19982a19298bb3b85bb418997d4f2f5d3b75a1df18ca5ab8d99"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xac, 0x1, "ea78c5975569c88beec43ee586a59574ea0da5b3952f8190907566bbf6e056dd6a7c5a13ffcb7ff84852978fe2f08320268db9cdbe390ab87f349b001c2fbadb4cac3dde78a72620e3905cf066c791991ff2fe71e2f8c87329c3503de6436414e16e79b26c765d7ba409f38b4c40054b651153021ebf48952f27d6f7db9dada386f0b6f974a48884bb3ede1092267616389d83786c7bbbd0f0533c5c997c0eb3da01e84f978226c6"}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_USERDATA={0x2f, 0x6, 0x1, 0x0, "fe2348b110d3564be8586a855d0801c43e8585e8dd8a1bb2a877123665b3b596fb75290300993eab3d6f71"}, @NFTA_SET_ELEM_EXPR={0x4}]}, {0xa4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY_END={0xa3c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x9f8, 0x1, "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"}]}]}]}]}], {0x14}}, 0xef8}}, 0x0) 03:37:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x17}, 0x48) 03:37:28 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x200001c8) 03:37:28 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002500)={0x2020}, 0x2020) [ 2685.595848][ T6632] binder: 6628:6632 ioctl c0306201 20001480 returned -14 [ 2685.596564][ T6634] binder: 6628:6634 ioctl c0189379 20000040 returned -22 03:37:28 executing program 2: syz_mount_image$tmpfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) syz_mount_image$nfs(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', 0x0, 0x0, 0x0, 0x860, &(0x7f0000001840)={[], [{@uid_lt}]}) 03:37:28 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0xf, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff}, 0x80) [ 2685.625028][ T6638] binder: transaction release 7974 bad object at offset 0, size 0 [ 2685.625049][ T6638] binder: transaction release 7974 bad object at offset 0, size 0 03:37:28 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 2685.625063][ T6638] binder: transaction release 7974 bad object at offset 0, size 0 [ 2685.735060][ T6647] tmpfs: Unknown parameter 'uid<00000000000000000000' [ 2685.934507][ T7851] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 2686.224038][ T7851] usb 6-1: Using ep0 maxpacket: 16 [ 2686.544156][ T7851] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2686.544191][ T7851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2686.544215][ T7851] usb 6-1: Product: syz [ 2686.544233][ T7851] usb 6-1: Manufacturer: syz [ 2686.544249][ T7851] usb 6-1: SerialNumber: syz [ 2686.546437][ T7851] usb 6-1: config 0 descriptor?? [ 2686.596189][ T7851] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2686.804189][ T7851] gspca_spca508: reg_read err -71 [ 2686.824119][ T7851] gspca_spca508: reg_read err -71 [ 2686.844105][ T7851] gspca_spca508: reg_read err -71 [ 2686.864115][ T7851] gspca_spca508: reg_read err -71 [ 2686.884156][ T7851] gspca_spca508: reg_read err -71 [ 2686.904210][ T7851] gspca_spca508: reg write: error -71 [ 2686.904260][ T7851] spca508: probe of 6-1:0.0 failed with error -71 [ 2686.906508][ T7851] usb 6-1: USB disconnect, device number 59 03:37:30 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002a40)={0x1c, 0x0, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8953, &(0x7f0000000200)) 03:37:30 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x22) 03:37:30 executing program 2: bpf$MAP_CREATE(0x10, &(0x7f0000000180), 0x48) 03:37:30 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x89a1, &(0x7f0000000200)) 03:37:30 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) r5 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r5, 0x14a, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r6, 0x14a, 0x0, 0x0, 0x0, 0x0) dup2(r5, r6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x4020940d, &(0x7f0000000200)) 03:37:30 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0xffffffffffffffff) 03:37:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, 0x0, 0x0) [ 2687.380619][ T6654] binder: 6653:6654 ioctl c0306201 20001480 returned -14 03:37:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x2, 0x9, 0x301}, 0x14}}, 0x0) 03:37:30 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2687.443015][ T6664] binder: transaction release 7980 bad object at offset 0, size 0 [ 2687.443038][ T6664] binder: transaction release 7980 bad object at offset 0, size 0 [ 2687.443054][ T6664] binder: transaction release 7980 bad object at offset 0, size 0 03:37:30 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8935, &(0x7f0000000200)) [ 2687.664086][T21524] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 2687.904155][T21524] usb 6-1: Using ep0 maxpacket: 16 [ 2688.191941][T21524] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2688.191979][T21524] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2688.192005][T21524] usb 6-1: Product: syz [ 2688.192024][T21524] usb 6-1: Manufacturer: syz [ 2688.192043][T21524] usb 6-1: SerialNumber: syz [ 2688.205766][T21524] usb 6-1: config 0 descriptor?? [ 2688.250547][T21524] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2688.465083][T21524] gspca_spca508: reg_read err -71 [ 2688.484376][T21524] gspca_spca508: reg_read err -71 [ 2688.504127][T21524] gspca_spca508: reg_read err -71 [ 2688.524138][T21524] gspca_spca508: reg_read err -71 [ 2688.544165][T21524] gspca_spca508: reg_read err -71 [ 2688.564127][T21524] gspca_spca508: reg write: error -71 [ 2688.564165][T21524] spca508: probe of 6-1:0.0 failed with error -71 [ 2688.571369][T21524] usb 6-1: USB disconnect, device number 60 03:37:31 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0x0, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:31 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x3f, 0x4) 03:37:31 executing program 2: bpf$OBJ_GET_PROG(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x18}, 0x10) 03:37:31 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8982, 0x0) 03:37:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (rerun: 64) r5 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r5, 0x14a, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r6, 0x14a, 0x0, 0x0, 0x0, 0x0) dup2(r5, r6) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:31 executing program 4: socketpair(0x10, 0x3, 0x9c, &(0x7f0000000440)) 03:37:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x18, 0x17, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x2c}}, 0x0) 03:37:31 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x2, &(0x7f0000000200)=@bpf_lsm={0x1d, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000002000000000000fbff0000733e50589500080000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x89, &(0x7f0000000080)=""/137, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000180), 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x1f) 03:37:31 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x80, 0x8001, 0x8c9, 0x0, 0x1}, 0x48) 03:37:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r1) 03:37:31 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) r5 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r5, 0x14a, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r6, 0x14a, 0x0, 0x0, 0x0, 0x0) dup2(r5, r6) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2689.025768][ T6689] binder: 6679:6689 ioctl c0306201 20001480 returned -14 [ 2689.026265][ T6691] binder_alloc: binder_alloc_mmap_handler: 6679 20ffc000-20ffd000 already mapped failed -16 [ 2689.026327][ T6691] binder_alloc: binder_alloc_mmap_handler: 6679 20ffc000-20ffd000 already mapped failed -16 03:37:31 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x9, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x3c) [ 2689.026393][ T6691] binder_alloc: binder_alloc_mmap_handler: 6679 20ffc000-20ffd000 already mapped failed -16 [ 2689.026453][ T6691] binder_alloc: binder_alloc_mmap_handler: 6679 20ffc000-20ffd000 already mapped failed -16 [ 2689.026509][ T6691] binder_alloc: binder_alloc_mmap_handler: 6679 20ffc000-20ffd000 already mapped failed -16 [ 2689.026675][ T6691] binder_alloc: binder_alloc_mmap_handler: 6679 20ffc000-20ffd000 already mapped failed -16 [ 2689.027834][ T6691] binder_alloc: binder_alloc_mmap_handler: 6679 20ffc000-20ffd000 already mapped failed -16 [ 2689.149844][ T6702] binder: 6701:6702 ioctl c0306201 20001480 returned -14 [ 2689.345834][ T6192] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 2689.584040][ T6192] usb 6-1: Using ep0 maxpacket: 16 [ 2689.864262][ T6192] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2689.864332][ T6192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2689.864358][ T6192] usb 6-1: Product: syz [ 2689.864376][ T6192] usb 6-1: Manufacturer: syz [ 2689.864394][ T6192] usb 6-1: SerialNumber: syz [ 2689.866505][ T6192] usb 6-1: config 0 descriptor?? [ 2689.906075][ T6192] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2690.344163][ T6192] gspca_spca508: reg_read err -71 [ 2690.365878][ T6192] gspca_spca508: reg_read err -71 [ 2690.384129][ T6192] gspca_spca508: reg_read err -71 [ 2690.404121][ T6192] gspca_spca508: reg_read err -71 [ 2690.424148][ T6192] gspca_spca508: reg write: error -71 [ 2690.424209][ T6192] spca508: probe of 6-1:0.0 failed with error -71 [ 2690.434909][ T6192] usb 6-1: USB disconnect, device number 61 03:37:33 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002a40)={0x1c, &(0x7f0000002900), &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:33 executing program 2: bpf$MAP_CREATE(0xa, &(0x7f0000000180), 0x48) 03:37:33 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x46}, 0x14}}, 0x0) 03:37:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1460759f5a26e5c3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xffffffffffffff16, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:33 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:37:33 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000840), r1) 03:37:33 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8980, 0x0) 03:37:33 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x89a1, 0x0) 03:37:33 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1460759f5a26e5c3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xffffffffffffff16, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:33 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x100000001, 0x2}) pipe(&(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)=0x4) 03:37:33 executing program 0: bpf$OBJ_GET_PROG(0x16, &(0x7f00000003c0)={0x0, 0x0, 0x18}, 0x10) 03:37:33 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={0x0, 0x0, 0x18}, 0x10) [ 2691.013258][ T6727] binder_alloc: binder_alloc_mmap_handler: 6721 20ffc000-20ffd000 already mapped failed -16 [ 2691.013323][ T6727] binder_alloc: binder_alloc_mmap_handler: 6721 20ffc000-20ffd000 already mapped failed -16 [ 2691.013383][ T6727] binder_alloc: binder_alloc_mmap_handler: 6721 20ffc000-20ffd000 already mapped failed -16 [ 2691.224024][ T6192] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 2691.504206][ T6192] usb 6-1: Using ep0 maxpacket: 16 [ 2691.794149][ T6192] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2691.794183][ T6192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2691.794216][ T6192] usb 6-1: Product: syz [ 2691.794235][ T6192] usb 6-1: Manufacturer: syz [ 2691.794254][ T6192] usb 6-1: SerialNumber: syz [ 2691.796432][ T6192] usb 6-1: config 0 descriptor?? [ 2691.848759][ T6192] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2692.274112][ T6192] gspca_spca508: reg_read err -71 [ 2692.294175][ T6192] gspca_spca508: reg_read err -71 [ 2692.326703][ T6192] gspca_spca508: reg_read err -71 [ 2692.353999][ T6192] gspca_spca508: reg_read err -71 [ 2692.374044][ T6192] gspca_spca508: reg write: error -71 [ 2692.374079][ T6192] spca508: probe of 6-1:0.0 failed with error -71 [ 2692.382144][ T6192] usb 6-1: USB disconnect, device number 62 03:37:35 executing program 2: ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000040)={{}, 0x0, 0x0, 0x0}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x8902, &(0x7f0000000200)) 03:37:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1460759f5a26e5c3, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xffffffffffffff16, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:35 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000", @ANYRES16, @ANYBLOB="01"], 0x9c}}, 0x0) 03:37:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) 03:37:35 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000001200)=[{0x0, 0x0, 0x7fff}, {&(0x7f0000000080)="a0", 0x1}], 0x0, &(0x7f0000001280)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x0, 0x30]}}], [{@uid_gt}, {@measure}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '][#'}}, {@dont_measure}, {@fsmagic}, {@obj_user={'obj_user', 0x3d, '%!}]:*'}}, {@smackfshat={'smackfshat', 0x3d, '\')\',\\'}}]}) 03:37:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002a40)={0x1c, &(0x7f0000002900), 0x0, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:35 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x0) [ 2692.797897][ T6741] loop3: detected capacity change from 0 to 127 [ 2692.824158][ T6743] binder: BINDER_SET_CONTEXT_MGR already set 03:37:35 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000006d40), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000006d80)={0x18}, 0x18) 03:37:35 executing program 4: r0 = socket(0x26, 0x5, 0x0) recvmmsg$unix(r0, 0x0, 0x0, 0x2001, 0x0) 03:37:35 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000300), 0x24, 0x0) [ 2692.824169][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.824248][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.824255][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.824347][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.824355][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 03:37:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3, 0x5}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1088, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/47, 0x2f, 0x2, 0x15}, @fda={0x66646185, 0xa, 0x1, 0x19}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @exit_looper], 0x7c, 0x0, &(0x7f0000000340)="43932ebd15126bf356a389d3e7a63ab5d3d087fd04cde4329c0309cc428d33a7f4d6d92dce314d4377f4ca3cb837d6eb7933f65677ad74460dcc7d5459b5cadb73876bb87c42f2feb32466840e0aa19699553ec21153c983e5d8f97e831238fe9d261cf2cfd5af9a95ecde5f0ef97c102f0dc3a4cdb3dc6917c4bd06"}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x1, 0x0, &(0x7f00000006c0)="c9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='illinois\x00', 0x5d) 03:37:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x0, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}]}, 0xf}}, 0x0) 03:37:35 executing program 0: syz_io_uring_setup(0x1b83, &(0x7f000000b480)={0x0, 0x0, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) 03:37:35 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) [ 2692.824443][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.824451][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.824538][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.824546][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 03:37:35 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x1}]}}, &(0x7f0000000040)=""/178, 0x26, 0xb2, 0x1}, 0x20) 03:37:35 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x0, 0x4}, 0x48) [ 2692.824634][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.824642][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.824734][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.824741][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.824831][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.824839][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.824927][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.824935][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825037][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825045][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825135][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825143][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825235][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825242][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825332][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825340][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825432][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825439][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825573][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825582][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825689][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825697][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825789][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825796][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825883][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825890][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.825979][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.825986][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826087][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826094][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826187][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826195][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826287][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826295][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826389][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826396][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826486][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826493][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826583][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826590][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826679][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826687][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826778][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826785][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826874][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826881][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.826969][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.826977][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.827072][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.827079][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.827170][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.827177][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2692.827266][ T6743] binder: BINDER_SET_CONTEXT_MGR already set [ 2692.827272][ T6743] binder: 6735:6743 ioctl 40046207 0 returned -16 [ 2693.085344][ T6758] binder: 6757:6758 ioctl c0306201 20001480 returned -14 [ 2693.085584][ T6758] binder: 6757:6758 ioctl c0189377 20000180 returned -22 [ 2693.138266][ T6767] binder: transaction release 7999 bad object at offset 0, size 0 [ 2693.138289][ T6767] binder: transaction release 7999 bad object at offset 0, size 0 [ 2693.138306][ T6767] binder: transaction release 7999 bad object at offset 0, size 0 [ 2693.211473][T20802] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 2693.445812][T20802] usb 6-1: Using ep0 maxpacket: 16 [ 2693.724241][T20802] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2693.724274][T20802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2693.724297][T20802] usb 6-1: Product: syz [ 2693.724314][T20802] usb 6-1: Manufacturer: syz [ 2693.724332][T20802] usb 6-1: SerialNumber: syz [ 2693.729094][T20802] usb 6-1: config 0 descriptor?? [ 2693.776502][T20802] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2694.214162][T20802] gspca_spca508: reg_read err -71 [ 2694.234205][T20802] gspca_spca508: reg_read err -71 [ 2694.255784][T20802] gspca_spca508: reg_read err -71 [ 2694.274133][T20802] gspca_spca508: reg_read err -71 [ 2694.294849][T20802] gspca_spca508: reg write: error -71 [ 2694.294938][T20802] spca508: probe of 6-1:0.0 failed with error -71 [ 2694.297338][T20802] usb 6-1: USB disconnect, device number 63 03:37:37 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb3, 0x7f, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000002a40)={0x1c, &(0x7f0000002900), 0x0, 0x0}) 03:37:37 executing program 0: mlockall(0x1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) mlockall(0x3) 03:37:37 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000001200)=[{&(0x7f0000000200)="fd", 0x1, 0x7fff}], 0x0, &(0x7f0000001280)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x0]}}]}) 03:37:37 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) 03:37:37 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)) 03:37:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3, 0x5}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1088, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/47, 0x2f, 0x2, 0x15}, @fda={0x66646185, 0xa, 0x1, 0x19}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @exit_looper], 0x7c, 0x0, &(0x7f0000000340)="43932ebd15126bf356a389d3e7a63ab5d3d087fd04cde4329c0309cc428d33a7f4d6d92dce314d4377f4ca3cb837d6eb7933f65677ad74460dcc7d5459b5cadb73876bb87c42f2feb32466840e0aa19699553ec21153c983e5d8f97e831238fe9d261cf2cfd5af9a95ecde5f0ef97c102f0dc3a4cdb3dc6917c4bd06"}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x1, 0x0, &(0x7f00000006c0)="c9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3, 0x5}}, './file0\x00'}) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1088, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/47, 0x2f, 0x2, 0x15}, @fda={0x66646185, 0xa, 0x1, 0x19}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @exit_looper], 0x7c, 0x0, &(0x7f0000000340)="43932ebd15126bf356a389d3e7a63ab5d3d087fd04cde4329c0309cc428d33a7f4d6d92dce314d4377f4ca3cb837d6eb7933f65677ad74460dcc7d5459b5cadb73876bb87c42f2feb32466840e0aa19699553ec21153c983e5d8f97e831238fe9d261cf2cfd5af9a95ecde5f0ef97c102f0dc3a4cdb3dc6917c4bd06"}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x1, 0x0, &(0x7f00000006c0)="c9"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) 03:37:37 executing program 3: r0 = gettid() sched_setparam(r0, &(0x7f0000000000)=0x5ee) 03:37:37 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[{@mode}, {@size={'size', 0x3d, [0x2d]}}]}) [ 2694.770630][ T6780] loop4: detected capacity change from 0 to 127 [ 2694.773484][ T6779] binder: BINDER_SET_CONTEXT_MGR already set [ 2694.773494][ T6779] binder: 6775:6779 ioctl 4018620d 20000000 returned -16 [ 2694.773696][ T6779] binder: 6775:6779 ioctl c0306201 20001480 returned -14 [ 2694.773836][ T6779] binder: 6775:6779 ioctl c0189377 20000180 