, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0xfffffffffffffffe) [ 667.818938][T13648] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. 00:11:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x15, &(0x7f0000000200)={@mcast2}, 0x14) 00:11:07 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x4, 0x0, 0x0) 00:11:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}], 0x20}}], 0x1, 0x0) [ 668.140355][T13654] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:08 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="2555367d9e22feaab1d39cadad87b59505a65e913bf32fa9a5f8c5010e6f9e", 0x1f}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 00:11:08 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x48, &(0x7f0000000200)={@mcast2}, 0x14) 00:11:08 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x18, 0x0, 0x0) 00:11:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000008340)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000002500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @local}}}}], 0x28}}], 0x1, 0x0) 00:11:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x0, 'macvtap0\x00'}, 0x18) 00:11:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000550009012dbd7000fcdbdf2507000000", @ANYBLOB="200001"], 0xb8}}, 0x0) 00:11:08 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0) 00:11:08 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0x18}, 0x0) 00:11:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x7000000}, 0x0) [ 668.936694][T13671] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.5'. 00:11:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@multicast2, @broadcast, @loopback}, 0xc) 00:11:08 executing program 4: socket(0x25, 0x5, 0x38000000) 00:11:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="f07c58cb25e054c55a572bc0db3b5f1e", 0x10}], 0x1, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr, @broadcast}}}, @ip_tos_int={{0x14}}], 0x38}}], 0x1, 0x0) 00:11:09 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'tunl0\x00', 0x0}) 00:11:09 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x15c}}, 0x0) 00:11:09 executing program 1: socket(0x2e, 0x0, 0x0) 00:11:09 executing program 5: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x10000000000000bb}, 0x0) 00:11:09 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x1, &(0x7f0000000140)=@raw=[@jmp], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 00:11:09 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8953, 0x0) 00:11:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000780)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x3c}}, 0x0) 00:11:09 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)='%', 0x1}], 0x1}}], 0x1, 0x0) 00:11:09 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2, 0x0, 0x0) 00:11:09 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="2555367d9e22feaab1d39cadad87b59505a65e913bf32fa9a5f8c5010e6f9ecf03a431f4", 0x24}, {0x0}, {0x0}], 0x3, &(0x7f0000000540)}}, {{0x0, 0x0, &(0x7f00000007c0)}}], 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000500)=@add_del={0x2, &(0x7f0000000480)='veth1_to_team\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', r1, 0x29, 0x9, 0x1, 0xb45, 0x6, @remote, @local, 0x7f20, 0x0, 0x7, 0x3795d84d}}) sendmsg$nl_route(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000550009012dbd7000fcdbdf2507000000", @ANYRES32=r5, @ANYBLOB="20000100116b2dcd51ac135c02e685b4b6", @ANYRES32=r1, @ANYBLOB="01000100fe8000000000000000000000000000aa0800000020000100", @ANYRES32=0x0, @ANYBLOB="000000007f0000010000000000000000000000000800000020000100", @ANYRES32=r1, @ANYBLOB="00000000fc0000000000000000000000000000010000000020000100", @ANYRES32=r6, @ANYBLOB="01000100fc0200000000000000000000000000010000000020000100", @ANYRES32=r1, @ANYBLOB="010004000000000000000000000000000000000008000000"], 0xb8}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0xec571840a1b975d6, 0x9, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0xf1}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000005c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41000, 0x10, '\x00', r7, 0x0, r3, 0x8, &(0x7f0000000640)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x7, 0x0, 0xb39}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4]}, 0x80) 00:11:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000900), &(0x7f0000000940)=0x4) 00:11:09 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000780)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x38}}, 0x0) 00:11:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local, 0x2}, 0x1c, 0x0}, 0x0) [ 670.365690][T13706] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. 00:11:10 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x1b, &(0x7f0000000200)={@mcast2}, 0x14) 00:11:10 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000002c0), 0x4) 00:11:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000780)={0x40, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x40}}, 0x0) 00:11:10 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{&(0x7f0000000000)=@generic={0x25, "79f0c39538351357a7e39555952ea6b6cacb823b0a19788dc67359e9e82cb41779d59138e6d21a5a6ca53610b5f97160d638022bda0d8d5f74bdff6641bc08377dfb533ed04b6e243e7e62a3429fbdc8cf0a0746774c6fe51105ad353cc0cc639783f504e1fee6bb0c7a88eca23b14622bf2e2529c9ace3ff60f7b649734"}, 0x80, 0x0, 0x0, 0x0, 0x290}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)}, {0x0}], 0x2}}], 0x2, 0x5881) unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x8800) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) unshare(0x60000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="000c2abd7000fddbdf52880466a4590df0b4d89af61ba16f2502001000140009000000000000000000000000000000000006000a004e2400000500040000000000050003003a", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="1400733c5c850700c918f2504c2a23ecf57eb9014be675380bf998c5828d3adc0d993745efcf8feec7a23e1aa782abd04afc6fffffffff00000000c70f67abedcaf654f99113854f5bb09de54d40f1c6a51a5a400c0887096ad25f201336c59c3387a54e69caafa6e6803825cc69f36df179934f234072c4629708e865ebc5d84f84bdaffdf8315509de9d323ad12a5739cdafa8e16146895be7730faf61dce3530b9e278ecd2ff51a7f9560fd09a6462ed8ef3dacc0b09f5fdf48e5a361f57e057bbbf3aa0af6090aebc0b0c4d044541e7d18cfa3df5ef009196b00"/235], 0x74}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) unshare(0x2040000) bind(r3, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @remote, 0x2}}, 0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3905}, 0x0, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000007480)={r0, 0x2, 0x9, 0x40}) getpeername$unix(r4, &(0x7f00000074c0)=@abs, &(0x7f0000007540)=0x6e) syz_emit_ethernet(0x1321, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) 00:11:10 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000200)={@mcast2}, 0x14) 00:11:10 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x3c, &(0x7f0000000200)={@mcast2}, 0x14) 00:11:10 executing program 4: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_mreq(r0, 0x0, 0x4, 0x0, 0x0) 00:11:10 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f0000000600)={0xa, 0x4e23, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@tclass={{0x14, 0x29, 0x8}}], 0x18}, 0x0) 00:11:10 executing program 0: mkdir(&(0x7f0000000040)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file0\x00') 00:11:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = dup2(r0, r1) sendto$inet6(r2, &(0x7f0000000200)="cd5afdd793cbeabb213bc18ddc5f9dd7309598624239944c9ecfcf89aeda6cc426b47889136a4e73d2bceb06b598275342590189c49c4f97e2b16dccdab825fd345cf9dbf125a9f66815afe6ff5e1746a74a17ebd395ff74e285dd6c10f13056d7ee49bf13f73a585f3cb87320b62fc04bbb7ed9321fcbe16c39d63ca854178926b080208d971ef4148bb4c950dcbd3739", 0x91, 0x0, 0x0, 0x0) 00:11:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000140)="2555367d9e22feaab1d39cadad87b59505a65e913bf32fa9a5f8c5010e6f9ecf03a431f427ed77a19373ee5bbb94594f7203fc9c23052305ae549cb9c5f4c5d455d2b8c95f97bf3970cf61984cf3aa9d46ac02853e46ea52", 0x58}, {&(0x7f00000001c0)}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0xf, 0x0, 0x8, {0x0, @broadcast, @dev}}}], 0x20}}], 0x2, 0x0) 00:11:11 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x24, 0x0, 0xcaac8faa759c1732) 00:11:11 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=[@rthdrdstopts={{0x18}}], 0x18}, 0xb80b) 00:11:11 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100), 0xc) 00:11:11 executing program 1: mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) 00:11:11 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{&(0x7f0000000000)=@generic={0x25, "79f0c39538351357a7e39555952ea6b6cacb823b0a19788dc67359e9e82cb41779d59138e6d21a5a6ca53610b5f97160d638022bda0d8d5f74bdff6641bc08377dfb533ed04b6e243e7e62a3429fbdc8cf0a0746774c6fe51105ad353cc0cc639783f504e1fee6bb0c7a88eca23b14622bf2e2529c9ace3ff60f7b649734"}, 0x80, 0x0, 0x0, 0x0, 0x290}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)}, {0x0}], 0x2}}], 0x2, 0x5881) unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x8800) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) unshare(0x60000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="000c2abd7000fddbdf52880466a4590df0b4d89af61ba16f2502001000140009000000000000000000000000000000000006000a004e2400000500040000000000050003003a", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="1400733c5c850700c918f2504c2a23ecf57eb9014be675380bf998c5828d3adc0d993745efcf8feec7a23e1aa782abd04afc6fffffffff00000000c70f67abedcaf654f99113854f5bb09de54d40f1c6a51a5a400c0887096ad25f201336c59c3387a54e69caafa6e6803825cc69f36df179934f234072c4629708e865ebc5d84f84bdaffdf8315509de9d323ad12a5739cdafa8e16146895be7730faf61dce3530b9e278ecd2ff51a7f9560fd09a6462ed8ef3dacc0b09f5fdf48e5a361f57e057bbbf3aa0af6090aebc0b0c4d044541e7d18cfa3df5ef009196b00"/235], 0x74}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) unshare(0x2040000) bind(r3, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @remote, 0x2}}, 0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3905}, 0x0, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000007480)={r0, 0x2, 0x9, 0x40}) getpeername$unix(r4, &(0x7f00000074c0)=@abs, &(0x7f0000007540)=0x6e) syz_emit_ethernet(0x1321, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) 00:11:11 executing program 5: r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000940), 0x4) 00:11:11 executing program 4: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0x0) 00:11:11 executing program 3: r0 = semget(0x3, 0x2, 0x0) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f00000002c0)) 00:11:11 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x11d0, 0x0) lchown(&(0x7f0000000040)='.