returned -22 [ 2694.863286][ T6785] binder: 6775:6785 ioctl c0306201 20001480 returned -14 03:37:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3, 0x5}}, './file0\x00'}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x50, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@flat=@weak_binder={0x77622a85, 0x1088, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/47, 0x2f, 0x2, 0x15}, @fda={0x66646185, 0xa, 0x1, 0x19}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @exit_looper], 0x7c, 0x0, &(0x7f0000000340)="43932ebd15126bf356a389d3e7a63ab5d3d087fd04cde4329c0309cc428d33a7f4d6d92dce314d4377f4ca3cb837d6eb7933f65677ad74460dcc7d5459b5cadb73876bb87c42f2feb32466840e0aa19699553ec21153c983e5d8f97e831238fe9d261cf2cfd5af9a95ecde5f0ef97c102f0dc3a4cdb3dc6917c4bd06"}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper], 0x1, 0x0, &(0x7f00000006c0)="c9"}) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:37 executing program 4: openat$rtc(0xffffffffffffff9c, &(0x7f00000078c0), 0x80040, 0x0) [ 2694.940241][ T6797] tmpfs: Bad value for 'size' 03:37:37 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x1c, 0x0, 0x7, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 2694.982073][ T6800] binder: 6798:6800 ioctl c0306201 20001480 returned -14 [ 2694.982209][ T6801] binder: 6798:6801 ioctl c0189377 20000180 returned -22 03:37:37 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$rtc(&(0x7f0000000200), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) [ 2694.983351][ T6799] binder_alloc_mmap_handler: 29 callbacks suppressed [ 2694.983367][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2694.983430][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2694.983487][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2694.983547][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2694.983604][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2694.983663][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2694.983722][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2694.983783][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2694.991288][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2694.991358][ T6799] binder_alloc: binder_alloc_mmap_handler: 6798 20ffc000-20ffd000 already mapped failed -16 [ 2695.033280][ T6799] binder_alloc: 6798: binder_alloc_buf, no vma [ 2695.074194][T20802] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 2695.324025][T20802] usb 6-1: Using ep0 maxpacket: 16 [ 2695.589413][ T6781] 9pnet_fd: p9_fd_create_tcp (6781): problem connecting socket to 127.0.0.1 [ 2695.615156][T20802] usb 6-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2695.615191][T20802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2695.615218][T20802] usb 6-1: Product: syz [ 2695.615236][T20802] usb 6-1: Manufacturer: syz [ 2695.615255][T20802] usb 6-1: SerialNumber: syz [ 2695.617858][T20802] usb 6-1: config 0 descriptor?? [ 2695.656419][T20802] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2696.095263][T20802] gspca_spca508: reg_read err -71 [ 2696.114085][T20802] gspca_spca508: reg_read err -71 [ 2696.134097][T20802] gspca_spca508: reg_read err -71 [ 2696.154055][T20802] gspca_spca508: reg_read err -71 [ 2696.174455][T20802] gspca_spca508: reg write: error -71 [ 2696.174490][T20802] spca508: probe of 6-1:0.0 failed with error -71 [ 2696.176397][T20802] usb 6-1: USB disconnect, device number 64 03:37:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x5, 0x3ff, 0x40, 0x1}, 0x48) 03:37:39 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000001200)=[{&(0x7f0000000200)="fdd8", 0x2, 0x7fff}, {&(0x7f0000000080)="a0", 0x1}], 0x0, &(0x7f0000001280)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x0]}}]}) 03:37:39 executing program 2: getgroups(0x2, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff]) 03:37:39 executing program 0: setreuid(0xee00, 0xee00) syz_open_dev$rtc(&(0x7f0000004800), 0x0, 0x200000) 03:37:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04632440f8b0af7003c4a3212ffdfded70"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x64, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/4096, 0x1000, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000200)={0x55, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x0, 0x0, 0x0}) r9 = accept4$bt_l2cap(r3, 0x0, &(0x7f0000000040), 0x0) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000340)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x44, 0x1, "494fa8f8ecae088d2bff844210ff13e72ba958a8d93f3564a7f2035b27b0f4b1cf6f1bfa726b8a026ccc55c5c81d73b70b281ca0d2969fb34f02de524b9809", 0x9}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000700)="428eae40154e6278bcd9dcc852ebdfd2606dbd74d3567b48bd5653c7b94b6ffa2ad52d72938dc3a9befca0929a07cae25af3a06b6f82d4f6879154be06730e7f165ce66ae52350c43aa5ee4e996613f77874f78d7b2c58d442061e0dc4dea874a8f0d27d4a7d9748d42b7bd9eb3843c25e8052dc5d3ee5aeb6383380789b14240efb7a007707dfe8b9da981f32536cfe569276e045b4997a3fe701bd104dd2eb53a94b2f1a4675c55aa2369f20f0375d5d1d87a90043d7088123334ee3a56885fe83143da6e9749faa1db366fc1801fc31b243b4b471bddac4cb457a68798a0b2bfc1a0ed14ff39f71ba0d20d7c90ba0a53c93ea61a38a", 0xf7}, {&(0x7f00000001c0)="16bac347cd27417364dc2f", 0xb}], 0x2, &(0x7f0000000800)=[{0x80, 0x107, 0x1, "ee92eed02482b1875691b4470f12bfa846afb04a5881033b0f6bb655e81ad10a143086544bb3bbd5a1682b6ff3e8c498cdc7336ab1110960c8db834c91ac0cf417b964f765d18fccb2a5a56acfa1b44b9d42409df6c89b535cce85e1c83230c154fe37a3b812ac2dd19e2d"}, {0x58, 0x11, 0x1, "07f819f99fb15989d5c70db589975a7a2370da75e242a0a10ebf81686da19e8172ce7f07bda43f5f879c2c7440778562f87cd7c337bf0244a0dc209fae8b2cb9d039"}, {0xb8, 0x0, 0x0, "4a1941d38bf68b8f3e0381513ccd08e8a0cd329df5e6412e1357448d7822f84a55be3690b520ab38f8886409b059967028fa2c66bce8b34beee1ad1b89e7ded6f879729f791edf1c63138feae2127e18676b017a1a797d2a8bc78cf65b3a126ee6593b607fba747b76a7996e22213de0992787e8917d68548e6b411c7b72d13b0f30d7639e2e25d062985de40143d43abb342c08c66f22aa6c950490853d300e71bf7098bbe6b31f"}, {0x48, 0x112, 0x5, "e78bfb4c760e4dc06ca6f80fefaf25227fde665ac9984dd8ff13bfd99f32ad789aade81fb5c95f290f4855981982b70ee399fa73"}], 0x1d8}}], 0x1, 0x4000000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:39 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, r0) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) 03:37:39 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 03:37:39 executing program 5: setpriority(0x0, 0x0, 0x81) [ 2696.614539][ T6814] binder: 6813:6814 unknown command 1076126468 [ 2696.614563][ T6814] binder: 6813:6814 ioctl c0306201 20000080 returned -22 [ 2696.645040][ T6815] loop3: detected capacity change from 0 to 127 03:37:39 executing program 3: socket(0x2c, 0x3, 0x3557) 03:37:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04632440f8b0af7003c4a3212ffdfded70"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x64, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/4096, 0x1000, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000200)={0x55, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x0, 0x0, 0x0}) r9 = accept4$bt_l2cap(r3, 0x0, &(0x7f0000000040), 0x0) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000340)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x44, 0x1, "494fa8f8ecae088d2bff844210ff13e72ba958a8d93f3564a7f2035b27b0f4b1cf6f1bfa726b8a026ccc55c5c81d73b70b281ca0d2969fb34f02de524b9809", 0x9}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000700)="428eae40154e6278bcd9dcc852ebdfd2606dbd74d3567b48bd5653c7b94b6ffa2ad52d72938dc3a9befca0929a07cae25af3a06b6f82d4f6879154be06730e7f165ce66ae52350c43aa5ee4e996613f77874f78d7b2c58d442061e0dc4dea874a8f0d27d4a7d9748d42b7bd9eb3843c25e8052dc5d3ee5aeb6383380789b14240efb7a007707dfe8b9da981f32536cfe569276e045b4997a3fe701bd104dd2eb53a94b2f1a4675c55aa2369f20f0375d5d1d87a90043d7088123334ee3a56885fe83143da6e9749faa1db366fc1801fc31b243b4b471bddac4cb457a68798a0b2bfc1a0ed14ff39f71ba0d20d7c90ba0a53c93ea61a38a", 0xf7}, {&(0x7f00000001c0)="16bac347cd27417364dc2f", 0xb}], 0x2, &(0x7f0000000800)=[{0x80, 0x107, 0x1, "ee92eed02482b1875691b4470f12bfa846afb04a5881033b0f6bb655e81ad10a143086544bb3bbd5a1682b6ff3e8c498cdc7336ab1110960c8db834c91ac0cf417b964f765d18fccb2a5a56acfa1b44b9d42409df6c89b535cce85e1c83230c154fe37a3b812ac2dd19e2d"}, {0x58, 0x11, 0x1, "07f819f99fb15989d5c70db589975a7a2370da75e242a0a10ebf81686da19e8172ce7f07bda43f5f879c2c7440778562f87cd7c337bf0244a0dc209fae8b2cb9d039"}, {0xb8, 0x0, 0x0, "4a1941d38bf68b8f3e0381513ccd08e8a0cd329df5e6412e1357448d7822f84a55be3690b520ab38f8886409b059967028fa2c66bce8b34beee1ad1b89e7ded6f879729f791edf1c63138feae2127e18676b017a1a797d2a8bc78cf65b3a126ee6593b607fba747b76a7996e22213de0992787e8917d68548e6b411c7b72d13b0f30d7639e2e25d062985de40143d43abb342c08c66f22aa6c950490853d300e71bf7098bbe6b31f"}, {0x48, 0x112, 0x5, "e78bfb4c760e4dc06ca6f80fefaf25227fde665ac9984dd8ff13bfd99f32ad789aade81fb5c95f290f4855981982b70ee399fa73"}], 0x1d8}}], 0x1, 0x4000000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04632440f8b0af7003c4a3212ffdfded70"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x64, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/4096, 0x1000, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000200)={0x55, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x0, 0x0, 0x0}) (async) accept4$bt_l2cap(r3, 0x0, &(0x7f0000000040), 0x0) (async) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000340)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x44, 0x1, "494fa8f8ecae088d2bff844210ff13e72ba958a8d93f3564a7f2035b27b0f4b1cf6f1bfa726b8a026ccc55c5c81d73b70b281ca0d2969fb34f02de524b9809", 0x9}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000700)="428eae40154e6278bcd9dcc852ebdfd2606dbd74d3567b48bd5653c7b94b6ffa2ad52d72938dc3a9befca0929a07cae25af3a06b6f82d4f6879154be06730e7f165ce66ae52350c43aa5ee4e996613f77874f78d7b2c58d442061e0dc4dea874a8f0d27d4a7d9748d42b7bd9eb3843c25e8052dc5d3ee5aeb6383380789b14240efb7a007707dfe8b9da981f32536cfe569276e045b4997a3fe701bd104dd2eb53a94b2f1a4675c55aa2369f20f0375d5d1d87a90043d7088123334ee3a56885fe83143da6e9749faa1db366fc1801fc31b243b4b471bddac4cb457a68798a0b2bfc1a0ed14ff39f71ba0d20d7c90ba0a53c93ea61a38a", 0xf7}, {&(0x7f00000001c0)="16bac347cd27417364dc2f", 0xb}], 0x2, &(0x7f0000000800)=[{0x80, 0x107, 0x1, "ee92eed02482b1875691b4470f12bfa846afb04a5881033b0f6bb655e81ad10a143086544bb3bbd5a1682b6ff3e8c498cdc7336ab1110960c8db834c91ac0cf417b964f765d18fccb2a5a56acfa1b44b9d42409df6c89b535cce85e1c83230c154fe37a3b812ac2dd19e2d"}, {0x58, 0x11, 0x1, "07f819f99fb15989d5c70db589975a7a2370da75e242a0a10ebf81686da19e8172ce7f07bda43f5f879c2c7440778562f87cd7c337bf0244a0dc209fae8b2cb9d039"}, {0xb8, 0x0, 0x0, "4a1941d38bf68b8f3e0381513ccd08e8a0cd329df5e6412e1357448d7822f84a55be3690b520ab38f8886409b059967028fa2c66bce8b34beee1ad1b89e7ded6f879729f791edf1c63138feae2127e18676b017a1a797d2a8bc78cf65b3a126ee6593b607fba747b76a7996e22213de0992787e8917d68548e6b411c7b72d13b0f30d7639e2e25d062985de40143d43abb342c08c66f22aa6c950490853d300e71bf7098bbe6b31f"}, {0x48, 0x112, 0x5, "e78bfb4c760e4dc06ca6f80fefaf25227fde665ac9984dd8ff13bfd99f32ad789aade81fb5c95f290f4855981982b70ee399fa73"}], 0x1d8}}], 0x1, 0x4000000) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) 03:37:39 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000008c0)={0x2, &(0x7f0000000880)=[{0x2, 0xcb, 0x2, 0x7}, {0x6, 0x4, 0x5, 0x89f8}]}) 03:37:39 executing program 3: setreuid(0xee00, 0xee00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x1, &(0x7f0000000980)=@raw=[@ldst], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 2696.803354][ T6826] binder: 6825:6826 unknown command 1076126468 [ 2696.803374][ T6826] binder: 6825:6826 ioctl c0306201 20000080 returned -22 03:37:39 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000700)='ns/net\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 03:37:39 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[], [{@uid_gt}]}) 03:37:39 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x10103, 0x0, 0x0) [ 2696.876133][ T6829] binder: BINDER_SET_CONTEXT_MGR already set [ 2696.876145][ T6829] binder: 6825:6829 ioctl 40046207 0 returned -16 03:37:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04632440f8b0af7003c4a3212ffdfded70"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x64, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/4096, 0x1000, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000200)={0x55, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x0, 0x0, 0x0}) r9 = accept4$bt_l2cap(r3, 0x0, &(0x7f0000000040), 0x0) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000340)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x44, 0x1, "494fa8f8ecae088d2bff844210ff13e72ba958a8d93f3564a7f2035b27b0f4b1cf6f1bfa726b8a026ccc55c5c81d73b70b281ca0d2969fb34f02de524b9809", 0x9}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000700)="428eae40154e6278bcd9dcc852ebdfd2606dbd74d3567b48bd5653c7b94b6ffa2ad52d72938dc3a9befca0929a07cae25af3a06b6f82d4f6879154be06730e7f165ce66ae52350c43aa5ee4e996613f77874f78d7b2c58d442061e0dc4dea874a8f0d27d4a7d9748d42b7bd9eb3843c25e8052dc5d3ee5aeb6383380789b14240efb7a007707dfe8b9da981f32536cfe569276e045b4997a3fe701bd104dd2eb53a94b2f1a4675c55aa2369f20f0375d5d1d87a90043d7088123334ee3a56885fe83143da6e9749faa1db366fc1801fc31b243b4b471bddac4cb457a68798a0b2bfc1a0ed14ff39f71ba0d20d7c90ba0a53c93ea61a38a", 0xf7}, {&(0x7f00000001c0)="16bac347cd27417364dc2f", 0xb}], 0x2, &(0x7f0000000800)=[{0x80, 0x107, 0x1, "ee92eed02482b1875691b4470f12bfa846afb04a5881033b0f6bb655e81ad10a143086544bb3bbd5a1682b6ff3e8c498cdc7336ab1110960c8db834c91ac0cf417b964f765d18fccb2a5a56acfa1b44b9d42409df6c89b535cce85e1c83230c154fe37a3b812ac2dd19e2d"}, {0x58, 0x11, 0x1, "07f819f99fb15989d5c70db589975a7a2370da75e242a0a10ebf81686da19e8172ce7f07bda43f5f879c2c7440778562f87cd7c337bf0244a0dc209fae8b2cb9d039"}, {0xb8, 0x0, 0x0, "4a1941d38bf68b8f3e0381513ccd08e8a0cd329df5e6412e1357448d7822f84a55be3690b520ab38f8886409b059967028fa2c66bce8b34beee1ad1b89e7ded6f879729f791edf1c63138feae2127e18676b017a1a797d2a8bc78cf65b3a126ee6593b607fba747b76a7996e22213de0992787e8917d68548e6b411c7b72d13b0f30d7639e2e25d062985de40143d43abb342c08c66f22aa6c950490853d300e71bf7098bbe6b31f"}, {0x48, 0x112, 0x5, "e78bfb4c760e4dc06ca6f80fefaf25227fde665ac9984dd8ff13bfd99f32ad789aade81fb5c95f290f4855981982b70ee399fa73"}], 0x1d8}}], 0x1, 0x4000000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04632440f8b0af7003c4a3212ffdfded70"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r4) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) (async) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x64, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/4096, 0x1000, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000200)={0x55, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x0, 0x0, 0x0}) (async) accept4$bt_l2cap(r3, 0x0, &(0x7f0000000040), 0x0) (async) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000340)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x44, 0x1, "494fa8f8ecae088d2bff844210ff13e72ba958a8d93f3564a7f2035b27b0f4b1cf6f1bfa726b8a026ccc55c5c81d73b70b281ca0d2969fb34f02de524b9809", 0x9}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000700)="428eae40154e6278bcd9dcc852ebdfd2606dbd74d3567b48bd5653c7b94b6ffa2ad52d72938dc3a9befca0929a07cae25af3a06b6f82d4f6879154be06730e7f165ce66ae52350c43aa5ee4e996613f77874f78d7b2c58d442061e0dc4dea874a8f0d27d4a7d9748d42b7bd9eb3843c25e8052dc5d3ee5aeb6383380789b14240efb7a007707dfe8b9da981f32536cfe569276e045b4997a3fe701bd104dd2eb53a94b2f1a4675c55aa2369f20f0375d5d1d87a90043d7088123334ee3a56885fe83143da6e9749faa1db366fc1801fc31b243b4b471bddac4cb457a68798a0b2bfc1a0ed14ff39f71ba0d20d7c90ba0a53c93ea61a38a", 0xf7}, {&(0x7f00000001c0)="16bac347cd27417364dc2f", 0xb}], 0x2, &(0x7f0000000800)=[{0x80, 0x107, 0x1, "ee92eed02482b1875691b4470f12bfa846afb04a5881033b0f6bb655e81ad10a143086544bb3bbd5a1682b6ff3e8c498cdc7336ab1110960c8db834c91ac0cf417b964f765d18fccb2a5a56acfa1b44b9d42409df6c89b535cce85e1c83230c154fe37a3b812ac2dd19e2d"}, {0x58, 0x11, 0x1, "07f819f99fb15989d5c70db589975a7a2370da75e242a0a10ebf81686da19e8172ce7f07bda43f5f879c2c7440778562f87cd7c337bf0244a0dc209fae8b2cb9d039"}, {0xb8, 0x0, 0x0, "4a1941d38bf68b8f3e0381513ccd08e8a0cd329df5e6412e1357448d7822f84a55be3690b520ab38f8886409b059967028fa2c66bce8b34beee1ad1b89e7ded6f879729f791edf1c63138feae2127e18676b017a1a797d2a8bc78cf65b3a126ee6593b607fba747b76a7996e22213de0992787e8917d68548e6b411c7b72d13b0f30d7639e2e25d062985de40143d43abb342c08c66f22aa6c950490853d300e71bf7098bbe6b31f"}, {0x48, 0x112, 0x5, "e78bfb4c760e4dc06ca6f80fefaf25227fde665ac9984dd8ff13bfd99f32ad789aade81fb5c95f290f4855981982b70ee399fa73"}], 0x1d8}}], 0x1, 0x4000000) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) 03:37:39 executing program 2: prctl$PR_SET_PDEATHSIG(0x1, 0x200000001f) 03:37:39 executing program 3: setreuid(0xee00, 0xee00) io_uring_setup(0x2116, &(0x7f0000002500)={0x0, 0x0, 0x20}) [ 2696.905323][ T28] kauditd_printk_skb: 32 callbacks suppressed 03:37:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000008b80), 0x2, 0x0) read$FUSE(r0, &(0x7f0000008bc0)={0x2020}, 0x2020) 03:37:39 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004140)={0x2020}, 0xfffffffffffffdb6) [ 2696.905341][ T28] audit: type=1326 audit(2000000259.659:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6831 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc65c289109 code=0x0 03:37:39 executing program 4: setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) statfs(&(0x7f0000000780)='./file0/file0\x00', 0x0) 03:37:39 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[], [{@seclabel}]}) 03:37:39 executing program 0: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r1, 0x0, 0x0) 03:37:39 executing program 3: r0 = socket(0x11, 0xa, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) [ 2696.930723][ T6836] tmpfs: Unknown parameter 'uid>00000000000000000000' [ 2697.040448][ T6843] binder: 6839:6843 unknown command 1076126468 03:37:39 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x40}, 0x18) 03:37:39 executing program 0: setreuid(0xee00, 0xee00) socket(0x11, 0x0, 0x0) [ 2697.040470][ T6843] binder: 6839:6843 ioctl c0306201 20000080 returned -22 03:37:40 executing program 5: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x1008, &(0x7f0000000840)) 03:37:40 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, &(0x7f0000002640), 0x0, 0x0) 03:37:40 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000800), 0x10) 03:37:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002a00)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) 03:37:40 executing program 0: syz_mount_image$tmpfs(&(0x7f00000024c0), &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)) 03:37:40 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 03:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth1_macvtap\x00', {0x20}}) 03:37:40 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) 03:37:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002cc0)=@base={0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 03:37:40 executing program 0: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000060c0)) 03:37:40 executing program 5: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f0000000300)=""/86, 0x56) 03:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x58, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}}, 0x0) 03:37:40 executing program 4: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0x0) 03:37:40 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan1\x00'}) 03:37:40 executing program 5: keyctl$get_security(0x18, 0x0, &(0x7f00000012c0)=""/148, 0x94) 03:37:40 executing program 0: r0 = io_uring_setup(0x6706, &(0x7f00000079c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 03:37:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@union={0x2}]}, {0x0, [0x0]}}, &(0x7f00000001c0)=""/144, 0x27, 0x90, 0x1}, 0x20) 03:37:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0xb0040000}, 0x0) 03:37:40 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x416, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc}, 0x48) 03:37:40 executing program 4: futex(&(0x7f0000000000)=0x20000, 0xd, 0x0, 0x0, 0x0, 0x0) 03:37:40 executing program 0: socket(0x39, 0x0, 0x0) 03:37:40 executing program 2: bpf$MAP_CREATE(0x9, &(0x7f0000000340), 0x48) 03:37:40 executing program 3: clock_adjtime(0x5, &(0x7f0000000040)) 03:37:40 executing program 5: prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 03:37:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40) 03:37:40 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000001200)=[{0x0, 0x0, 0x7fff}, {&(0x7f0000000080)="a0", 0x1}], 0x0, &(0x7f0000001280)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x30, 0x0]}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}, {@dont_measure}]}) 03:37:40 executing program 3: add_key(&(0x7f0000000100)='keyring\x00', 0x0, &(0x7f00000003c0)="b6", 0x1, 0xfffffffffffffffe) 03:37:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0xb, 0x0, 0xc, 0xc, 0x7, [@ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000040)=""/178, 0xb, 0xb6, 0x1}, 0x20) [ 2697.888683][ T28] audit: type=1326 audit(2000000260.639:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb432c89109 code=0x0 03:37:40 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) mknodat$null(r0, &(0x7f0000000800)='./file0/file0\x00', 0x1000, 0x103) 03:37:40 executing program 0: r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) 03:37:40 executing program 2: syz_mount_image$tmpfs(0x0, &(0x7f0000002500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_tcp(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)) 03:37:40 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000008c0)={0x2, &(0x7f0000000880)=[{0x2, 0x0, 0x2, 0x7}, {0x6}]}) [ 2697.913254][ T6928] loop2: detected capacity change from 0 to 127 03:37:40 executing program 4: bpf$MAP_CREATE(0x16, &(0x7f0000000340), 0x48) 03:37:40 executing program 0: bpf$MAP_CREATE(0x13, &(0x7f0000000340), 0x48) 03:37:40 executing program 2: keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0) [ 2698.087811][ T28] audit: type=1326 audit(2000000260.839:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f153ec89109 code=0x0 03:37:41 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "8f"}]}}, &(0x7f0000000180)=""/184, 0x2a, 0xb8, 0x1}, 0x20) 03:37:41 executing program 3: syz_io_uring_setup(0x1b83, &(0x7f000000b480)={0x0, 0xcdbd}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000000b500), &(0x7f000000b540)) 03:37:41 executing program 5: syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000001480), 0x0, &(0x7f0000001540)) 03:37:41 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}}, &(0x7f0000000040)=""/178, 0x2e, 0xb2, 0x1}, 0x20) 03:37:41 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x2}, 0x48) 03:37:41 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r5, r6, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x5c, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x13}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x1}], 0xff, 0x0, &(0x7f0000000280)="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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d00)={0x134, 0x0, &(0x7f0000000b40)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x18b}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/171, 0xab, 0x2, 0x39}, @fd}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000940)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0xa, 0x0, 0x3a}, @fda={0x66646185, 0x6, 0x0, 0x1a}}, &(0x7f0000000600)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x3}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a80)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/130, 0x82, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000b00)={0x0, 0x18, 0x40}}}, @clear_death={0x400c630f, 0x2}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}], 0xe, 0x0, &(0x7f0000000cc0)="569ccf35d90c4bbfd37e690c6b37"}) 03:37:41 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r0, 0x0) 03:37:41 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private2}}) 03:37:41 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}) 03:37:41 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@ptr]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000040)=""/178, 0xb, 0xb6, 0x1}, 0x20) [ 2698.771522][ T6954] binder: 6949:6954 unknown command 0 [ 2698.771545][ T6954] binder: 6949:6954 ioctl c0306201 20000080 returned -22 [ 2698.780599][ T6954] binder: 6949:6954 ioctl c0306201 20001480 returned -14 [ 2698.781958][ T28] audit: type=1800 audit(2000000261.529:2439): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1161 res=0 errno=0 03:37:41 executing program 3: recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xdb687fa3cde9ddbd, 0x0) 03:37:41 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)={[{@nr_blocks={'nr_blocks', 0x3d, [0x30, 0x30, 0x0]}}]}) 03:37:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000002f00)=@base={0x0, 0x0, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5}, 0x48) 03:37:41 executing program 5: syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@sb}]}) [ 2698.795355][ T28] audit: type=1804 audit(2000000261.549:2440): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3501/file0" dev="sda1" ino=1161 res=1 errno=0 03:37:41 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r5, r6, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x5c, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x13}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x1}], 0xff, 0x0, &(0x7f0000000280)="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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d00)={0x134, 0x0, &(0x7f0000000b40)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x18b}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/171, 0xab, 0x2, 0x39}, @fd}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000940)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0xa, 0x0, 0x3a}, @fda={0x66646185, 0x6, 0x0, 0x1a}}, &(0x7f0000000600)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x3}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a80)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/130, 0x82, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000b00)={0x0, 0x18, 0x40}}}, @clear_death={0x400c630f, 0x2}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}], 0xe, 0x0, &(0x7f0000000cc0)="569ccf35d90c4bbfd37e690c6b37"}) 03:37:41 executing program 3: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040), &(0x7f00000000c0)={0x7}, 0x0, &(0x7f0000000180)={0x0, r0+10000000}, &(0x7f0000000200)={&(0x7f00000001c0), 0x8}) 03:37:41 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000008c0)={0x2, &(0x7f0000000880)=[{0x0, 0xcb, 0x0, 0x7}, {0x6}]}) 03:37:41 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002180)={[{@huge_always}, {@mode}, {@gid={'gid', 0x3d, 0xee01}}]}) 03:37:41 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) [ 2698.912478][ T6961] FAT-fs (loop5): bogus number of reserved sectors [ 2698.912500][ T6961] FAT-fs (loop5): Can't find a valid FAT filesystem 03:37:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x2}, 0x48) 03:37:41 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@size={'size', 0x3d, [0x25, 0x0]}}]}) [ 2699.063840][ T6976] loop2: detected capacity change from 0 to 1024 [ 2699.112848][ T6978] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 03:37:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000880)={0x64, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x64}}, 0x0) 03:37:42 executing program 0: openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x1e}, 0x18) 03:37:42 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r5, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) sendfile(r5, r6, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x5c, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x13}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x1}], 0xff, 0x0, &(0x7f0000000280)="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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d00)={0x134, 0x0, &(0x7f0000000b40)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x18b}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/171, 0xab, 0x2, 0x39}, @fd}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000940)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0xa, 0x0, 0x3a}, @fda={0x66646185, 0x6, 0x0, 0x1a}}, &(0x7f0000000600)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x3}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a80)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/130, 0x82, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000b00)={0x0, 0x18, 0x40}}}, @clear_death={0x400c630f, 0x2}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}], 0xe, 0x0, &(0x7f0000000cc0)="569ccf35d90c4bbfd37e690c6b37"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) (async) dup2(r2, r3) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) write(r5, &(0x7f0000001400)="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"/3584, 0xe00) (async) sendfile(r5, r6, 0x0, 0x11f06) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000380)={0x5c, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_handle={0x77682a85, 0x10a, 0x2}, @flat=@binder={0x73622a85, 0x1, 0x3}, @fda={0x66646185, 0x6, 0x1, 0x13}}, &(0x7f0000000040)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x1}], 0xff, 0x0, &(0x7f0000000280)="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"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d00)={0x134, 0x0, &(0x7f0000000b40)=[@register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x18b}, @ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/171, 0xab, 0x2, 0x39}, @fd}, &(0x7f0000000500)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death={0x400c630f, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000940)={@flat=@binder={0x73622a85, 0xa, 0x1}, @fda={0x66646185, 0xa, 0x0, 0x3a}, @fda={0x66646185, 0x6, 0x0, 0x1a}}, &(0x7f0000000600)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x3}, @free_buffer, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a80)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x0, &(0x7f00000009c0)=""/130, 0x82, 0x0, 0x10}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000b00)={0x0, 0x18, 0x40}}}, @clear_death={0x400c630f, 0x2}, @acquire_done={0x40106309, 0x2}, @release={0x40046306, 0x3}], 0xe, 0x0, &(0x7f0000000cc0)="569ccf35d90c4bbfd37e690c6b37"}) (async) [ 2699.146191][ T6976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. 03:37:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000007113b5"], 0x14}}, 0x0) 03:37:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14}, 0x14}}, 0x0) [ 2699.169304][ T28] audit: type=1326 audit(2000000261.919:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6983 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f889d689109 code=0x0 03:37:42 executing program 4: setxattr$trusted_overlay_upper(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 03:37:42 executing program 4: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f00000000c0), 0x80) 03:37:42 executing program 0: clock_nanosleep(0x7, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 03:37:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:42 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0xe06c0, 0x0) 03:37:42 executing program 3: bpf$MAP_CREATE(0x12, &(0x7f0000000340), 0x48) [ 2699.180196][ T6987] binder: 6984:6987 unknown command 0 [ 2699.180216][ T6987] binder: 6984:6987 ioctl c0306201 20000080 returned -22 03:37:42 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x40, 0x6}, {0x3}, {}]}) 03:37:42 executing program 4: bpf$MAP_CREATE(0x23, &(0x7f0000000340), 0x48) [ 2699.181446][ T6987] binder: 6984:6987 ioctl c0306201 20001480 returned -14 03:37:42 executing program 0: rt_sigaction(0x26, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)) [ 2699.196831][ T28] audit: type=1800 audit(2000000261.949:2442): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1161 res=0 errno=0 03:37:42 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, r5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:42 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={[{@size={'size', 0x3d, [0x65, 0x0]}}]}) 03:37:42 executing program 4: r0 = socket(0x11, 0xa, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000018c0)={&(0x7f0000001700), 0xc, &(0x7f0000001880)={0x0}}, 0x0) 03:37:42 executing program 5: bpf$MAP_CREATE(0xf, &(0x7f0000000340), 0x48) [ 2699.207041][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 2699.216262][ T6987] binder: 6984:6987 unknown command 64 [ 2699.216281][ T6987] binder: 6984:6987 ioctl c0306201 20000640 returned -22 03:37:42 executing program 0: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000100)="cf", 0x1, 0xffffffffffffffff}, {&(0x7f0000000180)='k', 0x1}], 0x0, 0x0) [ 2699.216514][ T28] audit: type=1804 audit(2000000261.959:2443): pid=6985 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3502/file0" dev="sda1" ino=1161 res=1 errno=0 [ 2699.328869][ T6999] loop2: detected capacity change from 0 to 1024 [ 2699.369133][ T6999] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2699.370530][ T7005] binder: 7000:7005 unknown command 0 [ 2699.370549][ T7005] binder: 7000:7005 ioctl c0306201 20000080 returned -22 03:37:42 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:42 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x2, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61, 0x61]}}, &(0x7f00000001c0)=""/144, 0x35, 0x90, 0x1}, 0x20) 03:37:42 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x2}]}, {0x0, [0x0, 0x61, 0x61]}}, &(0x7f00000001c0)=""/144, 0x29, 0x90, 0x1}, 0x20) [ 2699.412297][ T7005] binder: 7000:7005 ioctl c0306201 20001480 returned -14 03:37:42 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}, {&(0x7f0000011000)="8081000000180000ddf4655fddf4655fddf4655f00000000000001002000000010000800000000000af302000400000000000000000000000200000030000000020000000400000032", 0x49, 0x1600}, {&(0x7f0000012700)="111fc0d901000000803a0900803a09000000000006", 0x15, 0xc000}], 0x0, &(0x7f0000000480)) [ 2699.413588][ T28] audit: type=1800 audit(2000000262.159:2444): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1178 res=0 errno=0 03:37:42 executing program 5: semop(0x0, &(0x7f0000000040)=[{0x1, 0x0, 0x1800}, {0x1, 0x9, 0x1000}], 0x2) 03:37:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:37:42 executing program 0: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_security(0xe, r0, 0x0, 0x0) [ 2699.423532][ T28] audit: type=1804 audit(2000000262.169:2445): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3954846776/syzkaller.ou63Q9/3503/file0" dev="sda1" ino=1178 res=1 errno=0 [ 2699.485337][ T7016] binder: BINDER_SET_CONTEXT_MGR already set [ 2699.485349][ T7016] binder: 7000:7016 ioctl 40046207 0 returned -16 [ 2699.485421][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 2699.514116][ T7014] binder: BINDER_SET_CONTEXT_MGR already set [ 2699.514129][ T7014] binder: 7000:7014 ioctl 4018620d 20000000 returned -16 [ 2699.592074][ T7037] loop2: detected capacity change from 0 to 1024 [ 2699.614868][ T7037] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2699.803517][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 2699.849538][ T7052] binder: 7049:7052 ioctl c0306201 20001480 returned -14 [ 2699.905231][ T7059] binder: transaction release 8042 bad object at offset 0, size 0 [ 2699.905253][ T7059] binder: transaction release 8042 bad object at offset 0, size 0 [ 2699.905333][ T7059] binder: transaction release 8042 bad object at offset 0, size 0 [ 2699.919314][ T7057] loop2: detected capacity change from 0 to 1024 [ 2699.954666][ T7057] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2699.964491][ T7066] loop3: detected capacity change from 0 to 1024 [ 2700.027377][ T3644] EXT4-fs (loop2): unmounting filesystem. [ 2700.040655][ T7066] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2700.113891][ T3645] EXT4-fs (loop3): unmounting filesystem. 03:37:43 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, r5) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:43 executing program 5: syz_io_uring_setup(0x606b, &(0x7f0000000b40), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000bc0), &(0x7f0000000c00)) 03:37:43 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000003c0)='ns/user\x00') 03:37:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:43 executing program 0: madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xa) 03:37:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000440)) 03:37:43 executing program 0: clock_gettime(0xdcf7e5c646a53c3d, 0x0) 03:37:43 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[{&(0x7f00000000c0)="8a", 0x1}, {&(0x7f0000000100)="cf", 0x1, 0xffffffffffffffff}, {&(0x7f0000000180)='k', 0x1, 0xffffffff}], 0x0, 0x0) 03:37:43 executing program 3: syz_io_uring_setup(0x606b, &(0x7f0000000b40)={0x0, 0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000bc0), &(0x7f0000000c00)) 03:37:43 executing program 5: r0 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r0, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000002000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) [ 2700.682352][ T7080] loop2: detected capacity change from 0 to 1024 03:37:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) [ 2700.759847][ T7084] binder: 7082:7084 ioctl c0306201 20001480 returned -14 03:37:43 executing program 4: r0 = syz_io_uring_setup(0x3803, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 03:37:43 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, r5) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x7fff, 0xc194}) 03:37:43 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) 03:37:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) [ 2700.825483][ T7092] loop4: detected capacity change from 0 to 264192 03:37:43 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) [ 2700.886025][ T7096] loop2: detected capacity change from 0 to 1024 03:37:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1ba, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x78, 0x0, 0x200, 0x72bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600020008000300", @ANYRES32=r4, @ANYBLOB="080026009e0900000800b7"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="000038bd7000fddbdf2545529ff69e000300", @ANYRES32=r4, @ANYBLOB="000000000000000000c9360c86ab72c1669276b28657a0691041911c9e21e7279d686bc1bb425a0efedb06eb0f9448e518289d18d5d55be2347e597c0471e9ffcec53b526602ebe67b40cecba3186d6c562d81c55769c3de85b612e539468cc761f23ab569f910fa9432f935c8644b38a76cce2562995d4faa032a322a6f29146a2b7e58d8879a338ca49d0f70f48f87d90000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="98040008227e1c08880d4fd3d25dff8a17c5b301018651fa7571", @ANYRES16=0x0, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc008640a, &(0x7f0000000280)={r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r7, 0x64465000) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x147602, 0x0) close(r8) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000380)) [ 2700.943299][ T7099] binder: 7097:7099 ioctl c0306201 20001480 returned -14 [ 2700.944206][ T7105] binder_alloc: 7097: binder_alloc_buf, no vma [ 2700.953845][ T7105] binder: transaction release 8052 bad object at offset 0, size 0 [ 2700.973380][ T7105] binder: transaction release 8052 bad object at offset 0, size 0 03:37:43 executing program 0: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x85, 0x0, &(0x7f0000000140)) 03:37:43 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0561044000000000"], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:43 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x30) 03:37:43 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x3, 0x37, 0x37d}, 0x48) [ 2700.973399][ T7105] binder: transaction release 8052 bad object at offset 0, size 0 [ 2701.040173][ T7114] loop2: detected capacity change from 0 to 1024 03:37:43 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x7fff, 0xc194}) 03:37:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1ba, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x78, 0x0, 0x200, 0x72bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600020008000300", @ANYRES32=r4, @ANYBLOB="080026009e0900000800b7"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="280000006f83917ad2a5fe38f66917bc0e953a3839e1973e975f887ae6df39403497db8627c75298366a276fe2932f828c81406176416c72c3ecb90ada838842c769ea6c279f1379521140e4eae51ad874ee53e8007deea9b00c1199cb40c01b080c68c7d5e53cdd0754dccc42c1dc5d3f78830f18b2b8dccb47cfaccbcbc5d67aa33364648f124d197efeac00d49c01956c308f10cf724e8f2516ee51547a9ea2ea602eae122f441bbe50c2b340455598931aee052fae84f70c4faa835cd467d6e1dad5f67aabff162062d9b297fbff43526cb0e3050f6885f925cbe57ab6beb259ed647365b4715046a3a5966c12f13492ac269338bf813fd8d2f269465c4e28a1bf491071bb175eff6224d217a11fd406016473e6fe746310dfeb85f09db35c18c87cb3b03192ed3670bc4d063ab8b553", @ANYRES16, @ANYBLOB="000038bd7000fddbdf2545529ff69e000300", @ANYRES32=r4, @ANYBLOB="000000000000000000c9360c86ab72c1669276b28657a0691041911c9e21e7279d686bc1bb425a0efedb06eb0f9448e518289d18d5d55be2347e597c0471e9ffcec53b526602ebe67b40cecba3186d6c562d81c55769c3de85b612e539468cc761f23ab569f910fa9432f935c8644b38a76cce2562995d4faa032a322a6f29146a2b7e58d8879a338ca49d0f70f48f87d90000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="98040008227e1c08880d4fd3d25dff8a17c5b301018651fa7571", @ANYRES16=0x0, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc008640a, &(0x7f0000000280)={r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r7, 0x64465000) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x147602, 0x0) close(r8) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000380)) [ 2701.192278][ T7123] binder: 7118:7123 unknown command 1074028805 [ 2701.192299][ T7123] binder: 7118:7123 ioctl c0306201 20001480 returned -22 03:37:44 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1ba, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x78, 0x0, 0x200, 0x72bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600020008000300", @ANYRES32=r4, @ANYBLOB="080026009e0900000800b7"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="000038bd7000fddbdf2545529ff69e000300", @ANYRES32=r4, @ANYBLOB="000000000000000000c9360c86ab72c1669276b28657a0691041911c9e21e7279d686bc1bb425a0efedb06eb0f9448e518289d18d5d55be2347e597c0471e9ffcec53b526602ebe67b40cecba3186d6c562d81c55769c3de85b612e539468cc761f23ab569f910fa9432f935c8644b38a76cce2562995d4faa032a322a6f29146a2b7e58d8879a338ca49d0f70f48f87d90000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="98040008227e1c08880d4fd3d25dff8a17c5b301018651fa7571", @ANYRES16=0x0, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc008640a, &(0x7f0000000280)={r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r7, 0x64465000) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x147602, 0x0) close(r8) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000380)) 03:37:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:44 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0561044000000000"], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r3) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0561044000000000"], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) [ 2701.202096][ T7125] loop2: detected capacity change from 0 to 1024 03:37:44 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000040)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x0, @local}}}, 0x48) [ 2701.322948][ T7136] loop2: detected capacity change from 0 to 1024 03:37:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1ba, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x78, 0x0, 0x200, 0x72bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600020008000300", @ANYRES32=r4, @ANYBLOB="080026009e0900000800b7"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="280000006f83917ad2a5fe38f66917bc0e953a3839e1973e975f887ae6df39403497db8627c75298366a276fe2932f828c81406176416c72c3ecb90ada838842c769ea6c279f1379521140e4eae51ad874ee53e8007deea9b00c1199cb40c01b080c68c7d5e53cdd0754dccc42c1dc5d3f78830f18b2b8dccb47cfaccbcbc5d67aa33364648f124d197efeac00d49c01956c308f10cf724e8f2516ee51547a9ea2ea602eae122f441bbe50c2b340455598931aee052fae84f70c4faa835cd467d6e1dad5f67aabff162062d9b297fbff43526cb0e3050f6885f925cbe57ab6beb259ed647365b4715046a3a5966c12f13492ac269338bf813fd8d2f269465c4e28a1bf491071bb175eff6224d217a11fd406016473e6fe746310dfeb85f09db35c18c87cb3b03192ed3670bc4d063ab8b553", @ANYRES16, @ANYBLOB="000038bd7000fddbdf2545529ff69e000300", @ANYRES32=r4, @ANYBLOB="000000000000000000c9360c86ab72c1669276b28657a0691041911c9e21e7279d686bc1bb425a0efedb06eb0f9448e518289d18d5d55be2347e597c0471e9ffcec53b526602ebe67b40cecba3186d6c562d81c55769c3de85b612e539468cc761f23ab569f910fa9432f935c8644b38a76cce2562995d4faa032a322a6f29146a2b7e58d8879a338ca49d0f70f48f87d90000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="98040008227e1c08880d4fd3d25dff8a17c5b301018651fa7571", @ANYRES16=0x0, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc008640a, &(0x7f0000000280)={r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r7, 