\x00', 0x0, 0x0) 00:11:11 executing program 1: r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f0000001240), 0x4) 00:11:12 executing program 3: r0 = socket$inet6(0x18, 0x3, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001080)={0x18, 0x1}, 0xc) 00:11:12 executing program 0: r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x1}, 0x8) 00:11:12 executing program 4: mknod(&(0x7f0000000000)='./file0\x00', 0x11d0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) 00:11:12 executing program 5: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) r0 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) 00:11:12 executing program 0: r0 = socket$inet6(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000000), 0x4) 00:11:12 executing program 1: mknod(&(0x7f0000000000)='./file1\x00', 0x8000, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200, 0x0) 00:11:13 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{&(0x7f0000000000)=@generic={0x25, "79f0c39538351357a7e39555952ea6b6cacb823b0a19788dc67359e9e82cb41779d59138e6d21a5a6ca53610b5f97160d638022bda0d8d5f74bdff6641bc08377dfb533ed04b6e243e7e62a3429fbdc8cf0a0746774c6fe51105ad353cc0cc639783f504e1fee6bb0c7a88eca23b14622bf2e2529c9ace3ff60f7b649734"}, 0x80, 0x0, 0x0, 0x0, 0x290}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)}, {0x0}], 0x2}}], 0x2, 0x5881) unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x8800) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) unshare(0x60000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="000c2abd7000fddbdf52880466a4590df0b4d89af61ba16f2502001000140009000000000000000000000000000000000006000a004e2400000500040000000000050003003a", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="1400733c5c850700c918f2504c2a23ecf57eb9014be675380bf998c5828d3adc0d993745efcf8feec7a23e1aa782abd04afc6fffffffff00000000c70f67abedcaf654f99113854f5bb09de54d40f1c6a51a5a400c0887096ad25f201336c59c3387a54e69caafa6e6803825cc69f36df179934f234072c4629708e865ebc5d84f84bdaffdf8315509de9d323ad12a5739cdafa8e16146895be7730faf61dce3530b9e278ecd2ff51a7f9560fd09a6462ed8ef3dacc0b09f5fdf48e5a361f57e057bbbf3aa0af6090aebc0b0c4d044541e7d18cfa3df5ef009196b00"/235], 0x74}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) unshare(0x2040000) bind(r3, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @remote, 0x2}}, 0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3905}, 0x0, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000007480)={r0, 0x2, 0x9, 0x40}) getpeername$unix(r4, &(0x7f00000074c0)=@abs, &(0x7f0000007540)=0x6e) syz_emit_ethernet(0x1321, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) 00:11:13 executing program 4: mknod(&(0x7f0000000080)='./file0\x00', 0x11d0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 00:11:13 executing program 3: r0 = socket(0x18, 0x2, 0x0) getsockname(r0, 0x0, &(0x7f0000000080)) 00:11:13 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000040)="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", 0xf84, 0x0, &(0x7f0000001080)=@in6={0x18}, 0xc) 00:11:13 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x11d0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve(0x0, 0x0, 0x0) 00:11:13 executing program 1: open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xfffffffffffffffd) setreuid(0x0, 0xee01) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 00:11:13 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) 00:11:13 executing program 1: r0 = socket(0x2, 0x3, 0x0) getsockopt$sock_linger(r0, 0xffff, 0x80, 0x0, 0x0) 00:11:13 executing program 5: mprotect(&(0x7f00007fd000/0x800000)=nil, 0x800000, 0x0) 00:11:13 executing program 3: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000600)=[{&(0x7f0000000100)="604d2c9dd2ff78031016c5dd9cbb0fdc3909af7a3f38fd86bd5b8f0dc78046a673c1d17c27086009c07973940df72ffab1b0c264adf5ff3dc95a36fa0f4fc9bd39d0d431d03686cd48cd4ffd404cc827726aa0fde9c58b2251e113a20a2b6a5e3d07480bb0282a6a2237c82b5b4200577ff8eec0207fa3083be618d477f65842357696a0290c170068fd888c6a7e2cc4131caa7aeafa360afc2ea51d177fdf3544d39e4963de35c4a3a132f4773c87700b904bcf4f6285864f25450bb023c0f13ca02b9c00bacf864899972242b8c757fba132c218c5b1b3", 0xd8}, {&(0x7f0000000200)="67515095d94508e8582f1413e3a2113dfb17cdb9094057ae63d202110e849b46bb7cc3ad48c3f0a534ca4e0609321da53b07a123a5cbf157fefb6e0f0404e42a3ac6ce2533ee01dbc64526eb51047a5231b2c95b34a14c3d6612e04df4bdae319249464a08b072f6a230fa4e85b88df0f9e769af911ba1a224285aeddc24ef4328642c597848c5ec96", 0x89}, {&(0x7f00000002c0)="fa7af2f7979fc9de1367b727015e43cc967d153ea41cba37212e106fa62d55ae019472004405a52bace87bcc19c893f678e41b8c5e5b6d9591c36b590cae8bc548f8407dfbe3362cb3e3d672bb638860b8f87b098deb188ef083695ec35e482861d49f0c2ddd7c171064a6710e6c5debd06a846d04286cb88f05e548a6adebe073f0e72c44dfe199b7cadca90176cdca05bf97d045757ab9ab6ef492a47b2984c63077e841cb518cb739cde1dc799d10cdbd32cb0d36ec2732493f84eb8cf26369dfcb9aa8f4130b2d970000000096a2c02a90bf52a500"/225, 0xe1}, {&(0x7f00000003c0)="aa1421c95262db5167dd484444d383d59cf2324110de483f7423a05dfef3eacddfe373089281f83f2bcf272e9e5509ffbe17e56f51d539334f09bf4d8c0ff1a94b9b4bb4e9d2f0741d9c2d92785cca6d0f94ce63647cbdac9c504f603f453419ccaa249508fb636842d239ad16290ce2cc274e9569bb2ce122e48df282efc0a665d0eb6f0ee9722a7e4302506347ec74832335be4c86fa469b1a845d54cdf210d7825431cbabaf5f32a1e4f5dca2960544c3be17dd8b68260c55ac916da6f18c4781f48ec6edcefb4cb1fb0109d1b4ff42", 0xd1}, {&(0x7f00000004c0)="c0675b14e8fc9bd7d550d1ef249540f40b6ff0f46fc69c96d2c26a", 0x1b}, {&(0x7f0000000500)="1c48989930243c4aff0bd45b7d800259ab6caa3779fe7af7251ab13234334d6ec2698c4307101cb5e452766178bfdd3d15d80c0136463ae332a462e21d2593ad09a6f7945dbf8552ba793218a73bb1887319119d129f463057b30b3a4184f291e654655bc893a417eab24b054dc3547844607e061ee1d5f73e2b852f885c7df9049cdecde8fa92ebb333270920a381960561fc21e22d4066b0", 0x99}, {&(0x7f00000005c0)}], 0x100001f1, &(0x7f0000000800)=[@cred, @rights, @rights, @cred], 0x78}, 0x0) 00:11:14 executing program 5: mknod(&(0x7f0000000180)='./file0\x00', 0x81c8, 0x202) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0x202) mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00') 00:11:14 executing program 4: r0 = socket(0x2, 0x3, 0x0) sendmsg(r0, &(0x7f00000002c0)={&(0x7f0000000080)=@in, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x120}, 0x2) 00:11:14 executing program 2: sendmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{&(0x7f0000000000)=@generic={0x25, "79f0c39538351357a7e39555952ea6b6cacb823b0a19788dc67359e9e82cb41779d59138e6d21a5a6ca53610b5f97160d638022bda0d8d5f74bdff6641bc08377dfb533ed04b6e243e7e62a3429fbdc8cf0a0746774c6fe51105ad353cc0cc639783f504e1fee6bb0c7a88eca23b14622bf2e2529c9ace3ff60f7b649734"}, 0x80, 0x0, 0x0, 0x0, 0x290}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)}, {0x0}], 0x2}}], 0x2, 0x5881) unshare(0x6c060000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x8800) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) unshare(0x60000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="000c2abd7000fddbdf52880466a4590df0b4d89af61ba16f2502001000140009000000000000000000000000000000000006000a004e2400000500040000000000050003003a", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r2, @ANYBLOB="1400733c5c850700c918f2504c2a23ecf57eb9014be675380bf998c5828d3adc0d993745efcf8feec7a23e1aa782abd04afc6fffffffff00000000c70f67abedcaf654f99113854f5bb09de54d40f1c6a51a5a400c0887096ad25f201336c59c3387a54e69caafa6e6803825cc69f36df179934f234072c4629708e865ebc5d84f84bdaffdf8315509de9d323ad12a5739cdafa8e16146895be7730faf61dce3530b9e278ecd2ff51a7f9560fd09a6462ed8ef3dacc0b09f5fdf48e5a361f57e057bbbf3aa0af6090aebc0b0c4d044541e7d18cfa3df5ef009196b00"/235], 0x74}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) unshare(0x2040000) bind(r3, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x3, @remote, 0x2}}, 0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3905}, 0x0, r2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000007480)={r0, 0x2, 0x9, 0x40}) getpeername$unix(r4, &(0x7f00000074c0)=@abs, &(0x7f0000007540)=0x6e) syz_emit_ethernet(0x1321, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) 00:11:14 executing program 3: socket(0x11, 0x0, 0xff) 00:11:14 executing program 0: getdents(0xffffffffffffffff, &(0x7f0000000140)=""/80, 0xfa0d5bf7124ecfdc) 00:11:14 executing program 5: r0 = socket(0x2, 0x1, 0x0) getsockname$inet(r0, 0x0, &(0x7f0000000080)) 00:11:14 executing program 1: shmctl$SHM_UNLOCK(0xffffffffffffffff, 0x4) 00:11:15 executing program 4: r0 = socket(0x2, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x803, 0x0, 0x0) 00:11:15 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) close(r0) 00:11:15 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @local}, {0x0, @link_local}, 0x0, {0x2, 0x0, @dev}, 'macvlan1\x00'}) 00:11:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000400)=""/204, 0x2e, 0xcc, 0x1}, 0x20) 00:11:15 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)='\'', 0x7ffff000}], 0x1}, 0x0) 00:11:15 executing program 3: perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:11:16 executing program 1: bpf$MAP_UPDATE_BATCH(0x22, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0}, 0x38) 00:11:16 executing program 2: bpf$MAP_CREATE(0x2, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:11:16 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x0, 0x4, 0x5, 0x180, 0x1}, 0x48) 00:11:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6, 0x2, 0x8}, 0x48) 00:11:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc8000, 0x0) ioctl$TUNGETFEATURES(r0, 0x5450, 0x0) 00:11:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x4}]}]}}, &(0x7f0000000180)=""/141, 0x32, 0x8d, 0x1}, 0x20) 00:11:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000024c0)={r0, &(0x7f0000002300), 0x0}, 0x20) 00:11:16 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) 00:11:16 executing program 0: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 00:11:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x11}]}}, &(0x7f0000000400)=""/204, 0x26, 0xcc, 0x1}, 0x20) 00:11:16 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'batadv_slave_0\x00'}) 00:11:16 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00000001c0)=""/147, 0x2c, 0x93, 0x1}, 0x20) 00:11:17 executing program 2: socketpair(0x2, 0xa, 0x400, &(0x7f0000000080)) 00:11:17 executing program 0: bpf$MAP_LOOKUP_BATCH(0x13, 0x0, 0x0) 00:11:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x6, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) 00:11:17 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x8, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb421}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:17 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a00)={0x0, 0x0, 0x8}, 0xc) 00:11:17 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000100)=""/221, 0x26, 0xdd, 0x1}, 0x20) 00:11:17 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) 00:11:17 executing program 5: perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:11:17 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)) 00:11:18 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) 00:11:18 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0xae, 0x147, 0x0, 0x1}, 0x48) 00:11:18 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f0000000400)=""/204, 0x26, 0xcc, 0x1}, 0x20) 00:11:18 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@enum={0x9}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000080)=""/197, 0x2e, 0xc5, 0x1}, 0x20) 00:11:18 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 00:11:18 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f00000002c0)) 00:11:18 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x5451, 0x0) 00:11:18 executing program 0: perf_event_open$cgroup(&(0x7f0000000000)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:11:18 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000140)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:11:18 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 00:11:18 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x0, 0x1, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x80) 00:11:19 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001c40)={&(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) 00:11:19 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}]}}, &(0x7f0000000400)=""/204, 0x26, 0xcc, 0x1}, 0x20) 00:11:19 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x6b, &(0x7f0000000100)=""/107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:11:19 executing program 3: bpf$MAP_LOOKUP_BATCH(0x4, 0x0, 0x0) 00:11:19 executing program 2: bpf$MAP_LOOKUP_BATCH(0xd, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 00:11:19 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0) 00:11:19 executing program 4: socketpair(0x21, 0x0, 0x0, &(0x7f0000000080)) 00:11:19 executing program 0: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) 00:11:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0xc1c}, 0x48) 00:11:19 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000100)=@abs, 0x6e, 0x0}, 0x2) sendmsg$inet(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="c2", 0x1}], 0x1}, 0x0) 00:11:19 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'wlan1\x00', 0x400}) 00:11:19 executing program 5: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000400)=""/204, 0x26, 0xcc, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x20, &(0x7f0000000100)={&(0x7f0000000540)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/253, 0xfd}}, 0x10) 00:11:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000900)=[{0x0}], 0x1, 0x0, 0x0) r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000001500)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020002020202020202020202020200000000000000000bf000000000000bf000000000000000000000000000000000000000000000000000000000000000001000001010000010008080018000000000000181400000000000000000000160000000022001c", 0x9f, 0x8000}, {&(0x7f0000010600)="0243443030310100004c0049004e0055005800200020002000200020002000200020002000200020004300440052004f004d002000200020002000200020002000200020002000200000000000000000bf000000000000bf252f", 0x5a, 0x8800}, {&(0x7f0000011100)="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", 0x1a0, 0xe000}], 0x0, &(0x7f00000001c0)) faccessat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) 00:11:20 executing program 1: creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000000c0)=@xfs_parent={0x1c}, 0x0) 00:11:20 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 00:11:20 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @private1}}) 00:11:20 executing program 5: r0 = syz_io_uring_setup(0x87, &(0x7f0000001480), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000340)) r1 = fcntl$dupfd(r0, 0x0, r0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x5, &(0x7f0000000140), 0x0) [ 680.525583][T13926] loop4: detected capacity change from 0 to 224 00:11:20 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='lock_acquire\x00'}, 0x10) syz_clone(0x4006400, &(0x7f0000000240)="762338186cb92736e77d0edf4be5d1edf8f89f91d3cd96a0288616fd86fd77ad4a3357703cfaaa886dca48ff34730908edcab5fc138e3b76d341a8bb835c6bd2c427af9089c5b095520926dd3187c23854b8ed29c318a6a3ecf59bd7d493f3312e80a8b6cfaa46c64c1de53159f0defc5a0f5b40b803f790d01dd51efc4141df01bd642a08ce02ceecf9b885a926baa8a568b1e79c8ef25aa1abf084108500fb", 0xa0, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000340)="a10ac3eff73a48eecc4dec154fdb3f330f2a7367418b4c9174e5af28b97bbf31c6c804919b11794142ca74a04a213fb539f19fc0f942f0ba0c6461b0d5cf9017cec726a67d4fd49980bf3d311c9974d9a6823fe278ec6c76442833d28949a47503f9979194e5a8be065fe3f94584f856ebfc339450590082eae7cbdb8389f0952deb9b594e6da4c9747c55279ec38d59701dd8b0b7fb7e01a1c9bc5118fa8c8e905a396c5eeb8c6e8da0eee7081d8041dad445813555345d66b55f624824f50022768e8aeaffd9cc49531f067d3fbb74abac7800193ff147b3519eb7b1ad3aaf0c2c") 00:11:20 executing program 4: socket$caif_stream(0x25, 0x1, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) ioctl$FITHAW(r0, 0xc0045878) 00:11:20 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'virt_wifi0\x00', 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'sit0\x00'}) 00:11:20 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000ff0f00000000000020000015850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='lock_acquire\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000ff0f00000000000020000015850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='lock_acquire\x00', r1}, 0x10) signalfd4(r0, &(0x7f0000000300)={[0x4]}, 0x8, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='rpc_request\x00', r1}, 0x10) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='+/\x7f)$)\x00', 0x0) 00:11:21 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @local, @dev}}) 00:11:21 executing program 2: r0 = syz_io_uring_setup(0x87, &(0x7f0000001480), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 00:11:21 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0xfe800000}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newtaction={0x48, 0x31, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 00:11:21 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0) memfd_create(&(0x7f0000000440)='\xfaIh\x05\x00K\x99F\x16\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_{T\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfbK\'\x06\r\xf8\x96\"\xe3\xd5\xc2\x818\x1f\xbf\x8c&`A-T\xbb)\x12\xbf\xfa\xc6\xefe\tM\xe6\xe5\xe9l^i\xda\x1cxo-\x89I\xd3\x04$\x7f\xbe[\xdd\x90J\x18\xaa\x91$\x02\xf8\xcb\xa3\xfatw\xb9\x00\xdfA\xa5\x9d\tk\x16\x16T\x8c\x18\xb4\xb0\x7f\x8a:\xbb\x97M+\xbc5\f\xf8\xc0>\x9e\x11', 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) 00:11:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1}, 0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x500}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) lseek(0xffffffffffffffff, 0x200, 0x0) 00:11:21 executing program 5: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6}]}) socket(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000100)) 00:11:21 executing program 3: r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0xf, r0, 0xee00, 0xee01) 00:11:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffa) 00:11:21 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1}, 0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x500}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1e}}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x50}}, 0x0) [ 682.029582][ T24] audit: type=1326 audit(681.769:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13957 comm="syz-executor.5" exe="/root/syz-executor.5" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6f11549 code=0x0 00:11:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@filter_kind_options=@f_route={{0x15}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) [ 682.120135][T13959] device vlan2 entered promiscuous mode [ 682.125963][T13959] device team0 entered promiscuous mode [ 682.131615][T13959] device team_slave_0 entered promiscuous mode [ 682.140048][T13959] device team_slave_1 entered promiscuous mode 00:11:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0xc, 0x0, &(0x7f00000003c0)) 00:11:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2, 0x0, 0x0) [ 682.483889][T13967] device vlan2 entered promiscuous mode [ 682.489589][T13967] device team0 entered promiscuous mode [ 682.495517][T13967] device team_slave_0 entered promiscuous mode [ 682.502539][T13967] device team_slave_1 entered promiscuous mode 00:11:22 executing program 4: bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x0, 0x0) 00:11:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x1e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}}, 0x88) 00:11:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_ts_info={0xa}}) 00:11:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000040)="e0459a5ab32d69f3", 0x8) 00:11:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f00000001c0)) 00:11:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000003c0)=0x14) 00:11:22 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x1c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}}, 0x88) 00:11:22 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10}, 0x10}}, 0x0) 00:11:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_ts_info={0xa}}) 00:11:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x711}, 0x14}}, 0x0) 00:11:23 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x0) 00:11:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_ts_info={0x26}}) 