0x64465000) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x147602, 0x0) close(r8) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000380)) 03:37:44 executing program 3: socket$unix(0x1, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7d, 0x0, &(0x7f0000000140)) [ 2701.394978][ T7138] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.394990][ T7138] binder: 7137:7138 ioctl 4018620d 20000000 returned -16 03:37:44 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0561044000000000"], 0x47, 0x0, 0x0}) (rerun: 64) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2701.395200][ T7138] binder: 7137:7138 unknown command 1074028805 [ 2701.395216][ T7138] binder: 7137:7138 ioctl c0306201 20001480 returned -22 03:37:44 executing program 4: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$getown(r0, 0x5) 03:37:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x2a) 03:37:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) [ 2701.497884][ T7150] loop2: detected capacity change from 0 to 1024 [ 2701.533277][ T2979] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 03:37:44 executing program 3: syz_emit_ethernet(0x1fbf, &(0x7f0000000040)={@broadcast, @random="da6f1353e78d", @val, {@ipv6}}, 0x0) [ 2701.533314][ T2979] buffer_io_error: 14 callbacks suppressed [ 2701.533327][ T2979] Buffer I/O error on dev loop2, logical block 0, async page read 03:37:44 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x1ba, 0x2, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x78, 0x0, 0x200, 0x72bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x1, 0x0}}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x78}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000006600020008000300", @ANYRES32=r4, @ANYBLOB="080026009e0900000800b7"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0x7, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="000038bd7000fddbdf2545529ff69e000300", @ANYRES32=r4, @ANYBLOB="000000000000000000c9360c86ab72c1669276b28657a0691041911c9e21e7279d686bc1bb425a0efedb06eb0f9448e518289d18d5d55be2347e597c0471e9ffcec53b526602ebe67b40cecba3186d6c562d81c55769c3de85b612e539468cc761f23ab569f910fa9432f935c8644b38a76cce2562995d4faa032a322a6f29146a2b7e58d8879a338ca49d0f70f48f87d90000000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8800) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="98040008227e1c08880d4fd3d25dff8a17c5b301018651fa7571", @ANYRES16=0x0, @ANYBLOB="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"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x0, 0x7, 0x3}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x7, 0xc, 0x81, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc008640a, &(0x7f0000000280)={r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r7, 0x64465000) r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x147602, 0x0) close(r8) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000380)) 03:37:44 executing program 4: semctl$GETNCNT(0x0, 0x0, 0x11, 0x0) 03:37:44 executing program 0: openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz0\x00', 0x200002, 0x0) [ 2701.533419][ T2979] ldm_validate_partition_table(): Disk read failed. [ 2701.533441][ T2979] Dev loop2: unable to read RDB block 0 03:37:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:44 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, r2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@bridge_delneigh={0x28, 0x1c, 0xd03, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0xf}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) preadv(r8, &(0x7f0000000280), 0x1, 0x0, 0x0) splice(r3, 0x0, r7, 0x0, 0x4ffe2, 0x0) 03:37:44 executing program 3: r0 = add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) 03:37:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x16000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) [ 2701.533462][ T2979] loop2: unable to read partition table [ 2701.533624][ T2979] loop2: partition table beyond EOD, truncated 03:37:44 executing program 0: socket$unix(0x1, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x7b, 0x0, &(0x7f0000000140)) 03:37:44 executing program 4: bpf$BPF_PROG_DETACH(0x7, &(0x7f0000000080), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1, 0x80, 0x400, 0x7ff, 0x8, 0xffffffffffffffff, 0x3}, 0x48) [ 2701.582534][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.582546][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 03:37:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffff7, 0x11, r2, 0x0) rt_sigqueueinfo(0x0, 0x0, &(0x7f0000000000)={0x6}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2701.582637][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.582644][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 03:37:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000040020", 0x1d, 0x1500}], 0x0, &(0x7f0000000480)) [ 2701.582733][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.582749][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.582841][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.582848][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.582941][ T7154] binder: BINDER_SET_CONTEXT_MGR already set 03:37:44 executing program 0: socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20000600}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000440)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x84) [ 2701.582948][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.585597][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.585607][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.585714][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.585721][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.585816][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.585824][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.585916][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.585924][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.586012][ T7154] binder: BINDER_SET_CONTEXT_MGR already set 03:37:44 executing program 4: r0 = syz_io_uring_setup(0x3803, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x10000000) [ 2701.586018][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.586197][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.586205][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.586309][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.586316][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 03:37:44 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x0, 0x0, 0x0, &(0x7f0000000480)) 03:37:44 executing program 0: socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x20000600}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000440)={r3, @in={{0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x84) 03:37:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000002240)={0x3000}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000002280)={0x4e8, 0x1ff, 0x3, 0x8001, 0x2, [{0xff, 0xffffffff00000001, 0x1ff}, {0x6ccc, 0x20, 0x68}]}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000100)={{0x3, 0x0, 0x80, {0x100000, 0x2, 0x1}}, "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", "f38be386dbb6e24ef61ba87004e85a5a1fdb747ffe81e8861539c493feede2c0d3a142c144ae0cd589394be8c4bc3b6e70d46b2130e6d8bdc56c28aa196112c6feb283f5998cb601525ce9df5ce9afcafe533c0a1306ef8753b9be9869b659f428908d8a8228cebfe9cdd77f56b16b01d06aad75c5c02781f76f9b5b8607381d66657cd20e4e83cedbd0092da9928b87aa8c17e9140fdaa5abf02f969c466c1b90f3dd4b8ab7cea16158c123dbbda360781981e350e018aedd925f6d3fed15864ef28cca1c36ba02e65994dca0b0e3a16ff14223c1b7adcd41adc8980c7bca6cafced47cbb850434e1a6bb4cb3a00658d21a591b99931442235189781fa0d533113ba0643786d79905e8f3f8ffcfcd1a4cb642c92f0db235f6826ddf7f5ba289c47e510a944b48edf66a0eb598ac271d80565f0de7ff9d6484d446ed36e2d2db4e434dacf98643f7162cf53aaf7a19e46432f78e6ca25f30b0a67e577064f1b1f3ac4aac106072cd3716b5fe09415982ee13b9ef3e7f840c1b06ac278b8ac280b7393596b69d302725e6186e40b96abe6b368609a184cd9e48829befe32c1a53c975fca2ef7c7d4da24f56dd9b9c373931c875d2378ae26a0fcfc428e74ef62ee723f0c3f9ab75b291e56c2bd28f3c3f5d6726d6eb7775f265d91f6dbe0209a78137e96db08d54abe287ac78328baa75a50a0631c073fd7031adf325c566555700dccd1aebda67d05e4d62ff49cd8a97771f9373901c8c5e1ea3f10f4412f2d9a0b19a12e86110a6bf3127aa8dd95dc60296903f5934332e116b9f8cab35c731f0a2d7cd97c98266caaa7e2657310f61ce0e10653e19e8f2bad6942d71cb8c0d6f47b9d2444ef0564c58168340cbbe108d682c482df8e68706fcaab3ebeb012d2430d5fd9d4b540d4666ee70e4c7f93255235b657d8e5af5934d9132d052806971ee2b2096588520fb3161f7d892f719a6067f10a9df04d10761e7bf94f49060cabf53f7fb064acb37e64e1bda5250c7989499b683202d6d222c41f2320baca3a5da3a34256e4551c26e06c8ff4989b3339821fe7d8a32009b111e48be9fa63b69835691e98e155fc9f3d1cfe269c7ce7181bf1dfa04894463bdbba1ec5e54d88904e9b0aa4a1e72b7b37f91bf27b362cbe3d55bca952f515488c9342657450d94d7134bc55d6914d4cdb8522cb28e9a4b4abe7160ac0ca6b853229dc62c64219d6f7348ec15b3eddaadcf94fd3ee5d8c3b110e9e0f783e6d9ba3895dfe354838fdf73c09375e6ddf115b1425f13098283843ebcfd3bafd9e28d532552b7a24776a2cf54ecc0867121898840ace936e49b687d97c2f68935c77989d15cca44eac5f0b28f701bad3ce8bc5ff101ed767f7383ae91767f1365d1e30edaa59cd30801ce2b4f53b34752543a9b81ac9dc917d92be4dcb9f20d8ed35d5de9f51a9c5329303b117bfbd8d54ff2efb9e4f6d9d703de558d1bcbf9242e8d1cb81dd997aff26244b9c970b61a29cfe98d31299eb240afdbd4271f3d844bd7203e93c8ce349ab45085e91f4012d90000fcbfd1cdeb179b08d4bfc3ce9ac2c7f27db982098e761964a94cc77d6af31a526b6b51c4dc4031e203657873d291cbbc13a6f017868a5dc4f94af09d43170065c56f3caa5719201fccf5c6a4f84990a25d782744f9245b51d6867fa1798460b3ab566119715587080e6ed5b24047b5b6f90c39f7a62c553bc2e5b24cd58eddfdca9c1bdbd252f139e08857a2b338926f4bdc031a9ab048804bdccb8d59ccc054f3a19fcf282b5c34a8ddaea9db9fe66c6bd42c063a06044c7a353f1308bf3455367cec334259a840e5f07fccdf3637b184ad7556a39657d650936696310b7da9f60b6da030448b18c7daf6ded9476ac21b99ddcc438c7be400436d70fff252a020871d7c02cdbbb3cd101c20dc23f849bf9b650c366e6e2cf163d423978d9396d4e680517b0f36365fadd50ce128aebc3fcabf2a4de02ae18c4d84eb2b85115d7b3b5952e2695fb98f8e7a42f2cbe0348b1db5493e2e2d6ce52a5edb78c501e3cf0f06c29044e3ccb28292255acca6fd79d7bb83b6e0c8cff52322c38ded1749b437f112ba583c3e1cb969992590c673dcadf19e6ab1c5b2cd566f3594c9ead4cf5ee5859e1eee057d878ca56fe720e5a6aa44e645cbfab12169641fca65272619550b11a2a3849b0f70be75da824906b100c1d7f9330c37b0019dbcb59b9528b37224f5ca2644e84cd0a6cc68151a574f93de76a1ff6fda6b7b21483313e2ec6fb962f5a66f70579ef350fc435d4f3b953a2470a53209cc2fc8e8f170ce13b12eb5743d1015c4fb48bc5cf95125a94bb4ae7e3043dd53ef00cf64f036b1113ced6868716afdbcff09ac8a083702a64ff0430a8eec97b9e5a3aecf8c1cf3ccddf45ceaa061da36012ba9f8f89e40b77e9c51199438aaa88c187afffd19751f1269cb9b97c3e7c3cc346d97f55558a92bf0a44f789c181d36890c57adb026f58ce3185848b88bd192a794fa677e246c484cf7a3deaaf970c48cfc290529d09bcb3c08c3b53cccd40920f71ca466801b2133524cb13df8de4681c2bd9303b87f14a3cddb932aeb6cecc008a351f4470be005b68dbfa513a690c5185e009929690df8ee6207a1fe3317b81924fde8197f4ec09cc09dfcabbcea8cdd0659bb78b286b7826e67ca4d72eebdae95c828a780975fa40c18d367ec148fae538d04cecea056224fae74cef61bc9f6ae3d37a1742dd5ca35acfee5e2bc42761c8afa89a3c6d60dbf0c5ba84b87f5bfceabaf153c8b785968210fcf062764ffcc908632d78c651da394a46ee1073aee87e125c8315fdd28f5e978eec85019b859c37b66b5256649f732e1fcd1acc4034f4978915b80a998629676e5f7b6bc056f722d80073b5752b934238dc623461f2283d2d0ce15a3f78b7a96059cc92d42bba9927ecad0592564070a7a36faffeb5be223ca2b5bc1956b4645f09d3942303d371bde1bdb3eea3b2bde9319231751bdcee8b90e10b83cd4a8d29caf55801c38ef62104098a4ccad63418046cb5b4a52e0db057f6486795a689ad78523ef5b6b4a64bdd033098499d63e185038e5367bbca21e251d333598f0aee3a86196eb3fe1511a8de3e638c0db1c6e3d80b0937260e74ac53801fa7e643e64757a4fddb13f7ac3c76b40ed967837d3cb4ee4c1f81db52f7d8c3be34de672f85ee1d79edebd9237041ec7459a5fe734edd1fca4c090c621b5a66870d7e3ca9ae1755b948f6c3d446e4fdd9339c471ade7225fb5fe0eb3e5ffa48d71e7f2decb19de9e461c3cf9f2e237e03f8e4f625ad1d137c43810013ca9ba74a89d011f27b0c00757980b0919560f7419de24d1168245cd3d98bc5c872668d3e2c9e5244e58a5204057e69e83854a187cf21175a7a5d04c9cc19f707e3173ebf17eea5b1fc7c88d18de56985a192331620c845307c3452c93ac5f916f9ed5e997433ee9e5a91551433714e50c2c1e0b963c3aefe1fb617bbbe928fad0684e80a7d6bd86d859c95db6ec2ed99ad07cbb706148b2b1523229e5a6d9e6fb5b260f4c056ae023e85bfd384efdec84cfd4ae8a92c1b5691327d886dc165f0664dae9fdf29845c9f02f48192eba1969e88bb4287c338c1621d6352a403f817acfe7a946b5489477d54b222b4584408a7264c230068b60bfd353cd252842042a51bf60d529063d2aaaeb899088b376b76110046bdb7efdf1d474c357a0109d649900a7d7b0550ac8cc3f4a3db0c53d64c27eba8d16ec72eb729ec443c42ab66c982842a4f689171270d2130746541e3a4e8a984ff88864921ac6b3e9fb0220c4b6dbb89da85174f14106756acbc73ead4bdcc025c221d20208c1670e111fcdf41ce45ae03f0fd69f377c7db4aa4b383a690d1b2d0a173ecda4b414b097c73458fe57f615d8fc1f37d5428d942f0a97b72f65aaa8234483305ccd9278f4f11b11a2030a477a40a55dcaaa1318672d30edea4b13aad80e078249a1c2bb791605dea2ea86328dbb97019171b4e769ba0348e510d440bfec1b60c5b90c1a49fbb4be16ad470f177983bfa0abf2abe3ba7909491905fb34103a2afca6904a204ed42b5eca80db4fa619df662f0853c4dd550bb47793e09b2102f1eb2cf4494c63aa3c0950efa27ff4b88cca10e5e07fbd1c99a37868d0f458e3e8e3a7974b174890c7f4c333355117b01452221d4cf4041c77d32af597c27968f7360f440e26274f65151ebe890ae7702aa72902bff5b0a3533f34604df2b5b77b6f83193f541bca6aad54fe99186537059632cdf30630224d7c30b9029a2c04e37d02d53af4c179358d19fceee70c292c46ad11c98cd9fd4830ad9947826a22a0bf4665fc4062fe993b6af2e9675fe7604ca758afea53b0d55b5d5ae87b3f6dea34bb565ac050b65e6ff55ddaaa9f0f03bbc2f15b1835808393c537dad1cce297e67931cec242c1dde43216f8937ad92b5a45bfbf053ab7bdb712f2fd0fdcbd3ab59c5a4992465725f25dbd48283099d73d0d573acd8ced1ca1cb80f62ee0b38be097350d2284e86e59044d91d731838dd46d381ffe8dfff2d7f92f0fb34f098489167abe5d9169b6777b01a6eccc423437814df4d3648c11e3d0abd5767cd2e2c96c6dc6e9ac1c3b7c81d957d609c7274d828b5f93725519f545a4f7217df751cc4a1bc8f627f5d82934ce61540f1e45eaf36ca002326fc5124d3ebe0fb90f32edaebb23e95ace192c8a8ed8575809591c3cfb1048799c67a65798fc00a52c8c146157ef771eacae2c517333e59b76432dc14f86645808e5c41a9e801f2ecf6bd14d3ae64c344722869d0db21a772aac41fa9199fcf22fac29f7ddef079afd22cd1d0039d50a1959a73d447fb9a7dd4eac6a83c303958e3d35c79d7c3544905e914a28a136814b04cae9db976fb19f5436d24318c89c8e31875fff82a1125c803364b7586dd3b95dbd58d47eb6cc2e70b492693e9cb29d1d2d0b5c9dc8efbe2d612bca99577ea09561d3732bc92e089cf3ae4ded840545c0b4e451cdafb9f2abcfe5cea3a7243a4adc287bf60fd2924a74e99610cd129fc9021ecb90dbbc0755542e0193c8519784e4d1d748a67fe3b65cef6db1d38cad0d4e8cd8808d0ed479dd357c4f2b12e34abca5f0b06237aac2bee1555d20996b28dfe5540d5fe97ef34602fb4447de8d95fec008858d485a1518e217c7c04a7c77d020e48f1c3c17e9f3a7f6d1fbfa8b6b171be0444eeefa4ac925cdea8c85df74b70126bfbe2791110903c54414baf4fe3293a1481b44474c2183a640d6b605deca01c3ad64514986ce68a1055a8a7a72649e5793fc7b3eb7c5f223bd9325907070af56e45a7307e40c0edbfc84f4d78f7bea5484cd61c7fc3bb8669826459b4261e2c9a10b7db9e93428bc70716d749fc4017629ff3346c6180704cc30a71712430b382e4518571b60eea8f3a236c8164404c4b85d1ef13ed7a223d4f755627b558fa64dc57962ad23c9b6565defc72a8e27e3ae8a553522fc689510c2812cd990609c122e5a89760cdaaa4b851571945cad47a81d7e2e69e7b2a3fd77b7a4a0e33c7f173f9c7a48c3d40500228e64a8025ff83be826953426eeb83e4b986232c2af18e0ea7a7a0fab2114440938340cc62a340b5a356abfd35989299c1c9fb818d113c076ebaf199a5c6af3741ed98c7bd7b3dd248efe8a805f029df78a36a369418d5f2efa9d0bd5c62cf8c7ac7f37adb42f0f8b38c1b44e8fd2df9213320d56196789c95dc05946635a9c19714a652b3c7a3952abd2"}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f00000000c0)) [ 2701.586407][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.586414][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.586509][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.586516][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.586605][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.586771][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.586789][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.586881][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.586897][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.586989][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.587005][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.587096][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.587112][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.589513][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.589624][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.589631][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.589725][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.589732][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.589828][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.589835][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.589927][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.589934][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.590025][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.590032][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.590124][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.590131][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.590217][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.590224][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.590319][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.590326][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.590414][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.590421][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.600613][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.600633][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.600722][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.600737][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 03:37:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, r2) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@bridge_delneigh={0x28, 0x1c, 0xd03, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0xf}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) (async) preadv(r8, &(0x7f0000000280), 0x1, 0x0, 0x0) (async) splice(r3, 0x0, r7, 0x0, 0x4ffe2, 0x0) 03:37:45 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, 0x0}, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x83, 0x0, &(0x7f0000000140)) 03:37:45 executing program 3: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$char_usb(r0, &(0x7f0000000280)=""/199, 0xffffff42) 03:37:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x0, 0x0, 0x0, &(0x7f0000000480)) 03:37:45 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 03:37:45 executing program 5: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, 0x8) [ 2701.600815][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.600829][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 03:37:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x0, 0x0, 0x0, &(0x7f0000000480)) 03:37:45 executing program 4: syz_io_uring_setup(0x67f6, &(0x7f0000000200), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), 0x0) 03:37:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x40000f}]}]}}, &(0x7f0000000040)=""/178, 0x32, 0xb2, 0x1}, 0x20) [ 2701.600906][ T7155] binder: 7153:7155 unknown command 1074028805 03:37:45 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 03:37:45 executing program 0: syz_clone(0x3c0180, 0x0, 0x0, 0x0, 0x0, 0x0) [ 2701.600922][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.601000][ T7155] binder: 7153:7155 unknown command 1074028805 03:37:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x1, 0x2, 0x101}, 0x14}}, 0x0) [ 2701.601014][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.601097][ T7155] binder: 7153:7155 unknown command 1074028805 03:37:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) (async) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) kcmp(0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffffff, r2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@bridge_delneigh={0x28, 0x1c, 0xd03, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x0, 0xf}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r8, 0x0) (async) preadv(r8, &(0x7f0000000280), 0x1, 0x0, 0x0) (async) splice(r3, 0x0, r7, 0x0, 0x4ffe2, 0x0) 03:37:45 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x3, 0x0, 0x6, 0x0, @private=0xa010101, @remote}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 03:37:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}], 0x0, &(0x7f0000000480)) [ 2701.601111][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 03:37:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 03:37:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x124, 0x0, 0x0, 0x0, 0x0, "24a43bb3de8c0bc2"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 03:37:45 executing program 3: r0 = socket(0x29, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0xc0189436, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1}}) [ 2701.601187][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.601201][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.601285][ T7155] binder: 7153:7155 unknown command 1074028805 03:37:45 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 03:37:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, r5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:45 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x1f, 0x1f, 0x81, 0x1, 0x4, 0x9}, {0x0, 0x2, 0x3f, 0x0, 0xe1, 0xff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2701.601300][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.601377][ T7155] binder: 7153:7155 unknown command 1074028805 03:37:45 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="04632440f8b0af7003c4a3212ffdfded70"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x64, 0x0, &(0x7f00000002c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x1, &(0x7f00000014c0)=""/4096, 0x1000, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000200)={0x55, 0x18, 0x40}}}, @increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x0, 0x0, 0x0}) r9 = accept4$bt_l2cap(r3, 0x0, &(0x7f0000000040), 0x0) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000340)=@nfc_llcp={0x27, 0x1, 0x1, 0x7, 0x44, 0x1, "494fa8f8ecae088d2bff844210ff13e72ba958a8d93f3564a7f2035b27b0f4b1cf6f1bfa726b8a026ccc55c5c81d73b70b281ca0d2969fb34f02de524b9809", 0x9}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000700)="428eae40154e6278bcd9dcc852ebdfd2606dbd74d3567b48bd5653c7b94b6ffa2ad52d72938dc3a9befca0929a07cae25af3a06b6f82d4f6879154be06730e7f165ce66ae52350c43aa5ee4e996613f77874f78d7b2c58d442061e0dc4dea874a8f0d27d4a7d9748d42b7bd9eb3843c25e8052dc5d3ee5aeb6383380789b14240efb7a007707dfe8b9da981f32536cfe569276e045b4997a3fe701bd104dd2eb53a94b2f1a4675c55aa2369f20f0375d5d1d87a90043d7088123334ee3a56885fe83143da6e9749faa1db366fc1801fc31b243b4b471bddac4cb457a68798a0b2bfc1a0ed14ff39f71ba0d20d7c90ba0a53c93ea61a38a", 