00:11:23 executing program 4: r0 = socket$inet(0x2, 0x3, 0x8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast2}}}}) 00:11:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4c, 0x2, [@TCA_ROUTE4_POLICE={0x48, 0x5, [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x20000000}}]}]}}]}, 0x7c}}, 0x0) 00:11:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_ts_info={0xa}}) 00:11:23 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x1, @local}, 0x16, {0x2, 0x0, @multicast2}, 'veth1_to_bond\x00'}) 00:11:23 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@ll={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10}, {0x10, 0x1}], 0x20}, 0x0) 00:11:23 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x0, 0x0, 0x0, {0x7, 0x7, './file0', './file0'}}, 0x28}}, 0x0) 00:11:23 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x5, 0x0, &(0x7f00000003c0)) 00:11:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x33, 0x0, 0x0) 00:11:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_ts_info={0xa}}) 00:11:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x2c}}, 0x0) 00:11:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x5, 0x0, 0x0) 00:11:24 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) 00:11:24 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @remote, @void, {@arp={0x806, @generic={0x0, 0x0, 0x6, 0x5, 0x0, @multicast, "ddc0a86dda", @remote, "444a8c"}}}}, 0x0) 00:11:24 executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'sha256-ni\x00'}}}, 0xe0}}, 0x0) 00:11:24 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000040)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "d39cbc", 0x0, 0x0, 0x0, @private0, @dev}}}}, 0x0) 00:11:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8923, &(0x7f0000000000)={'vcan0\x00'}) 00:11:24 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}], 0x10}, 0x0) 00:11:24 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x4, 0x0, 0x4}, 0x48) 00:11:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x63, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@timestamping={{0xfffffffffffffe07}}, @txtime={{0x18}}], 0x30}}, {{&(0x7f0000000000)=@xdp, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="077d273da36ea61c75635a7a24b55fcb17a611c4dc3e6d0be2a0fc3a963b03dd1caf28a80f7472c31a1ad8"}, {&(0x7f00000000c0)="8c1155e1a846ea6a9fa9a923570263db38eaaab64e9b57e158a3735ab92b9c98bba43ff223dcc662f4f9d990d01bd3870692457d083f5cabcb3c"}, {&(0x7f0000000100)="ef7003830e197d8eccd08719746a7d1c97ce2e60769aaa929055e99f2debb1da6b1cd9327e431ec14d7711324871c4d3e3fef948521ac00e6dee6112232e8fb64fd87cf58e599222b42a7cf27e8823d5c2a710a9fc4f9b3e7412c7f30d25dfd96a060386afb883f2f1c7bf1b074e36dbd9c6d6e94e6d6c50577876f6995e37c9fd244a5477838aa24966ee"}], 0x0, &(0x7f0000000200)=[@timestamping, @txtime, @mark]}}], 0x2, 0x0) 00:11:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$sock(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[@timestamping={{0x14}}, @txtime={{0x18}}], 0x200015f0}}], 0x2, 0x0) 00:11:25 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) write$cgroup_type(r0, &(0x7f0000000140), 0xffffff1f) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r1, 0x0) 00:11:25 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x7f, &(0x7f0000000140)=0x0) io_submit(r1, 0x3, &(0x7f0000000700)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x8, 0x401, r0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0]) 00:11:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}]}, 0x33fe0}}, 0x0) 00:11:25 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000400)={@dev, @local, @void, {@mpls_uc={0x8864, {[], @ipv6=@udp={0x0, 0x6, "c911cf", 0xc, 0x11, 0x0, @private0, @empty, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}}, 0x0) 00:11:25 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r1 = memfd_create(&(0x7f0000000100)='.\x00', 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1}) 00:11:25 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8921, &(0x7f0000000000)={'vcan0\x00'}) 00:11:25 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) getpgid(0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:25 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) write$FUSE_INIT(r0, &(0x7f0000000680)={0x50, 0x0, 0x0, {0x7, 0x21}}, 0x50) chdir(&(0x7f0000000540)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 00:11:25 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xc0, 0x0, 0x0, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}]}, 0x28}}, 0x0) 00:11:26 executing program 5: write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x7) getresuid(&(0x7f0000000200), &(0x7f0000000240), 0x0) 00:11:26 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYBLOB="000000000800000004001a8008001b00"], 0x2c}}, 0x0) [ 686.516122][T14057] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. 00:11:26 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x3}) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7fff) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x11, 0xf9, &(0x7f0000000480)="ce32670ccd10a94c4825460beedae931c181be96e8f47b3605c08fb5b88184365fab1665b8b89b0f7d63bfc83b6df7a3bfa4454e4169a7f5fc8f24ea467cf8eaf20733e7f4f51d2859d92ad15886ca4f305ee17641c88c4be7718f5bcb743f15d749a1dd1cfdd9b7adbff9d361d91f28e896a57f787d2de1491d9229f24f197e90cae6e13f14c07166aa135954a6b50e5813e9354552c92d3dc8227d84b0ba5fb41d1f21f55e1b7808e41737bb6ccd67c45b180196779a3ceafb29ca3071cc6b53fc675e4bfb24c1489390e5877801f80fa1e76a6435ea78f3be4a4f330843c85929741a209c82588675447b2fdaa272c8e9e94216c0e6a3a6"}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40680, 0x5) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="e9fb36d6914c5f8dc02975005b9d7734edd75f19bba66c8aa32c6ded15b0e741e51c1c859106352b8bbfed11e5bf749be10ed04229df269073bf210932507e1f8066e3bc0000000000000000", @ANYRES16=0x0, @ANYBLOB="00000008000300774fa7f26abc4eb193eb06bb258877982bb4a89e3f29e041c6004a04b2b455322b641b06dc840f5001d6e144059cdba90ad3ace559238b3143b8017309aec32b9b7976c8a36c4fdf650e8814963cf6d2184c9d4b3cf09417aa29d0effee35cd98e2ec4e97b1b11cb8fe6c29b21cfdc71c14cae04adae68301056d044", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4c081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="100001c00c09008008000200280000000c00018008000100020004000c1c8f87af92"], 0x4c}}, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x42081) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x1}) 00:11:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x6f) [ 686.711260][T14059] overlayfs: './file0' not a directory 00:11:26 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) [ 686.815233][T14066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:26 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x40202, 0x0) [ 686.943175][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.013045][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 687.023885][T14066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:11:27 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000400)={@dev, @local, @void, {@mpls_uc={0x8906, {[], @ipv6=@udp={0x0, 0x6, "c911cf", 0xc, 0x11, 0x0, @private0, @empty, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}}, 0x0) 00:11:27 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYBLOB="000000000800000004001a8008001b00"], 0x2c}}, 0x0) 00:11:27 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x20, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xcccd07542c93221}, [@IFLA_MAP={0x24, 0xe, {0x81, 0x800, 0x0, 0x0, 0x0, 0xc0}}]}, 0x44}}, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0xb3b3ad3a0bcc3acf, 0x6, 0xff, 0x1f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0x2bed}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000680)={'sit0\x00', r1, 0x0, 0x0, 0x3, 0x3, 0x38, @rand_addr=' \x01\x00', @empty, 0x700, 0x40, 0x7ff, 0x186}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0x541, 0x3f, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf9, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0x3f, [@broadcast, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x11}}, {@private=0xa010100, 0x7}]}]}}}}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x13, r1}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) 00:11:27 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x0, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xcccd07542c93221}}, 0x20}}, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0xb3b3ad3a0bcc3acf, 0x6, 0xff, 0x1f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0x2bed}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000200)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@private1, 0x13, r0}) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r1}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) 00:11:27 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, {}, {}, {0x4d, 0x5}, {0x4, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4}) 00:11:27 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x3}) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7fff) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x11, 0xf9, &(0x7f0000000480)="ce32670ccd10a94c4825460beedae931c181be96e8f47b3605c08fb5b88184365fab1665b8b89b0f7d63bfc83b6df7a3bfa4454e4169a7f5fc8f24ea467cf8eaf20733e7f4f51d2859d92ad15886ca4f305ee17641c88c4be7718f5bcb743f15d749a1dd1cfdd9b7adbff9d361d91f28e896a57f787d2de1491d9229f24f197e90cae6e13f14c07166aa135954a6b50e5813e9354552c92d3dc8227d84b0ba5fb41d1f21f55e1b7808e41737bb6ccd67c45b180196779a3ceafb29ca3071cc6b53fc675e4bfb24c1489390e5877801f80fa1e76a6435ea78f3be4a4f330843c85929741a209c82588675447b2fdaa272c8e9e94216c0e6a3a6"}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40680, 0x5) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="e9fb36d6914c5f8dc02975005b9d7734edd75f19bba66c8aa32c6ded15b0e741e51c1c859106352b8bbfed11e5bf749be10ed04229df269073bf210932507e1f8066e3bc0000000000000000", @ANYRES16=0x0, @ANYBLOB="00000008000300774fa7f26abc4eb193eb06bb258877982bb4a89e3f29e041c6004a04b2b455322b641b06dc840f5001d6e144059cdba90ad3ace559238b3143b8017309aec32b9b7976c8a36c4fdf650e8814963cf6d2184c9d4b3cf09417aa29d0effee35cd98e2ec4e97b1b11cb8fe6c29b21cfdc71c14cae04adae68301056d044", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4c081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="100001c00c09008008000200280000000c00018008000100020004000c1c8f87af92"], 