0xf7}, {&(0x7f00000001c0)="16bac347cd27417364dc2f", 0xb}], 0x2, &(0x7f0000000800)=[{0x80, 0x107, 0x1, "ee92eed02482b1875691b4470f12bfa846afb04a5881033b0f6bb655e81ad10a143086544bb3bbd5a1682b6ff3e8c498cdc7336ab1110960c8db834c91ac0cf417b964f765d18fccb2a5a56acfa1b44b9d42409df6c89b535cce85e1c83230c154fe37a3b812ac2dd19e2d"}, {0x58, 0x11, 0x1, "07f819f99fb15989d5c70db589975a7a2370da75e242a0a10ebf81686da19e8172ce7f07bda43f5f879c2c7440778562f87cd7c337bf0244a0dc209fae8b2cb9d039"}, {0xb8, 0x0, 0x0, "4a1941d38bf68b8f3e0381513ccd08e8a0cd329df5e6412e1357448d7822f84a55be3690b520ab38f8886409b059967028fa2c66bce8b34beee1ad1b89e7ded6f879729f791edf1c63138feae2127e18676b017a1a797d2a8bc78cf65b3a126ee6593b607fba747b76a7996e22213de0992787e8917d68548e6b411c7b72d13b0f30d7639e2e25d062985de40143d43abb342c08c66f22aa6c950490853d300e71bf7098bbe6b31f"}, {0x48, 0x112, 0x5, "e78bfb4c760e4dc06ca6f80fefaf25227fde665ac9984dd8ff13bfd99f32ad789aade81fb5c95f290f4855981982b70ee399fa73"}], 0x1d8}}], 0x1, 0x4000000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:45 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x100a}) dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0xc6af) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r6, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r6, r7, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}, 0x400}], 0x0, 0x0, 0x0}) 03:37:45 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}], 0x0, &(0x7f0000000480)) [ 2701.601393][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.601474][ T7155] binder: 7153:7155 unknown command 1074028805 03:37:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000001400)="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"/3584, 0xe00) sendfile(r2, r3, 0x0, 0x11f06) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}, @release={0x40046306, 0x2}], 0xb4, 0x0, &(0x7f0000000180)="825925b84b6ceb45dac7b87ef7ff1f1da7d59db0a6f62ea9f227484fcf537bd94fbb69303a37b9ce88b5380655f804cc2d7e5f331afbb6bbd993812d90e541cef097db30ef65c8afe6be1bee68819b500fbbe47ca7e14913e4276a3d55818fb6a533009507ff327481d12b8e3268a8b6b84b5ffb759ca9bdb0013238fde749e326c681b5a4f8420304d3830ae8777fb7c4826dfcb30332d30c8109d534209d2649f57c5274185d881122923577b01999ff1168d9"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = dup2(r4, r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2701.601489][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.631660][ T7161] loop2: detected capacity change from 0 to 21 [ 2701.632557][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.632570][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 03:37:46 executing program 3: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) [ 2701.632861][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.632869][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 03:37:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}], 0x0, &(0x7f0000000480)) [ 2701.634177][ T7162] binder_alloc_mmap_handler: 22 callbacks suppressed [ 2701.634193][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 [ 2701.634253][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 03:37:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x1500}], 0x0, &(0x7f0000000480)) [ 2701.634319][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 [ 2701.634381][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 [ 2701.634439][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 [ 2701.634497][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 [ 2701.634557][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 [ 2701.634616][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 [ 2701.634673][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 03:37:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x1500}], 0x0, &(0x7f0000000480)) [ 2701.634822][ T7162] binder_alloc: binder_alloc_mmap_handler: 7153 20ffc000-20ffd000 already mapped failed -16 [ 2701.636721][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.636731][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.636827][ T7154] binder: BINDER_SET_CONTEXT_MGR already set 03:37:46 executing program 0: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) [ 2701.636834][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.636918][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.636925][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.637011][ T7154] binder: BINDER_SET_CONTEXT_MGR already set 03:37:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {0x0, 0x0, 0x1500}], 0x0, &(0x7f0000000480)) [ 2701.637018][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.637156][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.637174][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.637260][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.637275][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.637350][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.637366][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.637445][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.637460][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.637537][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.637552][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.637629][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.637644][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.637724][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.637740][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.637829][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.637844][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.637933][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.637948][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.638038][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.638053][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.638330][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.638338][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.638422][ T7154] binder: BINDER_SET_CONTEXT_MGR already set 03:37:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0900010000000000000066696c65300a"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x800000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:46 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x1f, 0x1f, 0x81, 0x1, 0x4, 0x9}, {0x0, 0x2, 0x3f, 0x0, 0xe1, 0xff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r3) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x1f, 0x1f, 0x81, 0x1, 0x4, 0x9}, {0x0, 0x2, 0x3f, 0x0, 0xe1, 0xff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) [ 2701.638429][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.638511][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.638517][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 03:37:46 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0xff00000000000000, 0x0}) 03:37:46 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}], 0x0, &(0x7f0000000480)) [ 2701.638595][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.638602][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 03:37:46 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x1f, 0x1f, 0x81, 0x1, 0x4, 0x9}, {0x0, 0x2, 0x3f, 0x0, 0xe1, 0xff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r3) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x1f, 0x1f, 0x81, 0x1, 0x4, 0x9}, {0x0, 0x2, 0x3f, 0x0, 0xe1, 0xff}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) (async) [ 2701.638686][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.638693][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.638771][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.638778][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.638859][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.638866][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.638952][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.638959][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.639046][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.639053][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.639139][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.639147][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.639234][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.639241][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.641875][ T7161] loop2: unable to read partition table [ 2701.642044][ T7161] loop2: partition table beyond EOD, truncated [ 2701.646198][ T7161] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (10 blocks) [ 2701.654031][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.654042][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.654380][ T7154] binder: BINDER_SET_CONTEXT_MGR already set [ 2701.654388][ T7154] binder: 7153:7154 ioctl 4018620d 20000000 returned -16 [ 2701.662667][ T7155] binder: 7153:7155 unknown command 1074028805 [ 2701.662689][ T7155] binder: 7153:7155 ioctl c0306201 20001480 returned -22 [ 2701.797806][ T7174] loop2: detected capacity change from 0 to 21 [ 2701.807792][ T7174] loop2: unable to read partition table [ 2701.808064][ T7174] loop2: partition table beyond EOD, truncated [ 2701.811109][ T7174] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (10 blocks) [ 2702.030606][ T7195] loop2: detected capacity change from 0 to 21 [ 2702.056599][ T7195] loop2: unable to read partition table [ 2702.056775][ T7195] loop2: partition table beyond EOD, truncated [ 2702.057505][ T7195] EXT4-fs (loop2): bad geometry: block count 512 exceeds size of device (10 blocks) [ 2703.057481][ T7243] loop2: detected capacity change from 0 to 1024 [ 2703.086322][ T7243] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2703.086877][ T7243] EXT4-fs (loop2): get root inode failed [ 2703.086895][ T7243] EXT4-fs (loop2): mount failed [ 2703.165268][T14773] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2703.165306][T14773] Buffer I/O error on dev loop2, logical block 0, async page read [ 2703.165374][T14773] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2703.165403][T14773] Buffer I/O error on dev loop2, logical block 3, async page read [ 2703.199258][ T7256] binder: 7254:7256 ioctl c0306201 20001480 returned -14 [ 2703.199488][ T7256] binder: 7254:7256 ioctl c0c0583b 20000700 returned -22 [ 2703.228786][ T7258] binder: 7257:7258 ioctl c0306201 20001480 returned -14 [ 2703.254908][ T7260] binder: transaction release 8079 bad object at offset 0, size 0 [ 2703.254930][ T7260] binder: transaction release 8079 bad object at offset 0, size 0 [ 2703.254946][ T7260] binder: transaction release 8079 bad object at offset 0, size 0 [ 2703.284510][ T7262] binder: 7259:7262 unknown command 1076126468 [ 2703.284533][ T7262] binder: 7259:7262 ioctl c0306201 20000080 returned -22 [ 2703.290569][ T7266] binder: transaction release 8083 bad object at offset 0, size 0 [ 2703.290588][ T7266] binder: transaction release 8083 bad object at offset 0, size 0 [ 2703.290604][ T7266] binder: transaction release 8083 bad object at offset 0, size 0 [ 2703.296168][ T7263] binder: 7261:7263 ioctl c0306201 20001480 returned -14 [ 2703.296823][ T7265] loop2: detected capacity change from 0 to 1024 [ 2703.321551][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 2703.321567][ T28] audit: type=1800 audit(2000000266.069:2447): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1185 res=0 errno=0 [ 2703.327472][ T7265] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2703.328013][ T7265] EXT4-fs (loop2): get root inode failed [ 2703.328031][ T7265] EXT4-fs (loop2): mount failed [ 2703.341787][ T28] audit: type=1804 audit(2000000266.089:2448): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4191523969/syzkaller.iizZr2/4959/file0" dev="sda1" ino=1185 res=1 errno=0 [ 2703.363571][ T28] audit: type=1800 audit(2000000266.109:2449): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1186 res=0 errno=0 [ 2703.365588][ T28] audit: type=1804 audit(2000000266.119:2450): pid=7270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1751632480/syzkaller.vy5S8o/4539/file0" dev="sda1" ino=1186 res=1 errno=0 [ 2703.381433][T14773] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2703.381470][T14773] Buffer I/O error on dev loop2, logical block 0, async page read [ 2703.381532][T14773] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2703.381560][T14773] Buffer I/O error on dev loop2, logical block 3, async page read [ 2703.441999][ T7271] binder: BINDER_SET_CONTEXT_MGR already set [ 2703.442011][ T7271] binder: 7267:7271 ioctl 4018620d 20000000 returned -16 [ 2703.443067][ T7271] binder: 7267:7271 ioctl c0306201 20001480 returned -14 [ 2703.486023][ T7274] loop2: detected capacity change from 0 to 1024 [ 2703.501326][ T7274] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2703.501960][ T7274] EXT4-fs (loop2): get root inode failed [ 2703.501977][ T7274] EXT4-fs (loop2): mount failed [ 2703.699578][ T7281] loop2: detected capacity change from 0 to 1024 [ 2703.762791][ T7281] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2703.763298][ T7281] EXT4-fs (loop2): get root inode failed [ 2703.763315][ T7281] EXT4-fs (loop2): mount failed [ 2703.770094][ T7284] Error: Driver 'raw-gadget' is already registered, aborting... [ 2703.770107][ T7284] UDC core: USB Raw Gadget: driver registration failed: -16 [ 2703.770127][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2703.786200][T15388] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2703.840053][ T7286] loop2: detected capacity change from 0 to 1024 [ 2703.861768][ T7286] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2703.872329][ T7286] EXT4-fs (loop2): get root inode failed [ 2703.872348][ T7286] EXT4-fs (loop2): mount failed [ 2704.047064][T15388] usb 4-1: Using ep0 maxpacket: 16 [ 2704.056069][ T7290] loop2: detected capacity change from 0 to 1024 [ 2704.093109][ T7292] binder: 7289:7292 ioctl c0306201 20001480 returned -14 [ 2704.093258][ T7292] binder: 7289:7292 ioctl c0c0583b 20000700 returned -22 [ 2704.107043][ T7290] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2704.107519][ T7290] EXT4-fs (loop2): get root inode failed [ 2704.107536][ T7290] EXT4-fs (loop2): mount failed [ 2704.132399][ T7294] binder: 7291:7294 ioctl c0189377 20000040 returned -22 [ 2704.152181][ T7295] binder: transaction release 8102 bad object at offset 0, size 0 [ 2704.152204][ T7295] binder: transaction release 8102 bad object at offset 0, size 0 [ 2704.152220][ T7295] binder: transaction release 8102 bad object at offset 0, size 0 [ 2704.194293][T15388] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2704.194332][T15388] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 2704.194362][T15388] usb 4-1: config 1 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2704.194391][T15388] usb 4-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2704.194420][T15388] usb 4-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2704.194449][T15388] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2704.194476][T15388] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2704.211520][ T7299] loop2: detected capacity change from 0 to 1024 [ 2704.263551][ T7303] binder: 7302:7303 ioctl c0306201 20001480 returned -14 [ 2704.263730][ T7303] binder: 7302:7303 ioctl c0c0583b 20000700 returned -22 [ 2704.274536][ T7299] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2704.275033][ T7299] EXT4-fs (loop2): get root inode failed [ 2704.275050][ T7299] EXT4-fs (loop2): mount failed [ 2704.278771][ T7301] binder: 7300:7301 ioctl c0306201 20001480 returned -14 [ 2704.328905][ T7305] binder: transaction release 8115 bad object at offset 0, size 0 [ 2704.328928][ T7305] binder: transaction release 8115 bad object at offset 0, size 0 [ 2704.328945][ T7305] binder: transaction release 8115 bad object at offset 0, size 0 [ 2704.334957][ T7314] binder: transaction release 8116 bad object at offset 0, size 0 [ 2704.334978][ T7314] binder: transaction release 8116 bad object at offset 0, size 0 [ 2704.334996][ T7314] binder: transaction release 8116 bad object at offset 0, size 0 [ 2704.624227][T15388] usb 4-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2704.624264][T15388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2704.624290][T15388] usb 4-1: SerialNumber: syz [ 2704.639448][ T7277] raw-gadget gadget.3: fail, usb_ep_enable returned -22 [ 2704.886276][T15388] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2705.320020][T15388] gspca_spca508: reg_read err -71 [ 2705.338050][T15388] gspca_spca508: reg_read err -71 [ 2705.354098][T15388] gspca_spca508: reg_read err -71 [ 2705.374107][T15388] gspca_spca508: reg_read err -71 [ 2705.394055][T15388] gspca_spca508: reg write: error -71 [ 2705.394107][T15388] spca508: probe of 4-1:1.0 failed with error -71 [ 2705.397308][T15388] usb 4-1: USB disconnect, device number 12 [ 2705.402616][T14773] udevd[14773]: setting owner of /dev/bus/usb/004/012 to uid=0, gid=0 failed: No such file or directory 03:37:48 executing program 3: r0 = socket$kcm(0x2, 0x8000000000005, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='v', 0x34000}], 0x1}, 0x0) madvise(&(0x7f0000ff5000/0x8000)=nil, 0x8000, 0x64) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000006c0)="82", 0x1}], 0x1}, 0x0) mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000, 0x6, &(0x7f0000ffb000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000002101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x50, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x1d, r3}, 0x10, &(0x7f00000001c0)={&(0x7f0000000080)={0x1, 0x651, 0xffff, {}, {0x77359400}, {0x0, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "3bd6308082a33c5e"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x800) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000940)={0xe4, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x1, 0x2}, {0x3f, 0x1}, {0x80, 0x1}, {0x2, 0x4}, {0x40, 0x6}, {}, {0x7f, 0x2}, {0x5}, {0x5, 0x3}, {0x5}, {0xff}, {0x2, 0x1}, {0x1, 0x4}, {0x8, 0x5}, {0x81, 0x3}, {0x3f, 0x3}], "8c86740abce08b4d"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x56, 0x2}, {0x7, 0x1}, {0x0, 0x4}, {0x9, 0x6}, {0x93, 0x5}, {0x7f, 0x1}, {0xc1, 0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x81, 0x2}], "2a184c89a55778c2"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x9, 0x5}, {0x1f}, {0x9, 0x5}, {0x0, 0x7}, {0x5, 0x7}, {0x5, 0x1}, {0x6c, 0x5}, {0x4}, {0x1, 0x4}, {0x8, 0x1}, {0x0, 0x5}, {}, {0x20, 0x2}, {0x4, 0x7}, {0x1, 0x3}, {0x4}], "98fe360eb0a7cbd9"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x80, 0x3}, {0xfe, 0x2}, {0x80, 0x2}, {0x3, 0x7}, {0x7, 0x1}, {0xdb, 0x1}], "299a540022cb258a"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x5, 0x2}, {0x4, 0x4}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x7}, {0x80, 0x3}, {0xce, 0x2}, {0x1f, 0x5}, {0x72, 0x6}, {0x0, 0x7}, {0x3, 0x4}, {0x20, 0x2}, {0x20, 0x2}, {0x5, 0x4}, {0x4, 0x3}, {0x6, 0x1}], "c5db55cbe08a339e"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x6b}, {0x1, 0x1}, {0xa9, 0x6}], "bda5413d0bab629f"}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x400c0}, 0x20008090) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)='n', 0x1}], 0x1}, 0x0) 03:37:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00), 0x0, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:48 executing program 0: r0 = syz_usb_connect(0x0, 0xb1, &(0x7f0000001200)={{0x12, 0x1, 0x0, 0xfb, 0x3e, 0x24, 0x10, 0xaf9, 0x11, 0x3dcc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9f, 0x1, 0x1, 0x6, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x7, 0xb3, 0x7f, 0xfb, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x2, 0x8, 0x1}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x0, 0x0, 0x8}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}]}], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x0, 0x1f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x200}]}}, {{0x9, 0x5, 0x1, 0x0, 0x0, 0x3f, 0xae, 0x20}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0x0, 0x1f}}, {{0x9, 0x5, 0xe, 0x3, 0x0, 0x9, 0xb3, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x400}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x10, 0x0, 0x40, [@generic={0x2}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000002040)=@lang_id={0x4, 0x3, 0x861}}, {0x0, 0x0}, {0x2, &(0x7f0000002140)=@string={0x2}}]}) syz_usb_control_io$printer(r0, &(0x7f00000023c0)={0x14, 0x0, &(0x7f0000002300)={0x0, 0x3, 0x96, @string={0x96, 0x3, "884ace0a08f235bb3192777e59a9bf4b832fd25dc574a5299d34563d8c001f4e33a58a5d2962c656b91e5606da6a80a744e45c8bf4d69d6170888cc6a0268312fa2150cd73db9586654d412a09fb057945c9c8133f726961ab3c1e05bb9475c58d74632907639e2c6af893c03c1f94e315a313fea48d4458df56b945d60c806937a301dc20e788efbb1a617ff5d6e8b4eb328ab5"}}}, &(0x7f0000002640)={0x34, 0x0, &(0x7f0000002500)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002540)={0x0, 0x8, 0x1}, &(0x7f0000002580)={0x20, 0x0, 0x2}, &(0x7f00000025c0)={0x20, 0x1, 0x1}, &(0x7f0000002600)={0x20, 0x0, 0x1, 0x3}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000028c0)={0x14, &(0x7f0000002800)={0x20, 0x30, 0x6d, {0x6d, 0xe, "462578dd393ee3d8f65ccec14ee1a5dbfd8c626cfc4aa8d719b89071ea2c64da282896ab2ceadd9082e4c9be6b80d861721d331a5c053a0612064f6363adca15c1d7e8fc4bb5660da6633503957b20727bfec7c1b6fe240b1442242882f22c5361945158ca8c890587f1cd"}}, &(0x7f0000002880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000002a40)={0x1c, &(0x7f0000002900)={0x0, 0xd, 0x6e, "3951f72ea5099983f5929e95a8585ba08cc0f4ab096b80a131356cc16439d969ad2cb4f7681aed19d21dbabe4f025831666a993c79b3b540b25faa6839c91c34a2b7f3cfb8ba298dd094c37d7bd51c2287256dd2269ddd3c4c2178f8583c27b93f279b381a819cc54322c6dd2a5b"}, &(0x7f00000029c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000002a00)={0x0, 0x8, 0x1, 0x2}}) 03:37:48 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x0) r6 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r6, 0x14a, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) 03:37:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x6c000000, 0x0}) 03:37:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0900010000000000000066696c65300a"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x800000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 03:37:48 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x4800, 0x0}) [ 2705.876641][ T7327] loop2: detected capacity change from 0 to 