0x4c}}, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x42081) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x1}) [ 688.051899][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 688.207988][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 688.289395][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.300835][T14080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 688.821950][T14085] hub 9-0:1.0: USB hub found [ 688.844240][T14085] hub 9-0:1.0: 8 ports detected 00:11:29 executing program 2: capset(&(0x7f0000000280)={0x19980330}, 0x0) 00:11:29 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 00:11:29 executing program 4: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYBLOB="000000000800000004001a8008001b00"], 0x2c}}, 0x0) 00:11:29 executing program 0: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={0x0, 0x3}) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x7fff) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000140)={0x11, 0xf9, &(0x7f0000000480)="ce32670ccd10a94c4825460beedae931c181be96e8f47b3605c08fb5b88184365fab1665b8b89b0f7d63bfc83b6df7a3bfa4454e4169a7f5fc8f24ea467cf8eaf20733e7f4f51d2859d92ad15886ca4f305ee17641c88c4be7718f5bcb743f15d749a1dd1cfdd9b7adbff9d361d91f28e896a57f787d2de1491d9229f24f197e90cae6e13f14c07166aa135954a6b50e5813e9354552c92d3dc8227d84b0ba5fb41d1f21f55e1b7808e41737bb6ccd67c45b180196779a3ceafb29ca3071cc6b53fc675e4bfb24c1489390e5877801f80fa1e76a6435ea78f3be4a4f330843c85929741a209c82588675447b2fdaa272c8e9e94216c0e6a3a6"}) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40680, 0x5) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="e9fb36d6914c5f8dc02975005b9d7734edd75f19bba66c8aa32c6ded15b0e741e51c1c859106352b8bbfed11e5bf749be10ed04229df269073bf210932507e1f8066e3bc0000000000000000", @ANYRES16=0x0, @ANYBLOB="00000008000300774fa7f26abc4eb193eb06bb258877982bb4a89e3f29e041c6004a04b2b455322b641b06dc840f5001d6e144059cdba90ad3ace559238b3143b8017309aec32b9b7976c8a36c4fdf650e8814963cf6d2184c9d4b3cf09417aa29d0effee35cd98e2ec4e97b1b11cb8fe6c29b21cfdc71c14cae04adae68301056d044", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4c081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="100001c00c09008008000200280000000c00018008000100020004000c1c8f87af92"], 0x4c}}, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x8108551b, &(0x7f0000000380)) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x42081) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect={0x1}) 00:11:29 executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x20, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0xcccd07542c93221}, [@IFLA_MAP={0x24, 0xe, {0x81, 0x800, 0x0, 0x0, 0x0, 0xc0}}]}, 0x44}}, 0x84) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0xb3b3ad3a0bcc3acf, 0x6, 0xff, 0x1f, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x80, 0x2bed}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000780)) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000680)={'sit0\x00', r1, 0x0, 0x0, 0x3, 0x3, 0x38, @rand_addr=' \x01\x00', @empty, 0x700, 0x40, 0x7ff, 0x186}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000240)={'gre0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x20, 0x20, 0x541, 0x3f, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xf9, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0x3f, [@broadcast, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @remote]}, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x11}}, {@private=0xa010100, 0x7}]}]}}}}}) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000200)) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x13, r1}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={0x0, 0x20000600}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) r4 = add_key$user(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2b2, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000000)="03", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r4, r4}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={'streebog256\x00'}}) 00:11:29 executing program 1: read$proc_mixer(0xffffffffffffffff, 0x0, 0x0) 00:11:29 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) read(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendfile(r2, r1, 0x0, 0x80806) syz_open_dev$sndctrl(0x0, 0x0, 0x0) [ 690.011853][T14101] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor.0' sets config #0 00:11:29 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 00:11:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000001c0)={0x320, 0x320, 0x30, 0x80, 0x61e, 0x4, 0x8, 0x0, {0xb27, 0x4, 0x5}, {0x7382, 0x3}, {0x0, 0x2, 0x1}, {0x6, 0x6}, 0x2, 0x40, 0x0, 0x7, 0x1, 0x7, 0x6, 0x9, 0x1, 0x4, 0xcbd, 0xffff, 0x23, 0x200, 0x3, 0xb}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xd00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}) [ 690.366901][T14101] usb usb9: usbfs: interface 0 claimed by usbfs while 'syz-executor.0' sets config #1 [ 690.402328][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 690.476158][T14111] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 690.502113][T14111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.511443][T14111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 00:11:30 executing program 0: mmap$perf(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x3000002, 0x40032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000001600)=0x9, 0x7) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a004100, 0x2759, 0xd, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000, 0x1000000}]) 00:11:30 executing program 5: shmat(0x0, &(0x7f0000a35000/0x2000)=nil, 0xb800) shmat(0x0, &(0x7f0000a34000/0x2000)=nil, 0x2000) r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010007000000000000000a0000000c005c6c300d06006f766600"], 0x20}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14c}}, 0x0) r2 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ff9000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fstat(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}], 0x20}}], 0x1, 0x0) r5 = getpgid(0x0) getpgid(r5) 00:11:30 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3401000010000505f90906000000000000000000", @ANYRES32, @ANYBLOB="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"], 0x134}}, 0x0) 00:11:30 executing program 2: perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYBLOB="000000000800000004001a8008001b0000000000d505ed75e5e757c31970b83f6ffc5f6fe1c90cf8c11a693b28460b1d4acea57dcf"], 0x2c}}, 0x0) 00:11:31 executing program 4: msgctl$IPC_INFO(0x0, 0x3, &(0x7f000000ddc0)=""/58) 00:11:31 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) [ 691.191160][T14121] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 00:11:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3401000010000505f90906000000000000000000", @ANYRES32, @ANYBLOB="0000000004000000080112000c0001006d6163766c616e00f80002004c0005000a0004005c1be6ca647304920a000400d21bf5466bca0900000056acea9c2f85340b00000a800400aaaaaaaaaaaa00000a000400aaaaaaaaaabb20000a000400aaaab009aabb00000a000400aaaaaaaaaabb000008000100100000000a000400aaaaaaaaaaaa00000a00040b0000000000000000080003000300000008ea020002000000640005000a1904000180c200000300000a001400ffffefffffff00000a000400aaaaaaaaaa240000cd4b6b26ffff7fffffff00000a00040000000000000000000a00040008000002000000000a0004000180c200000200080a00040010c7840115e211ad5f0003ff0f0000ff0900050004"], 0x134}}, 0x0) 00:11:32 executing program 4: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x2, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xc292, 0x0, 0x80}) [ 691.191986][T14121] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 691.569917][T14123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 691.748850][T14123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 692.397009][T14129] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 692.397097][T14129] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 692.423559][ T116] usb 6-1: new high-speed USB device number 8 using dummy_hcd 00:11:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f00000001c0)={0x320, 0x320, 0x30, 0x80, 0x61e, 0x4, 0x8, 0x0, {0xb27, 0x4, 0x5}, {0x7382, 0x3}, {0x0, 0x2, 0x1}, {0x6, 0x6}, 0x2, 0x40, 0x0, 0x7, 0x1, 0x7, 0x6, 0x9, 0x1, 0x4, 0xcbd, 0xffff, 0x23, 0x200, 0x3, 0xb}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xd00}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}) 00:11:32 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) process_vm_writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001580)=""/4096, 0x20002580}], 0x1, &(0x7f0000001540)=[{&(0x7f00000012c0)=""/158, 0x2000161e}], 0x1, 0x0) 00:11:32 executing program 0: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCODING_SA={0x5, 0xc, 0x2}]}}}]}, 0x3c}}, 0x0) [ 692.673532][ T116] usb 6-1: Using ep0 maxpacket: 8 00:11:32 executing program 2: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$search(0xa, r1, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffffa) [ 692.793029][ T116] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 692.802722][ T116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.846614][ T116] usb 6-1: config 0 descriptor?? [ 692.890098][ T116] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa 00:11:32 executing program 0: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f00000008c0)}], 0x0, &(0x7f0000000a00)) 00:11:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'wg2\x00', {0x2, 0x0, @multicast1}}) 00:11:33 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, r0) 00:11:33 executing program 0: keyctl$clear(0xe, 0xfffffffffffffffe) [ 693.633065][ T116] gspca_zc3xx: reg_w_i err -110 00:11:33 executing program 1: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{}, "131e01c79830a680", "ea0d208cd8735ca66356d1cbe582d9a3e65fa80ad45ed20668cdf283d3633259", "0de3c25b", "2748051b7b635f5d"}, 0x38) ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000000)) [ 694.263114][ T116] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 694.269656][ T116] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:11:35 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:11:35 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x1, &(0x7f00000009c0)=[{0x0}], 0x0, &(0x7f0000000a00)) 00:11:35 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)) 00:11:35 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc2}, &(0x7f00000006c0)={0x0, "a54a4d168b52446806fa965d90bb2b878299f17d87d164906f950e0495f7e7cf17a8f583a8ba6bb36853c5ffa99eb5aad14aa149e27e6d4ba305505214ba8aa1"}, 0x48, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) openat$bsg(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000a80), 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) 00:11:35 executing program 1: syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x4800) 00:11:35 executing program 2: epoll_create(0x3) [ 695.450483][ T116] usb 6-1: USB disconnect, device number 8 00:11:35 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001400), 0x0, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r1}) 00:11:35 executing program 0: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)) 00:11:35 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x7, 0x5c, 0x71, 0x40, 0x17e9, 0x5c01, 0x2f47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) 00:11:35 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x1, &(0x7f00000009c0)=[{&(0x7f00000008c0)='\b', 0x1}], 0x0, &(0x7f0000000a00)) 00:11:35 executing program 3: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0) [ 696.072524][ T116] usb 6-1: new high-speed USB device number 9 using dummy_hcd 00:11:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x1267, 0x0) [ 696.312651][ T116] usb 6-1: Using ep0 maxpacket: 8 [ 696.343481][ T3583] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 696.433294][ T116] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 696.443299][ T116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.524335][ T116] usb 6-1: config 0 descriptor?? [ 696.570308][ T116] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 696.732650][ T3583] usb 2-1: New USB device found, idVendor=17e9, idProduct=5c01, bcdDevice=2f.47 [ 696.741983][ T3583] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.754027][ T3583] usb 2-1: config 0 descriptor?? [ 697.062807][ T3583] udlfb 2-1:0.0: vendor descriptor not available (-71) [ 697.093070][ T3583] usb 2-1: Read EDID byte 0 failed: -71 [ 697.128869][ T3583] usb 2-1: Read EDID byte 0 failed: -71 [ 697.152880][ T3583] usb 2-1: Read EDID byte 0 failed: -71 [ 697.162766][ T3583] usb 2-1: Unable to get valid EDID from device/display [ 697.185310][ T3583] usb 2-1: submit urb error: -2 [ 697.196318][ T3583] udlfb: probe of 2-1:0.0 failed with error -2 [ 697.272760][ T3583] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 697.281466][ T3583] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 697.292775][ T116] gspca_zc3xx: reg_w_i err -110 [ 697.303253][ T3583] [drm:udl_init] *ERROR* Selecting channel failed [ 697.318948][ T3583] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 697.326785][ T3583] [drm] Initialized udl on minor 2 [ 697.357555][ T3583] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 697.366749][ T3583] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 697.378212][ T3583] usb 2-1: USB disconnect, device number 5 [ 697.922473][ T116] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 697.928889][ T116] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:11:38 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:11:38 executing program 0: timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000340)={{0x77359400}}, 0x0) 00:11:38 executing program 3: request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0) 00:11:38 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000080)={0x0, "209dbd9fca3d3f7043248bf8be1ddb72d06aaaafcadee30ef117671658a1fbc530e9f67bca72b881565ee35c55e0f46aa8d3f28adcbb42792c465d927d7435b5"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000100)='\x00', 0x0) 00:11:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="2a96ae4541218858ea5b8c77429b1469", 0x10) 00:11:38 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x7, 0x5c, 0x71, 0x40, 0x17e9, 0x5c01, 0x2f47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) [ 699.133267][ T3583] usb 6-1: USB disconnect, device number 9 00:11:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010009d7400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014001680100001"], 0x34}}, 0x0) 00:11:39 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 699.315686][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.322373][ T1199] ieee802154 phy1 wpan1: encryption failed: -22 00:11:39 executing program 2: keyctl$clear(0x12, 0xfffffffffffffffe) 00:11:39 executing program 3: socket$inet6_tcp(0xa, 0x1, 0x0) open(0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x6b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x7, 0x5c, 0x71, 0x40, 0x17e9, 0x5c01, 0x2f47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_disconnect(r0) [ 699.513360][ T116] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 699.543546][T14198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 00:11:39 executing program 4: r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x3}, r0) [ 699.733039][ T3562] usb 6-1: new high-speed USB device number 10 using dummy_hcd 00:11:39 executing program 0: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000280), 0xc, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@block}], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}]}) [ 699.903147][ T116] usb 2-1: New USB device found, idVendor=17e9, idProduct=5c01, bcdDevice=2f.47 [ 699.913032][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.964042][ T116] usb 2-1: config 0 descriptor?? [ 699.972617][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 700.093224][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 700.102701][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.112790][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 700.193565][ T3562] usb 6-1: config 0 descriptor?? [ 700.242551][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 700.253581][ T116] udlfb 2-1:0.0: vendor descriptor not available (-71) [ 700.273324][ T116] usb 2-1: Read EDID byte 0 failed: -71 [ 700.293190][ T116] usb 2-1: Read EDID byte 0 failed: -71 [ 700.313459][ T116] usb 2-1: Read EDID byte 0 failed: -71 [ 700.319422][ T116] usb 2-1: Unable to get valid EDID from device/display [ 700.354864][ T116] usb 2-1: submit urb error: -2 [ 700.367195][ T116] udlfb: probe of 2-1:0.0 failed with error -2 [ 700.433423][ T116] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 700.442447][ T116] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 700.462695][ T116] [drm:udl_init] *ERROR* Selecting channel failed [ 700.479584][ T116] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 700.487778][ T116] [drm] Initialized udl on minor 2 [ 700.494242][ T26] usb 4-1: New USB device found, idVendor=17e9, idProduct=5c01, bcdDevice=2f.47 [ 700.503630][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.517818][ T116] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 700.527065][ T116] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 700.548705][ T26] usb 4-1: config 0 descriptor?? [ 700.573070][ T116] usb 2-1: USB disconnect, device number 6 [ 700.855626][ T26] udlfb 4-1:0.0: vendor descriptor not available (-71) [ 700.896047][ T26] usb 4-1: Read EDID byte 0 failed: -71 [ 700.932790][ T26] usb 4-1: Read EDID byte 0 failed: -71 [ 700.952676][ T26] usb 4-1: Read EDID byte 0 failed: -71 [ 700.958454][ T26] usb 4-1: Unable to get valid EDID from device/display [ 700.986107][ T26] usb 4-1: submit urb error: -2 [ 700.995517][ T26] udlfb: probe of 4-1:0.0 failed with error -2 [ 701.032782][ T3562] gspca_zc3xx: reg_w_i err -110 [ 701.085881][ T26] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 701.094826][ T26] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 701.122648][ T26] [drm:udl_init] *ERROR* Selecting channel failed [ 701.139073][ T26] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 701.146886][ T26] [drm] Initialized udl on minor 2 [ 701.182560][ T26] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 701.191623][ T26] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 701.214410][ T26] usb 4-1: USB disconnect, device number 5 [ 701.662407][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 701.669072][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:11:42 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:11:42 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)={0x0, "6440b531bd3611edc3870d4b20e944aba62710c3b8eb73a9f96f9f9c33c592233c4dbf1878bdec04df566b0228e9c352e84a40382a36969deb18e5b5275c4cb3"}, 0x48, r0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r1) 00:11:42 executing program 0: open$dir(&(0x7f0000001280)='./file0\x00', 0x0, 0x0) 00:11:42 executing program 4: add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 00:11:42 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x7, 0x5c, 0x71, 0x40, 0x17e9, 0x5c01, 0x2f47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) 00:11:42 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000000)='.*\x00', &(0x7f0000000040), 0x0) [ 702.831173][ T3583] usb 6-1: USB disconnect, device number 10 00:11:42 executing program 0: add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000240)='e', 0x1, 0xfffffffffffffffc) 00:11:42 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe) 00:11:42 executing program 2: syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000006c0)=[{0x0, 0x0, 0xfffffffffffffffa}], 0x0, &(0x7f0000000780)={[{@check_strict}], [{@permit_directio}]}) 00:11:42 executing program 3: r0 = syz_open_dev$loop(&(0x7f00000006c0), 0x0, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000700)) [ 703.243012][ T3556] usb 2-1: new high-speed USB device number 7 using dummy_hcd 00:11:43 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000840), &(0x7f0000000880)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)) [ 703.433768][ T3583] usb 6-1: new high-speed USB device number 11 using dummy_hcd 00:11:43 executing program 3: perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 703.683516][ T3556] usb 2-1: New USB device found, idVendor=17e9, idProduct=5c01, bcdDevice=2f.47 [ 703.693138][ T3556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.703206][ T3583] usb 6-1: Using ep0 maxpacket: 8 [ 703.763933][ T3556] usb 2-1: config 0 descriptor?? [ 703.823409][ T3583] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 703.833048][ T3583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.859215][ T3583] usb 6-1: config 0 descriptor?? [ 703.914363][ T3583] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 704.067572][ T3556] udlfb 2-1:0.0: vendor