1024 [ 2705.898785][ T7326] binder: 7323:7326 ioctl c0189377 20000040 returned -22 03:37:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0900010000000000000066696c65300a"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x800000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2705.901044][ T7328] binder: 7322:7328 ioctl c0306201 20001480 returned -14 [ 2705.906646][ T7324] binder: BINDER_SET_CONTEXT_MGR already set 03:37:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1500}], 0x0, &(0x7f0000000480)) [ 2705.906659][ T7324] binder: 7321:7324 ioctl 4018620d 20000000 returned -16 [ 2705.907157][ T7324] binder: 7321:7324 ioctl c0306201 20001480 returned -14 [ 2705.925367][ T7327] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated 03:37:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0900010000000000000066696c65300a"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x800000000000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) [ 2705.925979][ T7327] EXT4-fs (loop2): get root inode failed [ 2705.925999][ T7327] EXT4-fs (loop2): mount failed [ 2706.022649][ T7334] binder: 7333:7334 ioctl c0306201 20001480 returned -14 [ 2706.076155][ T7340] binder: transaction release 8139 bad object at offset 0, size 0 03:37:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0900010000000000000066696c65300a"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x800000000000000) 03:37:48 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1500}], 0x0, &(0x7f0000000480)) [ 2706.076179][ T7340] binder: transaction release 8139 bad object at offset 0, size 0 [ 2706.076196][ T7340] binder: transaction release 8139 bad object at offset 0, size 0 [ 2706.083768][ T7337] binder: 7336:7337 ioctl c0189377 20000040 returned -22 [ 2706.090287][ T7341] loop2: detected capacity change from 0 to 1024 [ 2706.117661][ T7341] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2706.118303][ T7341] EXT4-fs (loop2): get root inode failed [ 2706.118331][ T7341] EXT4-fs (loop2): mount failed [ 2706.136363][T18213] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2706.185994][ T7344] binder: 7343:7344 ioctl c0189377 20000040 returned -22 [ 2706.285162][ T7348] loop2: detected capacity change from 0 to 1024 [ 2706.290706][ T7347] binder: 7346:7347 ioctl c0189377 20000040 returned -22 [ 2706.304956][ T7348] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2706.311158][ T7348] EXT4-fs (loop2): get root inode failed [ 2706.311178][ T7348] EXT4-fs (loop2): mount failed [ 2706.394160][T18213] usb 1-1: Using ep0 maxpacket: 16 [ 2706.514132][T18213] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2706.514167][T18213] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 2706.514193][T18213] usb 1-1: config 1 interface 0 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 2706.514219][T18213] usb 1-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2706.514245][T18213] usb 1-1: config 1 interface 0 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 2706.514272][T18213] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 2706.514298][T18213] usb 1-1: config 1 interface 0 has no altsetting 0 03:37:49 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x0) r6 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r6, 0x14a, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) 03:37:49 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0900010000000000000066696c65300a"]) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) 03:37:49 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf465", 0xf, 0x1500}], 0x0, &(0x7f0000000480)) [ 2706.799708][ T7352] loop2: detected capacity change from 0 to 1024 [ 2706.825757][ T7352] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2706.826229][ T7352] EXT4-fs (loop2): get root inode failed [ 2706.826246][ T7352] EXT4-fs (loop2): mount failed [ 2706.861368][ T7353] binder: 7350:7353 ioctl c0189377 20000040 returned -22 [ 2706.896938][ T7356] binder: 7355:7356 ioctl c0306201 20001480 returned -14 [ 2706.911749][T18213] usb 1-1: New USB device found, idVendor=0af9, idProduct=0011, bcdDevice=3d.cc [ 2706.911794][T18213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2706.911821][T18213] usb 1-1: SerialNumber: syz [ 2706.938322][ T7325] raw-gadget gadget.0: fail, usb_ep_enable returned -22 [ 2707.176574][T18213] gspca_main: spca508-2.14.0 probing 0af9:0011 [ 2707.614221][T18213] gspca_spca508: reg_read err -71 [ 2707.634055][T18213] gspca_spca508: reg_read err -71 [ 2707.654059][T18213] gspca_spca508: reg_read err -71 [ 2707.674046][T18213] gspca_spca508: reg_read err -71 [ 2707.694175][T18213] gspca_spca508: reg write: error -71 [ 2707.694227][T18213] spca508: probe of 1-1:1.0 failed with error -71 [ 2707.701817][T18213] usb 1-1: USB disconnect, device number 38 03:37:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x500, 0x0}) 03:37:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0xa00, 0x0}) 03:37:50 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (rerun: 64) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x0) (async) r6 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r6, 0x14a, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) 03:37:50 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0900010000000000000066696c65300a"]) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_trie\x00') 03:37:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000", 0x16, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:50 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x600, 0x0}) [ 2708.152458][ T7364] loop2: detected capacity change from 0 to 1024 [ 2708.169286][ T7365] binder: 7358:7365 ioctl c0306201 20001480 returned -14 [ 2708.173188][ T7368] binder: 7360:7368 ioctl c0189377 20000040 returned -22 03:37:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r2, r4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="0900010000000000000066696c65300a"]) [ 2708.197516][ T7369] binder: 7359:7369 ioctl c0306201 20001480 returned -14 [ 2708.202449][ T7364] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2708.202931][ T7364] EXT4-fs (loop2): get root inode failed [ 2708.202949][ T7364] EXT4-fs (loop2): mount failed 03:37:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 03:37:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000", 0x16, 0x1500}], 0x0, &(0x7f0000000480)) [ 2708.228472][ T7366] binder: 7362:7366 ioctl c0306201 20001480 returned -14 [ 2708.229062][ T7366] binder_alloc_mmap_handler: 22 callbacks suppressed 03:37:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) [ 2708.229079][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 [ 2708.229143][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 [ 2708.229203][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 03:37:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) [ 2708.229296][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 [ 2708.229360][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 [ 2708.229421][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 03:37:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)=""/84, &(0x7f0000000200)=0x54) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) [ 2708.229486][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 [ 2708.229545][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 [ 2708.229605][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 [ 2708.229665][ T7366] binder_alloc: binder_alloc_mmap_handler: 7362 20ffc000-20ffd000 already mapped failed -16 [ 2708.236883][ T7373] binder: transaction release 8173 bad object at offset 0, size 0 [ 2708.236904][ T7373] binder: transaction release 8173 bad object at offset 0, size 0 [ 2708.236920][ T7373] binder: transaction release 8173 bad object at offset 0, size 0 [ 2708.238179][ T7372] binder: 7371:7372 ioctl c0306201 20001480 returned -14 [ 2708.250014][ T7374] binder: transaction release 8178 bad object at offset 0, size 0 [ 2708.250037][ T7374] binder: transaction release 8178 bad object at offset 0, size 0 [ 2708.250054][ T7374] binder: transaction release 8178 bad object at offset 0, size 0 [ 2708.273131][ T7376] binder: 7375:7376 ioctl c0189377 20000040 returned -22 [ 2708.297255][ T7377] binder: transaction release 8182 bad object at offset 0, size 0 [ 2708.297281][ T7377] binder: transaction release 8182 bad object at offset 0, size 0 [ 2708.297298][ T7377] binder: transaction release 8182 bad object at offset 0, size 0 [ 2708.382315][ T7381] loop2: detected capacity change from 0 to 1024 [ 2708.423477][ T7381] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2708.433361][ T7381] EXT4-fs (loop2): get root inode failed [ 2708.433382][ T7381] EXT4-fs (loop2): mount failed 03:37:51 executing program 0: r0 = socket$kcm(0x2, 0x8000000000005, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)='v', 0x34000}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f0000000680)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000840)=[{&(0x7f00000006c0)="82", 0x1}], 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/50, 0x32}], 0x1, &(0x7f00000000c0)=""/47, 0x2f}, 0x40000000) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000240)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000580)=[{&(0x7f00000002c0)='n', 0x1}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c0000002e0000012dbd7000fcdbdf250000e0ff", @ANYRES32=0x0, @ANYBLOB="0300f3ff0c0010000000030008000b00e7c8603d08000b00ff07000008000b00ff03000008000b000600000008000b000080000008000b000700000008000b000500000008000b000700000008000b00ff000000"], 0x6c}, 0x1, 0x0, 0x0, 0x804}, 0x4008040) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r2, 0x25, 0x10}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500a37d00000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xed, &(0x7f0000000100)=""/237, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r5, 0x25, 0x10}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500a37d00000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xed, &(0x7f0000000100)=""/237, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000880)={r6, r8, 0x25, 0x2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="6772265279d2d3009a7739e8f1", @ANYRES32=0x0, @ANYBLOB="0788001000006f920000000949f6002400660000032f907800000000ac1414aa008907ce640101009207214c592e8200"]}) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=@RTM_DELMDB={0x118, 0x55, 0x100, 0x70bd2c, 0x25dfdbfe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x1, 0x1, 0x3, {@ip4=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x1, 0x0, 0x2, {@ip4=@multicast2}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x1, 0x1, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x3, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x1, 0x0, {@ip4=@dev={0xac, 0x14, 0x14, 0x22}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0xcd0331cd26b083db, 0x3, {@ip4=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@remote, 0x86dd}}}]}, 0x118}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) 03:37:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f0000", 0x16, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) 03:37:51 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000000580)="00000000000000000000000082e36724c6f34caa056ed2e527703378010040aa9b325b29234d331173dad586d794154046601be22baec35ca7a2986a34796ffc9c89fdaa0fe4947d48f94c347d8644f3d60885f04b0eb6914b0b933118ef4d6934e2c834eaba4830796e03341732e4956aefb980951d877eecf48a655948cb651fc8dd30f6e373701cfac97c49dc78855eea0c2a92067d58438aef3e94d7ed0948dedb7d4490c767f07b91205d1e1c17b5ea92a8076dd5ae76ea58dc289f4394665670be88de2b0141a7599fa3e8c002a8c2", 0xd2, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x54, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000400)=@v2={0x2, @adiantum, 0x0, '\x00', @a}) chdir(&(0x7f0000000140)='./file0\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x802, 0xa0) syz_mount_image$ext4(&(0x7f0000000300)='ext2\x00', &(0x7f00000003c0)='./bus\x00', 0x80, 0x0, &(0x7f0000000400), 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6a6f75726e612c5f696f7072696f3d3078303030303030303030303030303030362c646174613d6a6f75726e616c2c61626f727454af3446fafaa3928b3c4a2c6a6f75726e616c5f706174683d2e2f6275732c70726a71756f74612c6e6f7265636f766572792c6a71666d743d76667376312c6f626a5f726f6c653d65787434002c6673636f6e74657874"]) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x0) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50}, 0x50) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000029c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000002ac0)=0xe8) stat(&(0x7f0000002b80)='./file0/../file0\x00', &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() ioprio_get$uid(0x3, r6) r7 = getgid() syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1e00}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x961a}}, {}, {@allow_other}], [{@fsmagic={'fsmagic', 0x3d, 0x8}}, {@permit_directio}]}}) syz_fuse_handle_req(r1, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000003080)={&(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x24, 0x56f, 0x120000, 0x93, 0x8, 0x2356, 0x622}}, &(0x7f0000000700)={0x18, 0xffffffffffffffda, 0x1000000, {0x7}}, &(0x7f0000000740)={0x18, 0xffffffffffffffda, 0x8001, {0x148000}}, &(0x7f00000027c0)={0x18, 0xfffffffffffffff5, 0xc1, {0xbba8}}, &(0x7f0000002800)={0x18, 0xffffffffffffffda, 0x7ff, {0xffff0000}}, &(0x7f0000002840)={0x28, 0x0, 0x8000000000000001, {{0x7, 0x1000}}}, &(0x7f0000002880)={0x60, 0x0, 0x6, {{0x6, 0x9, 0x3ff, 0x7, 0x15, 0x2}}}, &(0x7f0000002900)={0x18, 0x6feb55a001d0b74a, 0x100000001, {0x8001}}, &(0x7f0000002940)={0x17, 0xfffffffffffffffe, 0x100000000, {'(,\'--,\x00'}}, &(0x7f0000002980)={0x20, 0x0, 0x5, {0x0, 0x3}}, &(0x7f0000002b00)={0x78, 0x0, 0x1, {0x2b, 0x84, 0x0, {0x5, 0x7fffffff, 0x800, 0x2, 0x4, 0x55, 0x28, 0x1, 0xfc92, 0x8000, 0xc, r4, 0xee01, 0x2, 0x66}}}, &(0x7f0000002c40)={0x90, 0x0, 0x2, {0x1, 0x3, 0x6, 0x5, 0x8, 0x5f, {0x5, 0xff, 0x40, 0x4, 0x30c0, 0x7fffffffffffffff, 0x3, 0xffffffff, 0x6, 0x8000, 0x24ae, r5, 0x0, 0x7edc9251, 0x1}}}, &(0x7f0000002d00)={0x70, 0xffffffffffffffda, 0xf7e, [{0x3, 0x9, 0x1, 0x5, ']'}, {0x5, 0x8, 0x5, 0x10001, 'ext2\x00'}, {0x3, 0x2, 0x5, 0x9, 'ext2\x00'}]}, &(0x7f0000002d80)={0x1e8, 0x0, 0x8000000000000001, [{{0x6, 0x0, 0x4, 0x8, 0x6, 0x3f, {0x1, 0x867, 0x5, 0x7ff, 0x0, 0x1, 0x0, 0x400000, 0xfffffffa, 0xe000, 0x4, 0x0, 0xee01, 0x3, 0x9}}, {0x0, 0x3, 0x5, 0x7fffffff, 'ext2\x00'}}, {{0x4, 0x1, 0x7, 0x3, 0x10000, 0x80000000, {0x4, 0x1, 0x7, 0x3, 0x3, 0x40, 0x7, 0x2, 0xff, 0x8000, 0x200, r6, 0xee00, 0x4, 0x5}}, {0x5, 0x2, 0x1, 0x175f, '\x00'}}, {{0x6, 0x1, 0x7dab, 0x8, 0x3f15, 0x200, {0x0, 0x6, 0x4, 0x6, 0x0, 0x1, 0x7, 0x4, 0x9, 0x1000, 0x0, 0xee00, r7, 0x1, 0x6d}}, {0x4, 0x9, 0x0, 0x3ff}}]}, &(0x7f0000002f80)={0xa0, 0x0, 0x100000000, {{0x6, 0x2, 0x8000, 0x75d0, 0xfffffffe, 0x3, {0x4, 0x9, 0xffffffffffffa885, 0x401, 0x7ff, 0x5, 0x4, 0x3, 0x6, 0x8000, 0x3, 0xee01, 0xffffffffffffffff, 0xfffffaa6}}, {0x0, 0x4}}}, &(0x7f0000003040)={0x20, 0x0, 0x5, {0xff0, 0x4, 0x0, 0x9}}}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000020}, 0x801) open_tree(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x18800) fallocate(r2, 0x0, 0x0, 0x1000f4) r8 = openat$incfs(r0, &(0x7f0000000500)='.log\x00', 0x14000, 0x30) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r8, 0xc0406619, &(0x7f0000000540)={@id={0x2, 0x0, @a}}) 03:37:51 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) (async) r5 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x0) (async) r6 = syz_io_uring_setup(0x5a9a, &(0x7f00000000c0), &(0x7f0000002000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r6, 0x14a, 0x0, 0x0, 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) 03:37:51 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f000005ea00)={{0x0, 0x81, 0x8, 0x1000, 0xffffffff, 0x800, 0x2, 0xfff, 0xa5bf, 0x8, 0x401, 0x1, 0x3, 0xf58, 0x9}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005fa00)={0x4, [{}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {0x0}, {0x0, 0x0}], 0x9, "54e52af967291b"}) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r12, 0x8982, &(0x7f0000000000)={0x0, 'batadv0\x00', {0x3}, 0xfffc}) setsockopt$packet_tx_ring(r12, 0x107, 0xd, &(0x7f0000000040)=@req3={0x8000, 0x9, 0x20230}, 0x1c) ioctl$sock_SIOCDELRT(r12, 0x890c, &(0x7f00000000c0)={0x0, @hci={0x1f, 0x1}, @rc={0x1f, @none, 0x1}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x2, 0x4}}, 0x8001, 0x0, 0x0, 0x0, 0x7fff, &(0x7f0000000080)='bond_slave_1\x00', 0x6, 0x1, 0x2}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r12, 0xd000943d, &(0x7f0000008c80)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x55, "c5816464c57f7e"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000009c80)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r12, 0xd000943e, &(0x7f0000009e80)={r14, r15, "c4984bd86d19a51082c56c1abbd621d36634a961805e94492f395be4673f16a077437c8746136d318753c4fac372abb01193de180f9ee6f509ad3991de5ac8957a28171dcfa612b15302b3e85d95a191c2072313b9b9bdb7003732b03817b2ca1f2c540705b7f73b5e8d6fc9b6a133cf601d17ebacc4772e8d5f99421d1b33fd84c91edf35fde608a4903210436ccccd17f658425002cb08aac8ed320787e8ecd6cf545b17c7d9dd33a1edd98a7783f4ab0bb631200640acbb0e694372524e0e5fcf7e8d77febc5d338bdd030723c961036f7dfc3aa31c0ef066c26ca8825b1c0ea593e79ba08255c899d64912a175026ab46c22f29f7cfcb444a0c51f4c4677", "8e6968167a91af651079fef2db50c5ad63b5f2778069bd7577f1f83444781e8e63cdc798221e5cf257ae1c0f56717b6accd09839fd521af59e078207b1da88f633ae664b034a437cf831b009b435b95a3d4413264371f49a4f57a235156c598ac6ff6f1bf0c7c6eb72b374eb806786f312443c1cc79d6cd32c9c3cb808097d929792a51c221e239bf3c9822cf8d7573996287a3bb0cb980709481ab288264c3b23d4ee6629bc7058dd85e0273cc9f334c40e8de4c48d8853dd9592754ceaec225550b3d8da764abe083eb0d5bcedaa8aa7e80fd30eb04c1d6477c37a3901fcd77325334602ac161a8c29fdd8fec9220bd6a93110617a9a32d53a20faef491e133330372e7504b64de5bf7da0d639654a960ef8b644453a636d3203c492a2ab927fd206fe8972638f21f2703f0aa60baa4639df5f9162a82200c34fe290bad640ea4bbcfa8a035b7a9e20d4be81083054c799734d9b587357498f94eccd4d8192c756ea24a808de0f552679759b4a15ba0a2493b84b2a22ab53b2ca1562c4e30d3926b26da41a6266969f48edca9ce896a135799a25d058b57a4d9218a720ee74083c3b2b8eb37e81659ee9ac748f4a5ff5dc92a66760ef2190f537ab46681dfa397c06c94352fd51097ec861d56a02d8cf19c8e2663a0f8ddc2472ad5a860b8abfa4cf18789ee35c60d14391922f5a3f2776f03cf0cb9a49221411e9aecd1e7d239e820e43036873bc4dbe14a5faff4f343a71e4ea846df9bf380e8c00a6b7f3c295cb55eacf223e6a91fb65c7021fa7cc22ee14eef034d038a34d8d4eb039f346e6bc34272a39f135a138514c4526f83289c7b9aecfa32199eb664cb633b8bebe30afeedf4bbd83d04781703c93fbe547bacd6b8d667e55004e5abeedbad87888d2bcb6d7a81c7a5a70c12086dd2eb0ded25fafc0be10006e19a6fac752931b4507817ce5684c50e62b57474e617a2cb91c627e9c834eced807d3ff18ce1a105e64f8836d2e4c61d405e0b812cc5c2f3f7598cd66af2529ee4637d16b53fc996a7435ea0089d602575f506a85b1bfa2b33ae080e310a6eda47b83cbb7de6b7e1316dd1af8612477ce023b4db2a102e38cb182479bcb5646094fc20bff911d54a0e8124c5a35437638700dca79aa305edbd168d90636ec86b52e0c3467c3d993cc0068f1c1050bc0fa357b4c5670bc109c77f61eafc25d0e2c559b289a6b595a296ab73cbd651c89e1178b3d851c7e4fcdb6e6f33319ae2bb5d40b1412e8257ab74eb857ddf1f69f48718e6564f9641eb167314d187fcb1c3da95252da5d1e18fb9bcdeab21c39af2043d82702f8a75ab4b8551cd458bf95e07b172594cff34282a4400b877b93a3f4527c6f492d882534f21d43ad90d9a0139e1a427cf6da9656f1e33ce8c916bcc83734016e53e99dcfe30e5abb593e5150ea77f78b7426c8deee656e3362920b8b8e27f85b023d605ba5bd447be882b46c06ad81b6d09c3b5f927ac599981d60c5d1b198750269ec6d69ca78866ac21f9aab1d67508535f003aae9e178ea924d58f9bf9e64c1020109bd3c59bd5b4e2dd40b1f2a1a75eee0ae1f863a2118361a5beb6a40239abb8d949a4ea2c02b5edcc1efa38ce33d0f40e4990cd0c3555819bdb139d3163290f19ca662a64712c12e4396fedd159eecaa046e9c5978517000be75fb9f98015551a2c2547bb9553dd29a87908f5bbbb6658b63a6356892db90dc61eb54b88fb43afc500fce7206d093f24f106a2922a511f7f1a8f4ecca0a3410d5bea120aba6b868b6a0a3fbf8ca85d56e31fc54016e2fa5505ff4c307aa247ca731c55806a0dfe4416d02f281316b135f8d40c675129cc553282a72c74957ba4dbec04e1300dbb0f860e175bec20ca6fca31ceb719cd461a354cb025d6c1a7eea16a3190f27e82ae32acdf21ed737c9dcc5777ccf401617e6d735bae1d31c2f1059d2cb1c587a9131662206785e3f691ef76ad240ee5c76a6e7a9d703a1974ccfba1d37139cea124d721207b0dc0e47c9e6a097f0c55df2059824ab53d3bb64bfe3554dd2af8822fb8c4c1cd5609d56599d960af15b7fbb5aff12e0d6df1fea26c515abda0a841b7157d94e16bd9164e875fd3cdd096c89b5a8edc068a5190581b474638e405778293ec173b7e747de622899fe3fc4a25336a052bf34a7ebc9ae9633f4fb5c22e7fb6d334c839d8aa094ccc5954c492383254df47d862525bd90cfd76d4f9b478ee297d6bb4c675df5d48f3bb629a956cc933548aa8b7b8a43dafe116fd50f6cb770fe0f2440aebd04f6e2a11740d706d68f525d2f842a62c5f1d42079ba2f9bbbd42b531d3d963f22dd9210a26757b70d0bf7ffbb23d823101ab66c6d3c2d5cc5401f6d1399233c426a370aa36c049f95fb2eebfc9afe340707684a629af1cf1a2f5e5580fa80a8c783e9fdca3cb25ea8a935ae6452efbc89c199c030c67fef1a0afcc03e3fb3a10e8eb2a853ba1aef1e28421b2fa7307b429dbb8c30cdcfa612eb5bf0ff8197e9b0035eca134f3845c51583b612e4b7a5bdd901c09a54906664a8b25aa8fd074173593df2efab61e7868d30d6c6281379ec8be884554a86467393f3bffb4e1a1775cdfaf9f91360933837d783a0c6817833b476b0e65de2120c6c373140751151f975d65213de04b4bd1664c117cf652b6435bc3ba8b81fbc48449245df60f03dc253319b968c56f5eee4ff9e1a6795508de19ee024a34308b06dec6cbe7d307e20b437a2de09108eff190b21cb80b3a226580e511acb542e83c0c82109d4d1c710cc7ee519a2b009b6f26419365317b0b82155b41922b6438f0ecb3b26c39158da802c6c011f22f59601b3d3c4dfd6ff70c8ace9bcefa52c3c913b4acb0bb57845283d537cf52ac1acaa100743d23dfba89358ac9cc2d85b4052619f8b72810efe5a700cb2f5d34cc164bb9330871cf267386fe8ccf92f7d59de677fed84b97762628825625eb610fb1c80b328a1671f9929425e87396ad9bc76f84a3a870d5fda5b4d75efabff3548adbff665e760daff8fa8ca4e6f00ecaf2b4ab044b45905bf31fa5187f1dba3e195390fcb0486adcd922a9eeb31d3e5d785bbbbeb82c48b251c1c550acef90f9ce5b597f8390774591ec6a777ee75c7fefe2930617a3db79809fa2591f1d12bbed51df8a5333797b9e5edf89f493d6cdde1458257cc93398e4a32f81c71dac44e870e865ffee7a27391ed99a82f7ce836b56fc76de71c196aa8d34f55c08e3a286b7c38e4c940bc80ad72a0ed6ec545f00b009002c47b057f919023e84e2080047600c5f17b2e0acf981ba0d331e4ee56be24f9d2e3282b811ae1c2a3e7e94ea59cf996261dfffc141deeb8f23105c8fc570c8035c08a1822f7f455aec07f30ee402d0b2ff22cca38dc1ce7c97f1264defa0767f36d28d3333c819876af578779df0110d9582e4590a8b64f9c0e384f37d554345de51cfc7bc78b23b14bc40c1dae095b816cfaf83f9ccd03b2ece0067cd316f50c098a01e93071d9857ca232de62bf40ffc7a5a2ed5545a2deb1ae196f501afd599570f9ebea808384f63e2c51dd8060e9ec1d201b2d2b569b5f7a8a313bf4cc03907d0756ab33cca2b8be7c0242d63a472189437278faed1aaaee12faf08c850cb6915189ff928c429d777b38552436e419743327d546aa459f91af8fd0b2278983d4098bfb041dc0f6277aef0a92e8d9a9e399f42d039db2481325dfe0e6c4a2db96442452716bae1df2b1730c5f4f5373bc32ab7ba39017861bc0834fe0b97db1002b25a9e9cedd9dcbd3c8998d38ee0f60900ba3244e91a52cb165e15eee9592cf90a819cd18ae521e336bb7887dd5c504b526bd26125d1c25818215f943e38fcbd5548d11bcaeb22229b33bca7cdd6de3899192fbbf498668525e291304f459cd65d3e7a7cd94b9558fafa85fe602df433e8c15896bb558dc16b20c986be3ae77433d37823524956f1770e7d3ec060b05d7261d52abba1880bc7a2c7338b584d9224c6c9e8bdfecd5ade718e932b9434e4a3676f732d6800a555d7dd77c037753037e59cd621c1f63e0379d5712257025479a7894ac4d3dde5d2f5ed2ffd0f5c34e41c77d595e41833c915b18ca8ee29816f197f25eda7362e2bd739d6113ce783bc43c9f8bdf370720368315d134acbcd0c34149bc00c28b2291ed93601c163be1aaec66c8357bf4d24d5e77850c948ee4ae96d2c049b41b1b8b7738be3d5fdd27ad1a12d4d3dd4c13c2b02028350f5a04b27075db3cc1160024bba2bdea054017c6132a716fa10de2325f3aec5c239f5e0d893743dccd098c6404dcbdcb1edcbe0617393bb77a64f9c5bb6819d7dea7b7df0b3b3421059bebeb87dde0f6900cef0797f6d7275d4b5f1f3a6c72ff5a27c677920f7c3d8d0645fd021642c82a3d3935b7fa7c2815ac5c33dddec16921986e30a9af69c297aa951c2b695aa2a3787cf2cd4437650bb9e19f06991921593835c73bb598034d537e2c1ee1258120332215842435fc51ef9a37e1aa817a88019f100ae6e52b70e796f0e9ab9e5508b647cbc75f0ab2283d7b2d24d56d0a00af2f0fad8a181149a0d3b333231a61a2d8b3361f0281dd3c668e27eac78b31f99289a350aa2a5bee9dcf63a2699ed9363b7fad9b3f52780895de9ab2f490cd4b964cbbeb61bc179c5273c3914dcf7f2bb34778dba2e695fb007544ed81b283d0d4027c2c2a9757ddfce70fbfff4ba9a2b4fb44f0c8eae7432e4f26b504ba4dda1a9d820357405d90afa989333e61cccdc0faae1e60a436921cb5ee5de818220b68c94fbe23afd5052c5e68cb48c270e064d6a6b2ded4fe31ae1a7cef186f66a87a9e994579fe4fe6c7340d123e4e9efb7c85a165c79484d9fa3a9716509a68cf6a6a980db6fab507a74c180f5eaef9cd8b7ff9de6d03058e511e3448fbd10e7a5050bf6074ac4791856ddaff23a562cd4ef1f68c06e8599485322ecbfeb1fcf9b8ca4b297ddcf53f1e2302c44bda59aa3556c542dc8962620fd45379749e4b9606fec1f7584015042b27cb2e1210a7082c403921b396370b6e9fd13b1659640e1061de4a9cec9ab0168bed7cabbf1161f7811c8e00fd74a4f0be9730e8345b03a7666cbacb04abfd44530ac873eec08ef2e1b0ac75c6e16b72e208c31f9b846c2bce84e5613c71401f81b9ca1ab437fec96ee088fada2a39fff11ad0e51fa0179844e1e1e700d9991c99a159d00e00739782368f1ca15c9b45e76e7a853ea9c5c1f317b0e104218b1ef73dae5818c4a509a0219389df106263da29f6d0c7cf923cbc29a9472f9aaf236e4a9ea39d7487f6431e0498d9b701732573731845ff9b02152dab240a36ac13b2500ff080d2301bce4e6f5e7a2de4da5605ac46c5635b4a4561ac2707fa49f900"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000060a00)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {0x0, r2}, {r15}], 