descriptor not available (-71) [ 704.092702][ T3556] usb 2-1: Read EDID byte 0 failed: -71 [ 704.116055][ T3556] usb 2-1: Read EDID byte 0 failed: -71 [ 704.133511][ T3556] usb 2-1: Read EDID byte 0 failed: -71 [ 704.139272][ T3556] usb 2-1: Unable to get valid EDID from device/display [ 704.165316][ T3556] usb 2-1: submit urb error: -2 [ 704.179922][ T3556] udlfb: probe of 2-1:0.0 failed with error -2 [ 704.242625][ T3556] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 704.251236][ T3556] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 704.274533][ T3556] [drm:udl_init] *ERROR* Selecting channel failed [ 704.293279][ T3556] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 704.301005][ T3556] [drm] Initialized udl on minor 2 [ 704.328403][ T3556] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 704.337724][ T3556] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 704.354553][ T3556] usb 2-1: USB disconnect, device number 7 [ 704.632705][ T3583] gspca_zc3xx: reg_w_i err -110 [ 705.262470][ T3583] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 705.268950][ T3583] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:11:46 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 00:11:46 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000000, 0x4a, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000020000001e10661ccba846619d3d509c42fd7aa100000000", 0x80, 0x400}, {&(0x7f0000010100)="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"/288, 0x120, 0x860}, {&(0x7f0000010300)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xa80}, {&(0x7f0000010400)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0xb80}, {&(0x7f0000010500)="000000007a0100"/32, 0x20, 0xc80}, {&(0x7f0000010600)="00000000000100"/32, 0x20, 0xec0}, {&(0x7f0000010700)="1020f5f201000b0009000000030000000c0000000900000002000000010000000000000000400000000000000b0000001e0000000200000002000000020000000200000016000000000400000004000000080000000c000000100000001400000300000001000000020000001e10661ccba846619d3d509c42fd7aa100000000", 0x80, 0x1400}, {&(0x7f0000010800)="000000000000000000000000000000000000000000000000000000001c0000006a706700000000006769660000000000706e670000000000617669000000000064697678000000006d703400000000006d703300000000003367700000000000776d760000000000776d6100000000006d706567000000006d6b7600000000006d6f76000000000061737800000000006173660000000000776d78000000000073766900000000007776780000000000776d0000000000006d706700000000006d70650000000000726d0000000000006f676700000000006a70656700000000766964656f00000061706b0000000000736f000000000000636f6c6400000000646200"/288, 0x120, 0x1860}, {&(0x7f0000010a00)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1a80}, {&(0x7f0000010b00)='\x00\x00\x00\x00Linux version 5.7.10-1rodete2-amd64 (glinux-team@google.com) (gcc version 9.3.0 (Debian 9.3.0-12), GNU ld (GNU Binutils for Debian) 2.34) #1 SMP Debian 5.7.10-1rodete2 (2020-08-12 > 2018)\x00', 0xc0, 0x1b80}, {&(0x7f0000010c00)="000000007a0100"/32, 0x20, 0x1c80}, {&(0x7f0000010d00)="00000000000100"/32, 0x20, 0x1ec0}, {&(0x7f0000010e00)="71f4ab0c0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x400000}, {&(0x7f0000010f00)="00000000000000000000000000000000000000000000000000000000ebebdeb80000030000000003000000002000"/64, 0x40, 0x400fe0}, {&(0x7f0000011000)="00000000000000000000000000000000000000000000000000000006000000000004007800"/64, 0x40, 0x4011e0}, {&(0x7f0000011100)="000000000000000000000002000000000400"/32, 0x20, 0x401240}, {&(0x7f0000011200)="0000000000000000000000000000000000000000000000000004000000000800", 0x20, 0x401280}, {&(0x7f0000011300)="0000000000000006000000020c6000"/32, 0x20, 0x4012e0}, {&(0x7f0000011400)="000000000000000000000000000000000000000000080000000510ec00000000", 0x20, 0x401320}, {&(0x7f0000011500)="0000000a000000001400"/32, 0x20, 0x401380}, {&(0x7f0000011600)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x4013e0}, {&(0x7f0000011700)="03000000000000030000000000000400"/32, 0x20, 0x402000}, {&(0x7f0000011800)='\x00\x00T\x00'/32, 0x20, 0x402e00}, {&(0x7f0000011900)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x402fe0}, {&(0x7f0000011a00)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x403fe0}, {&(0x7f0000011b00)="000000000000000000000000000000000000000000000000000000010000000071f4ab0c0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x404fe0}, {&(0x7f0000011c00)="00000000000000000000000000000000000000000000000000000000ebebdeb8", 0x20, 0x405fe0}, {&(0x7f0000011d00)="71f4ab0cebebdeb800"/32, 0x20, 0x5ff000}, {&(0x7f0000011e00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x5ff040}, {&(0x7f0000011f00)="72f4ab0c0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/192, 0xc0, 0x600000}, {&(0x7f0000012000)="00000000000000000000000000000000000000000000000000000000c910db8c0000030000000003000000002000"/64, 0x40, 0x600fe0}, {&(0x7f0000012100)="00000000000000000000000000000000000000000000000000000006000000000004007800"/64, 0x40, 0x6011e0}, {&(0x7f0000012200)="000000000000000000000002000000000400"/32, 0x20, 0x601240}, {&(0x7f0000012300)="0000000000000000000000000000000000000000000000000004000000000800", 0x20, 0x601280}, {&(0x7f0000012400)="0000000000000006000000020c6000"/32, 0x20, 0x6012e0}, {&(0x7f0000012500)="000000000000000000000000000000000000000000080000000510ec00000000", 0x20, 0x601320}, {&(0x7f0000012600)="0000000a000000001400"/32, 0x20, 0x601380}, {&(0x7f0000012700)="00000000000000000000000000000000000000000000030000000000000300000000000008000000000000080000000001000800000000020000000000000000", 0x40, 0x6013e0}, {&(0x7f0000012800)="03000000000000030000000000000400"/32, 0x20, 0x602000}, {&(0x7f0000012900)='\x00\x00p\x00'/32, 0x20, 0x602e00}, {&(0x7f0000012a00)="000000000000000000000000000000000000000000000000000000010000000005000000000000060000000000000700000000000008000000000000090000000000000800"/96, 0x60, 0x602fe0}, {&(0x7f0000012b00)="0000000000000000000000000000000000000000000000000000000100000000", 0x20, 0x603fe0}, {&(0x7f0000012c00)="000000000000000000000000000000000000000000000000000000010000000072f4ab0c0000000000020000000000000b0000000000000015000000150000001000000006000000080000000a000000ffffffffffffffffffffffffffffffffffffffff03000600000000000000000000000000000000000200000004000000ffffffffffffffffffffffffffffffffffffffff05000000000000000000000000000000c5000000060000000100000007000000070000000a0000004000000040000000fc0f00"/224, 0xe0, 0x604fe0}, {&(0x7f0000012d00)="00000000000000000000000000000000000000000000000000000000c910db8c", 0x20, 0x605fe0}, {&(0x7f0000012e00)="72f4ab0cc910db8c00"/32, 0x20, 0x7ff000}, {&(0x7f0000012f00)="0000000000000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/96, 0x60, 0x7ff040}, {&(0x7f0000013000)="000000000000000000000100000001000000000200000001000000000300000001200000000400000002200000000500000000240000000600000001240000000700000002240000000800000005240000000900000004240000000000000000", 0x60, 0xc00000}, {&(0x7f0000013100)="000000000000000000000100000001000000000200000001000000000300000001200000000400000002200000000500000000240000000600000001240000000700000002240000000800000003240000000900000004240000000000000000", 0x60, 0xe00000}, {&(0x7f0000013200)="0300000000000000000000000000000000000000000000000000000000000000000003000000010002000000000300000002000200"/64, 0x40, 0x1400000}, {&(0x7f0000013300)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00', 0x20, 0x1400940}, {&(0x7f0000013400)="ff0000000000000000000000000000000000000000000000000000000000000000000300000001000200000000030000000200024a8113ed040000000500028dcece4507000000050001baeed06f0800000005000153bfc55008000000050001120052230900000009000100"/128, 0x80, 0x1401000}, {&(0x7f0000013500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00\x00\x00file2\x00\x00\x00file3\x00\x00\x00file.cold\x00'/96, 0x60, 0x1401940}, {&(0x7f0000013600)="ed4100205cf90100535f0100020000000010000000000000020000000000000013bc645f0000000013bc645f0000000013bc645f00000000000000000000000000000000000000000100"/96, 0x60, 0x2000000}, {&(0x7f0000013700)="00000000000000001800000000000000375f5d2a13bc645f0000000000000000001400"/64, 0x40, 0x2000160}, {&(0x7f0000013800)="0000000000000000030000000300000000000000010000000000000001200000ed4100205cf90100535f0100030000000010000000000000020000000000000013bc645f0000000014bc645f0000000014bc645f0000000000000000cf476117cf476117000000000100"/128, 0x80, 0x2000fe0}, {&(0x7f0000013900)="000000000000000018000000000000004940d0b113bc645f0000000000000000011400"/64, 0x40, 0x2001160}, {&(0x7f0000013a00)="00000000000000000300000003000000000000006ff4ab0c0000000002200000ed4100250000000000000000020000007c0d000000000000010000000000000014bc645f0000000014bc645f0000000014bc645f00000000cf476117cf476117cf47611793aff432000000000000000000100000030000000500000066696c653000"/160, 0xa0, 0x2001fe0}, {&(0x7f0000013b00)="000000000000000024003200000000006bad695d14bc645f00000000cf476117000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000400000001000200000000030000000200024a8113ed050000000500018dcece450600000005000700000000", 0x80, 0x2002160}, {&(0x7f0000013c00)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00..