0xa3, "1ac399fe68bf00"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000180)={0x0, r15, "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", "daa18e9aa61a93986fdf0dac162048a7cc2807b03156511f36df9e099a2f0c89622071343c9ff6ff71d562911035a57bf1ec7703f02c244892a04665ca307939b31adfe97aa5d5d2679a919b06f654e3700ad3d11f311e5c5abd808e32e2718d82d4c5c344301d7b55bfd716f54a4d69fa001d99b213da0e46db3b5866cc7a26dd686e47e5e0c561b9535af415ef3a9302d9bdad2618c207d4d0cefee8274336749581d1de6484f42497ee6a4cee0408441736d8fc6c74689dcdeb26e6f4939307e48b63195f99f9d5d587574ab30d03518e9755258787241d2a8f0872d490dfca75b586c71c41343bd5e9cce7b2f747c73d6a542f19c89637c3c372b79a6eefcfc0dea6fcc12ac46c15a14f8c8b596f1c4b216ca4102c76aaf4a1120e4f73a8a7a744918d8c63660ea612c9125929b8418a8f50120f0e2fd1ab38c46bc2f41908e57a957fb94c3d054ea630508aa9f873363a2cb628030443b42abab9106f79a3f71d2bd698706befcb91700ba2487f6999c940cec51f660a0fbcd5f8a144b00b86885c9702d66d5d2e1e0824dac4912cc5c058a1c9715d40b98b0364c7ef6c9e25e36c136d6bfb560d280589e809b81bff987bd74ac15239147c6fccc654c0e67a6f4dcc1af555d5eb01783b67f728ee5a54be3bfd77d340fa14eda525e58a8a31435ad63c89094f3c8992d342f1d87c1bb551107b7e6dd380727ff3a5d7f552f216e2d1bfc7005a738818133cb798667deca112edb6164cbb3b21e08733e7151c132a1006f6331c4087501d35342c09e275f18d003014cbb9dd8220acb0f9411e44cd14c8ebe984585637f5e49ff90e20964172af1f514eab369efb4ac3849a01d0e0464ac172e3516141da01b73ba2aba74e8127b8a64b8ed42b9f182cab9fdace05dfc4c4903c6ca1cc0b9d1d369d83897889bb4b680ea394e8389d1478ac0cae3bfe779bd8f8d25492fab8ab5f7771f7029d32c9c5b8d79c5ae8fa758c8ce0c2ddabf5c61612102a71ba19304fc104142161a6283c3110446745b68dd5915ca23a9f005e31269bef2adde0b8e86347de697299445eda1e3b71b91778666dfeed93b5956fa304c2eabf6ef8ae1b0c89cb134e452865ce459a6e0da7cfbf7cf2e10601ace78cebd31386d5ed8b8576ad7138b2982b135dac49fa25ae14ffa1bf683c0dce346ce9b586c43418f47837ab7373e6dd5f23ac47cb0ed164d36ebaedc693029d748c66f0fbc32955b9e0d0bc6d75f172c06c67856470914eaa5fe3e63c35dbe58dc64d5d57e684c9d06d362f2be015eef3963b74310c8f00b7251c17190931d6f851b7b4d3e472e29687afe7386564027bde8d238d0da369314f57949ccd9a0d9db8914947a7fc317adf26552190a2cb5bd126cfe62213ffca3cd54961ab233813866b4f1969420a47ba9a52b54303105e9eebb29e53f2cc4c560e47b3f2d6de949b6b0223c459c3cf93650679c4de77e8a8b78132b786c3b995967bd6972d449afe51cfbdd5d604cfbd19d1b01c03797f288700c1b8abba7815b6b90748753ca27a50e73e1d3c1786911a571079b88c3c08ec5c35796a0b0d476a4e8d4433aedeb9963560de4a88fc3aeca78fd980b9b3c048a211db4b5d3ccffce3e77e7ce8a6ddadefd681a5c67ab34159d7ca350bf959802ae0789335c2128c7afc40a901d778ef92ac26f12ffac645b2598cb9512746fced53ce2e3667318880c87eb025755f30ef65680f5ba5d3fafee31ef553b4e9466574e6c028dd1ab9f45b0154675b983ec89bf1c0303567c05fc1eb666ea02229ff3751065682f4c6498db3bb9ee957713f44990c9e2cc3c805495124a0a44c72085d0cbfcf4f5c7428e324baa48efbb9e2f3ecd0b6127b9aaa9c383d5680cb0f9537028b64d9601abc0b501c62aaa5c3772a9e9964a3dc5c95237ae1ba9a7d998c58f834b57df38f07eac60f272f41cad61ca371182719d03561db895c14acfe31a36d851a48792ccdad908668469f945b28e6c9d6e2b37c6e1b9917a7fc0489f6e9fb30b9c51c72aa95e5996977e30e06ef159087adfabdffeee31d082484c0baa07d8ac59db4b40c455b292dde8e36f8b07d24e81637edf6f5b9f17092dce4945ff6b6b9bb89ba3734be04831901479e4cf9af90961349e5d571ef48fe970c6fd52bf17855517ed969f3c25fc058d6fce3aa349ddd31dbffaef1b5377d777bfe4de8033eed835865d3e45ec2583595b9af593d39ae75b195b886f01676b5ca9f0506eb9bf2e8c4fc55c07051dceb1b28fe790cd31e74b3cf000e617b01955862cb1d6be5bbb1241087fa587555067fbc50b2bb0349e3fa08ccc83df7d0e7c2fc8da2672aaebe95a7cd8f20245b657cbb067a7155d8614bddeab1090590ce9f5514d4a142eb996c84b791d5ba214cebc8132512b64ae07383244d71d572643f437f59219dce18494b442292fbc1bbb92099ea0687008a5b43e6c615ddee263048d4fbda60b8131ad47471a1974e3fcbba1604bd306dfce2920169cafddd992b2717e02e72a3228e46257e72c7c1ee29b896c65aec3e9b03d7652244eaa6bc452acb12e09bce66b1a37e5e172a97ad66e0665c43a812e7823b84c83713ac9f9b0aa070821b53686a0d970dee4baeb47d6591c5362102b24786e7bc2f117305eb537a05d08fc8e5bd4082bbad4ad272d59dfbd7bb98a983b76d61ac9afdc2c80edcc910820b5fbd0bdd2d866dcbf289c9b5e95e5879a5486832df0ae5a0f06afbb4be92de4bb6f31e572e0713b3ab5345caf4ad38451f472e90fe984c7037bbd843c047da8faadae75d493375a0163c3a5be7f17249b79e4eab27cd7fa6a8bfec5d8d1f054e012c5809d36c2e5b7c8281592f9ed2bd143582366e8c189d9bd836b4b646be824ce0a778779bd342e1eb9f1b3ca767dc6d60227d2a4286974b81a9c936218cf8a0f3a849338f502278ddb5f6a7effbf7d3bb5ca75d70cfa9077c42c5d71c16fe31cc1eb6fa884c5114f33ee8035000192e9d4d3f7e8656ece3ba235291833e8c73818cb17aa91bef694a02cffdaea2aec0a3e56c3138f22ac24d702385fe16a81c02e98a52c06ff3325882be36074930811153c3641d9ce380bc28cebcd4f94b616a44bef3505cc28c0b92fa2ecb65fdc069c21e668f82144904b510e75f93f3f64357b68a570ea277b67829f67b4b2472a4e3b426862a4587d938c8fe4e1c20074d461b3a47f1da0c257bf3d8ff75ddb04d0a42bbdc72be291cd8962dd1e0bd5780b939c844463aea87a049dac8fd0862bf63cbc6e97045a6202f1f745d4536f4b6ab669fbc3e485205a142b43da88c82fc368f0f486c3f48a92689f28250b30bed90d118ff081ee9d23758ca944d84fb145f2020c48629ea401a55c832c3a33cbde372bdf14e17db0c73b919eb6f7d287759f2d3be93c1acaf74cee1de4a7014724763cb496389d8282ed77fc9a7288f9e3e6d5389d31b93ce62222eb9229d98eb1eead153694a98fe22b994f2f6fcfea9f12c7a2261cfc8785e0dfffe5a2ee37daa45d913d955871fa1b1e8a3f83d77adb1b9632454d06a859341397887abe17d82113a93521dce518f212756c8c2697080252620e8e24407d93a85b64b2cd0cfa43849cf901e126fe6cc43661600058611b8d214b47df5c3ca6091b558a8e34a1dacff3c898781e17c1611e7a6fdd54362d3341e62e7073f622e62b98caab9da0609fc3ea4e9c1ca025527c44064e98e24fe5d319ca4f61f87ed9f88179a64a28cd7bbf40767158a5b57fd2f0e30045e3a0db54488999884d6aadaa5e31070d0c08d8124e10c9f61a61cbeddd51d2c7019a5d39af36a051aee06f496c7d9f5ae5538f59fdae80ed2b666732fd2503ae62a9d71273f4d05bb50b33dd27f697e8a5a6cd69612cb1aca475cbba2ac1bd1c8e9dc7ecc3e9ca2f84226b0ff4b143f60380379d2188728ec44c94883a809bc3541e72ed777d3d9f71f4bf621a22a2dae2e737582e374edd7010705ebb40b9693ed0ac7cce3da23c780ce2cd6590d445d3c9b0fe0b62b346dedc1dcddd9cb4cc6ff433329811161baaa7b652d08ae4b1b5e9d1a26f86e0c83333a2dd7973df8c31dc1e56ffcce059a603027088297e5a2c7ed42a46b872b976962b59c917a5ac86e53c02b39ad8744a9d0b5426503e7b0c5d9c9f38cdb9f39c68be88332650ca660d0d5ed632ab6c5eb999f0e90e10bbc4231a4dbb9dc3d3c73b99b421ac3ed54ce76fd7bc8c52829287e9836d30e0e1e59e88ebf3f1b5a79756a9eac50a7e1d77c2e2a6a58bf7a8e99293a0513c08d192cb525e15616c4d1cfc2ef5727dbb27dce8b8d4ceeac558b0f73826a2041f4db1f133a982110d1fbb1b43eed1da0d41fdaa996d752abec4ce401066019988840d8c71ea1216bf9c47969712413d1baf516a0c064b121b1c7af27396488bb49cfd739d786465062f0dcd1d12df0711ecb4184be02083d75e6bdb8f17903680c9cfc6790768e0f3dec66a4963e09871df65b9901f721614af6f8fa170e4474c577746d8f4ab3bb8e045bbbb75c403b464983faf82cda941b02682944742eeb4012b05c0e7ad625f5b81b135edf737a6f30bba062417faffcc42a1241b2dc7f667a2b896a05e2de4f848025aea766d86d482c0e2d1659d79f3024501082bcc078a164fe520c76f72021ab570610233f31a6beff4f194b5c31b3d7c458b7301c8908b6c32a6834fc7e0cf182a254bb5a281f79913a7ae527cc22afee87bd579b2b2e8bb040a8a26c7634a8a0a4b27beb61721c57935c3ec4633cea2968bd395332f2f98f72d8ebd90df691f7aae26d45f08ab706114f5a2048823cd3f273581e1f4c3eb706a177f61477eec3a4a68499fbf9a7c4337450b1d6bdba937af04b4de45a926a7ab82256cf38b7d5d8f1d9913ac4bba897115b1476387fc1e9bf0a8b56a5e79e20f19ae7184e3d9600dcb226af5ed496cb0b48dcbf55e9421ce076591d371dfe44cec8aa476526dfaed22d3647d4ceecb5a3b26a22f954366814ab4e883222f502baf2f81166bb0cd442e8c967d8723aecb6362cbd0cba4a6597f12efc74d863db08f68899a46c7206737a1d71577eb43ff32d5d25a68a89b97663c97881080751799540a0418c4d9ad7643873a85db61a98671dfa0f5de3a6b77308058d274238e973039533feda808f98ecd0007e86dc608441651d691462ca246221109df19f325f2b1cf9367bc010142c3df9f6d48e584d6442f979f423be3e0ddad4c0c56655df4a7550262cb88ec10543fbfa52ce2bd9d41e7e5ff13960ac226112fe922fde61be05530a51efd93128569729a5a1282e10cdd5072e0f0444bec3acc5640c591a85c826fa7f802567944f78d11ff5663013a03f603eeef347f2adbc425d36685f416f7eb40c92a84ff1980c"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000280)={r15, 0x828b}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000d00)={{r15, 0x2, 0x800, 0x80000000, 0x2, 0x0, 0x7, 0x5, 0x401, 0x3, 0x4, 0x5, 0x9735, 0x4, 0xffffffffffff8001}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000045c40)={0x80000001, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}], 0x7f, "4ac1f62b0b3bb1"}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50}, 0x50) fallocate(r0, 0x0, 0x0, 0x1000f4) [ 2709.089183][ T7395] loop4: detected capacity change from 0 to 4096 [ 2709.089834][ T7397] loop2: detected capacity change from 0 to 1024 [ 2709.097758][ T7398] loop3: detected capacity change from 0 to 4096 03:37:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) [ 2709.113236][ T7395] EXT4-fs (loop4): unsupported descriptor size 43584 [ 2709.118448][ T7401] binder: BINDER_SET_CONTEXT_MGR already set [ 2709.118460][ T7401] binder: 7392:7401 ioctl 4018620d 20000000 returned -16 03:37:51 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80002, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000000000004000000000002000020000020000000ddf4655f090000000000000053ef010001000000ddf4655f000000000000000001000000000000000b0000000001000008000000d24200001203", 0x66, 0x400}, {&(0x7f00000000c0)="0000000000000000000000006856d49a00cc4371bd6a7c893f280045010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="03000000040000000500000016000f000300040000000000000000000f00698c", 0x20, 0x800}, {&(0x7f0000010e00)="ed41000000040000ddf4655fddf4655fddf4655f000000000000", 0x1a, 0x1500}], 0x0, &(0x7f0000000480)) 03:37:51 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="44a36740"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000006c0)="da"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) [ 2709.123320][ T7394] binder: 7392:7394 ioctl c0306201 20001480 returned -14 03:37:52 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x6e02}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x2402c09b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x7}, 0x8) 03:37:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) dup2(r0, r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x3c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x2}, @exit_looper, @increfs_done, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) [ 2709.132890][ T7397] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated 03:37:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x6e02}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="85", 0x1, 0x2402c09b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x7}, 0x8) [ 2709.138163][ T7397] EXT4-fs (loop2): get root inode failed [ 2709.138183][ T7397] EXT4-fs (loop2): mount failed [ 2709.157450][ T7398] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2709.216614][ T28] audit: type=1800 audit(2000000271.969:2451): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=17 res=0 errno=0 [ 2709.224899][ T7395] ext2: Unknown parameter 'journa' [ 2709.283348][ T7411] loop2: detected capacity change from 0 to 1024 [ 2709.283348][ T7411] loop2: detected capacity change from 0 to 1024 [ 2709.318229][ T7414] binder: 7412:7414 unknown command 1080533828 [ 2709.318252][ T7414] binder: 7412:7414 ioctl c0306201 20000080 returned -22 [ 2709.323486][ T7411] EXT4-fs error (device loop2): __ext4_fill_super:5226: inode #2: comm syz-executor.2: iget: root inode unallocated [ 2709.324553][ T7411] EXT4-fs (loop2): get root inode failed [ 2709.324573][ T7411] EXT4-fs (loop2): mount failed [ 2709.337896][ T7414] binder: 7412:7414 ioctl c0306201 20001480 returned -14 [ 2709.399170][ T3645] EXT4-fs (loop3): unmounting filesystem. [ 2709.528696][ C0] BUG: TASK stack guard page was hit at ffffc90009087fc8 (stack is ffffc90009088000..ffffc90009090000) [ 2709.528727][ C0] stack guard page: 0000 [#1] PREEMPT SMP KASAN [ 2709.528747][ C0] CPU: 0 PID: 7417 Comm: syz-executor.0 Not tainted 5.19.0-rc1-syzkaller #0 [ 2709.528771][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2709.528784][ C0] RIP: 0010:mark_lock.part.0+0x26/0x1910 [ 2709.528821][ C0] Code: 00 00 00 90 41 57 41 56 41 55 41 89 d5 48 ba 00 00 00 00 00 fc ff df 41 54 49 89 f4 55 53 48 81 ec 38 01 00 00 48 8d 5c 24 38 <48> 89 3c 24 48 c7 44 24 38 b3 8a b5 41 48 c1 eb 03 48 c7 44 24 40 [ 2709.528847][ C0] RSP: 0018:ffffc90009087fd8 EFLAGS: 00010096 [ 2709.528866][ C0] RAX: 000000000000000c RBX: ffffc90009088010 RCX: ffffffff815d25a2 [ 2709.528883][ C0] RDX: dffffc0000000000 RSI: ffff88808a43cbc8 RDI: ffff88808a43c140 [ 2709.528901][ C0] RBP: ffff88808a43cbea R08: 0000000000000000 R09: ffffffff906788cf [ 2709.528918][ C0] R10: fffffbfff20cf119 R11: 0000000000000001 R12: ffff88808a43cbc8 [ 2709.528934][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: dffffc0000000000 [ 2709.528951][ C0] FS: 00007fc65d3f6700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 2709.528977][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2709.528994][ C0] CR2: ffffc90009087fc8 CR3: 000000008f816000 CR4: 00000000003506f0 [ 2709.529011][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2709.529026][ C0] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2709.529042][ C0] Call Trace: [ 2709.529048][ C0] [ 2709.529060][ C0] __lock_acquire+0x8ab/0x5660 [ 2709.529122][ C0] ? mark_lock.part.0+0xee/0x1910 [ 2709.529149][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2709.529178][ C0] ? lock_chain_count+0x20/0x20 [ 2709.529204][ C0] ? lock_chain_count+0x20/0x20 [ 2709.529232][ C0] lock_acquire+0x1ab/0x570 [ 2709.529257][ C0] ? get_page_from_freelist+0x49b/0x3b70 [ 2709.529350][ C0] ? lock_release+0x780/0x780 [ 2709.529376][ C0] ? mark_lock.part.0+0xee/0x1910 [ 2709.529404][ C0] ? __zone_watermark_ok+0x271/0x450 [ 2709.529428][ C0] get_page_from_freelist+0x4bf/0x3b70 [ 2709.529451][ C0] ? get_page_from_freelist+0x49b/0x3b70 [ 2709.529475][ C0] ? arch_stack_walk+0x6d/0xe0 [ 2709.529538][ C0] ? __netdev_update_features+0xa42/0x1980 [ 2709.529573][ C0] ? __zone_watermark_ok+0x450/0x450 [ 2709.529595][ C0] ? prepare_alloc_pages+0x415/0x570 [ 2709.529618][ C0] ? __alloc_skb+0x215/0x340 [ 2709.529639][ C0] ? rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 2709.529693][ C0] __alloc_pages+0x1c7/0x510 [ 2709.529714][ C0] ? netdev_change_features+0x61/0xb0 [ 2709.529736][ C0] ? __alloc_pages_slowpath.constprop.0+0x2160/0x2160 [ 2709.529764][ C0] ? find_held_lock+0x2d/0x110 [ 2709.529791][ C0] cache_grow_begin+0x75/0x350 [ 2709.529814][ C0] ? cache_alloc_pfmemalloc+0x1e/0x140 [ 2709.529839][ C0] cache_alloc_refill+0x27f/0x380 [ 2709.529864][ C0] kmem_cache_alloc_node_trace+0x518/0x5b0 [ 2709.529890][ C0] ? rcu_read_lock_sched_held+0x3a/0x70 [ 2709.529919][ C0] __kmalloc_node_track_caller+0x38/0x60 [ 2709.529945][ C0] __alloc_skb+0xde/0x340 [ 2709.529966][ C0] rtmsg_ifinfo_build_skb+0x72/0x1a0 [ 2709.529989][ C0] rtnetlink_event+0x123/0x1d0 [ 2709.530010][ C0] notifier_call_chain+0xb5/0x200 [ 2709.530054][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.530094][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.530118][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.530140][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.530167][ C0] netdev_change_features+0x61/0xb0 [ 2709.530189][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.530211][ C0] ? __team_compute_features+0x343/0x550 [ 2709.530279][ C0] team_device_event+0x83a/0xa90 [ 2709.530304][ C0] notifier_call_chain+0xb5/0x200 [ 2709.530329][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.530354][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.530379][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.530400][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.530427][ C0] netdev_change_features+0x61/0xb0 [ 2709.530448][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.530470][ C0] ? __team_compute_features+0x343/0x550 [ 2709.530495][ C0] team_device_event+0x83a/0xa90 [ 2709.530520][ C0] notifier_call_chain+0xb5/0x200 [ 2709.530544][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.530569][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.530593][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.530615][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.530642][ C0] netdev_change_features+0x61/0xb0 [ 2709.530665][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.530687][ C0] ? __team_compute_features+0x343/0x550 [ 2709.530712][ C0] team_device_event+0x83a/0xa90 [ 2709.530737][ C0] notifier_call_chain+0xb5/0x200 [ 2709.530761][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.530785][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.530809][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.530833][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.530856][ C0] netdev_change_features+0x61/0xb0 [ 2709.530877][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.530896][ C0] ? __team_compute_features+0x343/0x550 [ 2709.530919][ C0] team_device_event+0x83a/0xa90 [ 2709.530944][ C0] notifier_call_chain+0xb5/0x200 [ 2709.530966][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.530991][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.531015][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.531037][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.531063][ C0] netdev_change_features+0x61/0xb0 [ 2709.531090][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.531110][ C0] ? __team_compute_features+0x343/0x550 [ 2709.531135][ C0] team_device_event+0x83a/0xa90 [ 2709.531160][ C0] notifier_call_chain+0xb5/0x200 [ 2709.531182][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.531207][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.531229][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.531252][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.531279][ C0] netdev_change_features+0x61/0xb0 [ 2709.531301][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.531322][ C0] ? __team_compute_features+0x343/0x550 [ 2709.531347][ C0] team_device_event+0x83a/0xa90 [ 2709.531371][ C0] notifier_call_chain+0xb5/0x200 [ 2709.531395][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.531420][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.531444][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.531465][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.531492][ C0] netdev_change_features+0x61/0xb0 [ 2709.531514][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.531535][ C0] ? __team_compute_features+0x343/0x550 [ 2709.531560][ C0] team_device_event+0x83a/0xa90 [ 2709.531584][ C0] notifier_call_chain+0xb5/0x200 [ 2709.531609][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.531633][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.531658][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.531679][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.531707][ C0] netdev_change_features+0x61/0xb0 [ 2709.531729][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.531750][ C0] ? __team_compute_features+0x343/0x550 [ 2709.531775][ C0] team_device_event+0x83a/0xa90 [ 2709.531799][ C0] notifier_call_chain+0xb5/0x200 [ 2709.531823][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.531847][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.531870][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.531892][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.531919][ C0] netdev_change_features+0x61/0xb0 [ 2709.531940][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.531962][ C0] ? __team_compute_features+0x343/0x550 [ 2709.531987][ C0] team_device_event+0x83a/0xa90 [ 2709.532011][ C0] notifier_call_chain+0xb5/0x200 [ 2709.532036][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.532060][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.532090][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.532113][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.532140][ C0] netdev_change_features+0x61/0xb0 [ 2709.532162][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.532184][ C0] ? __team_compute_features+0x343/0x550 [ 2709.532208][ C0] team_device_event+0x83a/0xa90 [ 2709.532230][ C0] notifier_call_chain+0xb5/0x200 [ 2709.532254][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.532278][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.532301][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.532322][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.532348][ C0] netdev_change_features+0x61/0xb0 [ 2709.532369][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.532389][ C0] ? __team_compute_features+0x343/0x550 [ 2709.532414][ C0] team_device_event+0x83a/0xa90 [ 2709.532437][ C0] notifier_call_chain+0xb5/0x200 [ 2709.532462][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.532486][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.532510][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.532532][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.532558][ C0] netdev_change_features+0x61/0xb0 [ 2709.532579][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.532600][ C0] ? __team_compute_features+0x343/0x550 [ 2709.532624][ C0] team_device_event+0x83a/0xa90 [ 2709.532646][ C0] notifier_call_chain+0xb5/0x200 [ 2709.532670][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.532695][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.532718][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.532739][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.532766][ C0] netdev_change_features+0x61/0xb0 [ 2709.532787][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.532807][ C0] ? __team_compute_features+0x343/0x550 [ 2709.532829][ C0] team_device_event+0x83a/0xa90 [ 2709.532853][ C0] notifier_call_chain+0xb5/0x200 [ 2709.532876][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.532899][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.532922][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.532944][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.532972][ C0] netdev_change_features+0x61/0xb0 [ 2709.532994][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.533016][ C0] ? __team_compute_features+0x343/0x550 [ 2709.533039][ C0] team_device_event+0x83a/0xa90 [ 2709.533062][ C0] notifier_call_chain+0xb5/0x200 [ 2709.533094][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.533118][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.533143][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.533164][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.533190][ C0] netdev_change_features+0x61/0xb0 [ 2709.533211][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.533232][ C0] ? __team_compute_features+0x343/0x550 [ 2709.533256][ C0] team_device_event+0x83a/0xa90 [ 2709.533279][ C0] notifier_call_chain+0xb5/0x200 [ 2709.533303][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.533327][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.533350][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.533371][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.533396][ C0] netdev_change_features+0x61/0xb0 [ 2709.533418][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.533438][ C0] ? __team_compute_features+0x343/0x550 [ 2709.533463][ C0] team_device_event+0x83a/0xa90 [ 2709.533486][ C0] notifier_call_chain+0xb5/0x200 [ 2709.533510][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.533533][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.533553][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.533573][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.533598][ C0] netdev_change_features+0x61/0xb0 [ 2709.533619][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.533643][ C0] ? __team_compute_features+0x343/0x550 [ 2709.533665][ C0] team_device_event+0x83a/0xa90 [ 2709.533686][ C0] notifier_call_chain+0xb5/0x200 [ 2709.533709][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.533732][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.533755][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.533776][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.533802][ C0] netdev_change_features+0x61/0xb0 [ 2709.533824][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.533844][ C0] ? __team_compute_features+0x343/0x550 [ 2709.533870][ C0] team_device_event+0x83a/0xa90 [ 2709.533891][ C0] notifier_call_chain+0xb5/0x200 [ 2709.533912][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.533934][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.533956][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.533977][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.534003][ C0] netdev_change_features+0x61/0xb0 [ 2709.534023][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.534043][ C0] ? __team_compute_features+0x343/0x550 [ 2709.534066][ C0] team_device_event+0x83a/0xa90 [ 2709.534098][ C0] notifier_call_chain+0xb5/0x200 [ 2709.534123][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.534148][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.534172][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.534194][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.534222][ C0] netdev_change_features+0x61/0xb0 [ 2709.534244][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.534266][ C0] ? __team_compute_features+0x343/0x550 [ 2709.534291][ C0] team_device_event+0x83a/0xa90 [ 2709.534315][ C0] notifier_call_chain+0xb5/0x200 [ 2709.534340][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.534365][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.534389][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.534411][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.534438][ C0] netdev_change_features+0x61/0xb0 [ 2709.534460][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.534482][ C0] ? __team_compute_features+0x343/0x550 [ 2709.534506][ C0] team_device_event+0x83a/0xa90 [ 2709.534531][ C0] notifier_call_chain+0xb5/0x200 [ 2709.534556][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.534580][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.534604][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.534626][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.534654][ C0] netdev_change_features+0x61/0xb0 [ 2709.534676][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.534698][ C0] ? __team_compute_features+0x343/0x550 [ 2709.534723][ C0] team_device_event+0x83a/0xa90 [ 2709.534748][ C0] notifier_call_chain+0xb5/0x200 [ 2709.534772][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.534797][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.534821][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.534843][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.534871][ C0] netdev_change_features+0x61/0xb0 [ 2709.534893][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.534914][ C0] ? __team_compute_features+0x343/0x550 [ 2709.534939][ C0] team_device_event+0x83a/0xa90 [ 2709.534964][ C0] notifier_call_chain+0xb5/0x200 [ 2709.534989][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.535013][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.535038][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.535060][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.535092][ C0] netdev_change_features+0x61/0xb0 [ 2709.535115][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.535136][ C0] ? __team_compute_features+0x343/0x550 [ 2709.535161][ C0] team_device_event+0x83a/0xa90 [ 2709.535185][ C0] notifier_call_chain+0xb5/0x200 [ 2709.535210][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.535235][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.535258][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.535280][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.535307][ C0] netdev_change_features+0x61/0xb0 [ 2709.535329][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.535350][ C0] ? __team_compute_features+0x343/0x550 [ 2709.535375][ C0] team_device_event+0x83a/0xa90 [ 2709.535400][ C0] notifier_call_chain+0xb5/0x200 [ 2709.535425][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.535450][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.535474][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.535496][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.535524][ C0] netdev_change_features+0x61/0xb0 [ 2709.535546][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.535568][ C0] ? __team_compute_features+0x343/0x550 [ 2709.535593][ C0] team_device_event+0x83a/0xa90 [ 2709.535617][ C0] notifier_call_chain+0xb5/0x200 [ 2709.535642][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.535667][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.535690][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.535712][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.535740][ C0] netdev_change_features+0x61/0xb0 [ 2709.535762][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.535784][ C0] ? __team_compute_features+0x343/0x550 [ 2709.535809][ C0] team_device_event+0x83a/0xa90 [ 2709.535833][ C0] notifier_call_chain+0xb5/0x200 [ 2709.535858][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.535882][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.535906][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.535928][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.535956][ C0] netdev_change_features+0x61/0xb0 [ 2709.535978][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.536000][ C0] ? __team_compute_features+0x343/0x550 [ 2709.536025][ C0] team_device_event+0x83a/0xa90 [ 2709.536049][ C0] notifier_call_chain+0xb5/0x200 [ 2709.536074][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.536107][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.536131][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.536154][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.536181][ C0] netdev_change_features+0x61/0xb0 [ 2709.536203][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.536225][ C0] ? __team_compute_features+0x343/0x550 [ 2709.536250][ C0] team_device_event+0x83a/0xa90 [ 2709.536275][ C0] notifier_call_chain+0xb5/0x200 [ 2709.536300][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.536324][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.536347][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.536366][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.536391][ C0] netdev_change_features+0x61/0xb0 [ 2709.536411][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.536430][ C0] ? __team_compute_features+0x343/0x550 [ 2709.536452][ C0] team_device_event+0x83a/0xa90 [ 2709.536473][ C0] notifier_call_chain+0xb5/0x200 [ 2709.536495][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.536517][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.536539][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.536558][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.536581][ C0] netdev_change_features+0x61/0xb0 [ 2709.536601][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.536621][ C0] ? __team_compute_features+0x343/0x550 [ 2709.536642][ C0] team_device_event+0x83a/0xa90 [ 2709.536664][ C0] notifier_call_chain+0xb5/0x200 [ 2709.536690][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.536712][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.536734][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.536755][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.536779][ C0] netdev_change_features+0x61/0xb0 [ 2709.536800][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.536820][ C0] ? __team_compute_features+0x343/0x550 [ 2709.536844][ C0] team_device_event+0x83a/0xa90 [ 2709.536867][ C0] notifier_call_chain+0xb5/0x200 [ 2709.536891][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.536915][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.536936][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.536956][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.536981][ C0] netdev_change_features+0x61/0xb0 [ 2709.537000][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.537020][ C0] ? __team_compute_features+0x343/0x550 [ 2709.537044][ C0] team_device_event+0x83a/0xa90 [ 2709.537067][ C0] notifier_call_chain+0xb5/0x200 [ 2709.537098][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.537122][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.537145][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.537167][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.537194][ C0] netdev_change_features+0x61/0xb0 [ 2709.537215][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.537235][ C0] ? __team_compute_features+0x343/0x550 [ 2709.537259][ C0] team_device_event+0x83a/0xa90 [ 2709.537283][ C0] notifier_call_chain+0xb5/0x200 [ 2709.537308][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.537332][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.537356][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.537378][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.537405][ C0] netdev_change_features+0x61/0xb0 [ 2709.537426][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.537447][ C0] ? __team_compute_features+0x343/0x550 [ 2709.537472][ C0] team_device_event+0x83a/0xa90 [ 2709.537496][ C0] notifier_call_chain+0xb5/0x200 [ 2709.537520][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.537545][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.537568][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.537589][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.537616][ C0] netdev_change_features+0x61/0xb0 [ 2709.537638][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.537660][ C0] ? __team_compute_features+0x343/0x550 [ 2709.537684][ C0] team_device_event+0x83a/0xa90 [ 2709.537707][ C0] notifier_call_chain+0xb5/0x200 [ 2709.537731][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.537755][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.537779][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.537800][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.537826][ C0] netdev_change_features+0x61/0xb0 [ 2709.537848][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.537868][ C0] ? __team_compute_features+0x343/0x550 [ 2709.537891][ C0] team_device_event+0x83a/0xa90 [ 2709.537915][ C0] notifier_call_chain+0xb5/0x200 [ 2709.537939][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.537962][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.537984][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.538005][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.538031][ C0] netdev_change_features+0x61/0xb0 [ 2709.538052][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.538073][ C0] ? __team_compute_features+0x343/0x550 [ 2709.538104][ C0] team_device_event+0x83a/0xa90 [ 2709.538128][ C0] notifier_call_chain+0xb5/0x200 [ 2709.538151][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.538175][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.538196][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.538218][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.538245][ C0] netdev_change_features+0x61/0xb0 [ 2709.538266][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.538288][ C0] ? __team_compute_features+0x343/0x550 [ 2709.538312][ C0] team_device_event+0x83a/0xa90 [ 2709.538336][ C0] notifier_call_chain+0xb5/0x200 [ 2709.538360][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.538385][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.538408][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.538431][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.538458][ C0] netdev_change_features+0x61/0xb0 [ 2709.538480][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.538501][ C0] ? __team_compute_features+0x343/0x550 [ 2709.538525][ C0] team_device_event+0x83a/0xa90 [ 2709.538548][ C0] notifier_call_chain+0xb5/0x200 [ 2709.538572][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.538596][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.538619][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.538639][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.538665][ C0] netdev_change_features+0x61/0xb0 [ 2709.538686][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.538706][ C0] ? __team_compute_features+0x343/0x550 [ 2709.538729][ C0] team_device_event+0x83a/0xa90 [ 2709.538753][ C0] notifier_call_chain+0xb5/0x200 [ 2709.538777][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.538800][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.538824][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.538843][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.538868][ C0] netdev_change_features+0x61/0xb0 [ 2709.538889][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.538910][ C0] ? __team_compute_features+0x343/0x550 [ 2709.538934][ C0] team_device_event+0x83a/0xa90 [ 2709.538957][ C0] notifier_call_chain+0xb5/0x200 [ 2709.538979][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.539003][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.539026][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.539046][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.539072][ C0] netdev_change_features+0x61/0xb0 [ 2709.539099][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.539120][ C0] ? __team_compute_features+0x343/0x550 [ 2709.539145][ C0] team_device_event+0x83a/0xa90 [ 2709.539167][ C0] notifier_call_chain+0xb5/0x200 [ 2709.539190][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.539214][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.539237][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.539258][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.539284][ C0] netdev_change_features+0x61/0xb0 [ 2709.539304][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.539325][ C0] ? __team_compute_features+0x343/0x550 [ 2709.539350][ C0] team_device_event+0x83a/0xa90 [ 2709.539372][ C0] notifier_call_chain+0xb5/0x200 [ 2709.539395][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.539419][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.539442][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.539464][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.539489][ C0] netdev_change_features+0x61/0xb0 [ 2709.539509][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.539529][ C0] ? __team_compute_features+0x343/0x550 [ 2709.539550][ C0] team_device_event+0x83a/0xa90 [ 2709.539573][ C0] notifier_call_chain+0xb5/0x200 [ 2709.539592][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.539613][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.539634][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.539651][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.539674][ C0] netdev_change_features+0x61/0xb0 [ 2709.539693][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.539713][ C0] ? __team_compute_features+0x343/0x550 [ 2709.539735][ C0] team_device_event+0x83a/0xa90 [ 2709.539756][ C0] notifier_call_chain+0xb5/0x200 [ 2709.539796][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.539818][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.539840][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.539859][ C0] ? lock_downgrade+0x6e0/0x6e0 [ 2709.539884][ C0] netdev_change_features+0x61/0xb0 [ 2709.539905][ C0] ? netdev_update_features+0xd0/0xd0 [ 2709.539926][ C0] ? __team_compute_features+0x343/0x550 [ 2709.539948][ C0] team_device_event+0x83a/0xa90 [ 2709.539969][ C0] notifier_call_chain+0xb5/0x200 [ 2709.539992][ C0] call_netdevice_notifiers_info+0xb5/0x130 [ 2709.540014][ C0] __netdev_update_features+0xa42/0x1980 [ 2709.540035][ C0] ? dev_change_xdp_fd+0x300/0x300 [ 2709.540054][ C0] ? find_held_lock+0x2d/0x110 [ 2709.540084][ C0] dev_disable_lro+0x8d/0x3e0 [ 2709.540103][ C0] ? register_netdev+0x50/0x50 [ 2709.540123][ C0] generic_xdp_install+0x218/0x4a0 [ 2709.540144][ C0] ? dev_disable_lro+0x3e0/0x3e0 [ 2709.540164][ C0] ? alloc_empty_file+0xd7/0x170 [ 2709.540191][ C0] dev_xdp_install+0xd5/0x2b0 [ 2709.540212][ C0] ? dev_disable_lro+0x3e0/0x3e0 [ 2709.540233][ C0] ? bpf_xdp_link_show_fdinfo+0xa0/0xa0 [ 2709.540256][ C0] ? dev_disable_lro+0x3e0/0x3e0 [ 2709.540274][ C0] dev_xdp_attach+0xa30/0x12b0 [ 2709.540299][ C0] bpf_xdp_link_attach+0x26d/0x430 [ 2709.540318][ C0] ? dev_xdp_prog_id+0x190/0x190 [ 2709.540335][ C0] ? fput+0x2b/0x190 [ 2709.540354][ C0] ? __sanitizer_cov_trace_switch+0x50/0x90 [ 2709.540382][ C0] __sys_bpf+0x4dc6/0x5700 [ 2709.540435][ C0] ? bpf_perf_link_attach+0x520/0x520 [ 2709.540459][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 2709.540486][ C0] ? find_held_lock+0x2d/0x110 [ 2709.540513][ C0] __x64_sys_bpf+0x75/0xb0 [ 2709.540538][ C0] ? syscall_enter_from_user_mode+0x21/0x70 [ 2709.540564][ C0] do_syscall_64+0x35/0xb0 [ 2709.540590][ C0] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 2709.540616][ C0] RIP: 0033:0x7fc65c289109 [ 2709.540635][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 2709.540660][ C0] RSP: 002b:00007fc65d3f6168 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2709.540682][ C0] RAX: ffffffffffffffda RBX: 00007fc65c39c2a0 RCX: 00007fc65c289109 [ 2709.540699][ C0] RDX: 0000000000000010 RSI: 0000000020000880 RDI: 000000000000001c [ 2709.540714][ C0] RBP: 00007fc65c2e308d R08: 0000000000000000 R09: 0000000000000000 [ 2709.540727][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2709.540741][ C0] R13: 00007ffc170a891f R14: 00007fc65d3f6300 R15: 0000000000022000 [ 2709.540759][ C0] [ 2709.540767][ C0] Modules linked in: [ 2709.540782][ C0] ---[ end trace 0000000000000000 ]--- [ 2709.540790][ C0] RIP: 0010:mark_lock.part.0+0x26/0x1910 [ 2709.540818][ C0] Code: 00 00 00 90 41 57 41 56 41 55 41 89 d5 48 ba 00 00 00 00 00 fc ff df 41 54 49 89 f4 55 53 48 81 ec 38 01 00 00 48 8d 5c 24 38 <48> 89 3c 24 48 c7 44 24 38 b3 8a b5 41 48 c1 eb 03 48 c7 44 24 40 [ 2709.540841][ C0] RSP: 0018:ffffc90009087fd8 EFLAGS: 00010096 [ 2709.540859][ C0] RAX: 000000000000000c RBX: ffffc90009088010 RCX: ffffffff815d25a2 [ 2709.540874][ C0] RDX: dffffc0000000000 RSI: ffff88808a43cbc8 RDI: ffff88808a43c140 [ 2709.540888][ C0] RBP: ffff88808a43cbea R08: 0000000000000000 R09: ffffffff906788cf [ 2709.540903][ C0] R10: fffffbfff20cf119 R11: 0000000000000001 R12: ffff88808a43cbc8 [ 2709.540917][ C0] R13: 0000000000000008 R14: 0000000000000000 R15: dffffc0000000000 [ 2709.540932][ C0] FS: 00007fc65d3f6700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 2709.540957][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2709.540972][ C0] CR2: ffffc90009087fc8 CR3: 000000008f816000 CR4: 00000000003506f0 [ 2709.540986][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2709.541001][ C0] DR3: 0000000000000004 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2709.541017][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 2709.541217][ C0] Kernel Offset: disabled