\x00\x00\x00\x00\x00\x00file0\x00\x00\x00file1\x00'/64, 0x40, 0x2002960}, {&(0x7f0000013d00)="00000000000000000400000004000000000000006ff4ab0c0000000003200000", 0x20, 0x2002fe0}, {&(0x7f0000013e00)="ed81002b0000000000000000010000001a04000000000000010000000000000014bc645f0000000014bc645f0000000014bc645f00000000cf476117cf476117cf476117309af772000000000000000000000000040000000500000066696c653000"/128, 0x80, 0x2400000}, {&(0x7f0000013f00)="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"/1120, 0x460, 0x2400160}, {&(0x7f0000014400)="00000000000000000500000005000000010000006ff4ab0c0000000001240000ffa1002b0000000000000000010000002600000000000000010000000000000014bc645f0000000014bc645f0000000014bc645f00000000cf476117cf476117cf476117d36ad0d8000000000000000000000000040000000500000066696c653100"/160, 0xa0, 0x2400fe0}, {&(0x7f0000014500)="0000000000000000240032000000000055a5fc2814bc645f00000000cf476117000000000000000000000000000000002f746d702f73797a2d696d61676567656e3031363833303835342f66696c65302f66696c653000"/96, 0x60, 0x2401160}, {&(0x7f0000014600)="00000000000000000600000006000000010000006ff4ab0c0000000002240000ed81002b0000000000000000010000000a00000000000000010000000000000014bc645f0000000014bc645f0000000014bc645f00000000cf476117cf476117cf47611765f0b75c000000000000000000000000030000000500000066696c653100"/160, 0xa0, 0x2401fe0}, {&(0x7f0000014700)="00000000000000002400320000000000664d220114bc645f00000000cf4761170000000000000000000000000000000073797a6b616c6c657273000000000000", 0x40, 0x2402160}, {&(0x7f0000014800)="0000000000000000000000001120f5f20100000000000000000000000000000000000000010606007861747472317861747472310106060078617474723278617474723200"/96, 0x60, 0x2402f00}, {&(0x7f0000014900)="00000000000000000700000007000000010000006ff4ab0c0000000003240000ed8102210000000000000000020000002823000000000000040000000000000014bc645f0000000014bc645f0000000014bc645f00000000cf476117cf476117cf476117494eae27000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x2402fe0}, {&(0x7f0000014a00)="00000000000000002400320000000000cb82eba914bc645f00000000cf476117000000000000000000000000ffffffffffffffffffffffff0000000000000000", 0x40, 0x2403160}, {&(0x7f0000014b00)="00000000000000000800000008000000010000006ff4ab0c0000000004240000ed81012b0000000000000000010000006400000000000000010000000000000014bc645f0000000014bc645f0000000014bc645f00000000cf476117cf476117cf4761175ca2112c000000000000000000000000030000000900000066696c652e636f6c6400"/160, 0xa0, 0x2403fe0}, {&(0x7f0000014c00)="000000000000000024003200000000009b14f89614bc645f00000000cf4761170000000000000000000000000000000073797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c657273797a6b616c6c65727300"/160, 0xa0, 0x2404160}, {&(0x7f0000014d00)="00000000000000000900000009000000010000006ff4ab0c0000000005240000ed8102210000000000000000020000002823000000000000040000000000000014bc645f0000000014bc645f0000000014bc645f00000000cf476117cf476117cf476117494eae27000000000000000000000000030000000500000066696c653300"/160, 0xa0, 0x2404fe0}, {&(0x7f0000014e00)="0214000003000000240032000000000061ca745514bc645f00000000cf4761170000000000000000000000000214000003140000041400"/64, 0x40, 0x2405160}, {&(0x7f0000014f00)="000000000000000008000000080000000100000070f4ab0c098680ca06240000", 0x20, 0x2405fe0}], 0x0, &(0x7f0000015000)) 00:11:46 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) 00:11:46 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000740)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @remote}}]}, 0x110) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000740)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0x1, [{{0x2, 0x0, @remote}}]}, 0x110) 00:11:46 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0x2, 0x0) msgget$private(0x0, 0x0) msgget(0x0, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/32) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000040)=""/3) 00:11:46 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x7, 0x5c, 0x71, 0x40, 0x17e9, 0x5c01, 0x2f47, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) [ 706.446953][ T3562] usb 6-1: USB disconnect, device number 11 00:11:46 executing program 4: syz_usb_connect$cdc_ecm(0x0, 0x54, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@dmm={0x7}]}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 00:11:46 executing program 0: syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) pipe(0x0) 00:11:46 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x11, @rand_addr, 0x0, 0x0, 'lblc\x00'}, 0x2c) 00:11:46 executing program 2: syz_usb_connect$cdc_ecm(0x0, 0x54, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x42, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@dmm={0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x0, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 706.852562][ T26] usb 2-1: new high-speed USB device number 8 using dummy_hcd 00:11:46 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="00400000f41f00000b2000000a000000000000000020000000040000f1303525840300001e000000000000000020cc070200010052654973457232467300000003000000020001000200000000000000010000001231231212331233123112341341241273797a6b616c6c65720000000000000001001e003cc1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="000000000000000000000000010000000300"/32, 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0f00"/1056, 0x420, 0x12000}, {&(0x7f0000010700)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1800, 0x12800}, {&(0x7f0000011f00)="0000000000000000000000000a000000000000000020000000040000f1303525840300001e00"/64, 0x40, 0x4014000}, {&(0x7f0000012000)="010002005c1f0000000000000000000000000000000000000100000002000000000000000000000000002c00d41f0100010000000200000001000000f401000002003000a41f00"/96, 0x60, 0x4016000}, {&(0x7f0000012100)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed4100000300000030000000000000005cf90100535f01003cc1655f3cc1655f3cc1655f0100000000000000", 0x60, 0x4017fa0}], 0x0, &(0x7f0000012200)) [ 707.024636][T14257] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 707.031326][T14257] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 707.039929][T14257] vhci_hcd vhci_hcd.0: Device attached [ 707.142992][ T116] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 707.157578][T14259] vhci_hcd: connection closed [ 707.171724][ T988] vhci_hcd: stop threads [ 707.181277][ T988] vhci_hcd: release socket [ 707.185967][ T988] vhci_hcd: disconnect device [ 707.203794][ T3562] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 707.213309][ T26] usb 2-1: New USB device found, idVendor=17e9, idProduct=5c01, bcdDevice=2f.47 [ 707.222957][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.242090][ T26] usb 2-1: config 0 descriptor?? [ 707.269292][T14264] loop3: detected capacity change from 0 to 262527 [ 707.313418][T14264] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 16, size 4096) [ 707.327420][T14264] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 [ 707.382672][ T116] usb 6-1: Using ep0 maxpacket: 8 00:11:47 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x10}}}}}]}}]}}, 0x0) [ 707.414505][ T3583] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 707.503523][ T116] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 707.513212][ T116] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.526838][ T116] usb 6-1: config 0 descriptor?? [ 707.543078][ T26] udlfb 2-1:0.0: vendor descriptor not available (-71) [ 707.563017][ T26] usb 2-1: Read EDID byte 0 failed: -71 [ 707.581747][ T116] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 707.596698][ T3562] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 707.610916][ T26] usb 2-1: Read EDID byte 0 failed: -71 [ 707.632715][ T26] usb 2-1: Read EDID byte 0 failed: -71 [ 707.638866][ T26] usb 2-1: Unable to get valid EDID from device/display [ 707.670287][ T26] usb 2-1: submit urb error: -2 [ 707.686801][ T26] udlfb: probe of 2-1:0.0 failed with error -2 [ 707.763125][ T26] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 707.771774][ T26] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 707.794151][ T26] [drm:udl_init] *ERROR* Selecting channel failed [ 707.843647][ T26] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 707.850583][ T3583] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 707.851269][ T26] [drm] Initialized udl on minor 2 [ 707.853032][ T3562] usb 5-1: string descriptor 0 read error: -22 [ 707.876512][ T3562] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.886034][ T3562] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.904764][ T26] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 707.914386][ T26] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 707.961988][ T26] usb 2-1: USB disconnect, device number 8 [ 708.017519][T14254] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 708.034838][ T3556] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 708.055880][ T3562] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 708.153135][ T3583] usb 3-1: string descriptor 0 read error: -22 [ 708.159789][ T3583] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 708.169223][ T3583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.261020][ T26] usb 5-1: USB disconnect, device number 10 [ 708.303162][ T116] gspca_zc3xx: reg_w_i err -110 [ 708.323155][T14261] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 708.335515][ T3583] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 708.453078][ T3556] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 708.577257][ T3583] usb 3-1: USB disconnect, device number 11 [ 708.623072][ T3556] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 708.632859][ T3556] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.640998][ T3556] usb 4-1: Product: syz [ 708.645426][ T3556] usb 4-1: Manufacturer: syz [ 708.650141][ T3556] usb 4-1: SerialNumber: syz [ 708.684031][T14267] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 708.705487][ T3556] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 708.919512][ T26] usb 4-1: USB disconnect, device number 6 [ 708.929283][ T116] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 708.935972][ T116] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:11:49 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 00:11:49 executing program 0: syz_usbip_server_init(0x0) ioctl$SOUND_MIXER_READ_RECMASK(0xffffffffffffffff, 0x80044dfd, &(0x7f0000000180)) pipe(&(0x7f00000003c0)) 00:11:49 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x17, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x1c) 00:11:49 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x2000}) 00:11:49 executing program 2: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, 0x0, 0x700) 00:11:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000005a000103"], 0x18}}, 0x0) [ 709.817541][ T3583] usb 6-1: USB disconnect, device number 12 [ 709.902723][T14273] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 00:11:49 executing program 1: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1}) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x0, 0x5, [@broadcast, @remote, @multicast, @remote, @random="2d365b849061"]}) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000080)={'veth1_to_bridge\x00'}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/dev_snmp6\x00') ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x6, 0x8, 0x1, 0x6, 0x6, 0x2, 0x8, 0x81, 0x2, 0x7, 0x1f, 0x43, 0x5, 0x0, 0x9, 0x1}}) socket$inet(0x2, 0xa, 0x4) 00:11:49 executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000580), 0x0, &(0x7f0000000800)={[{@hide}]}) 00:11:49 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x1c3002) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$evdev(r0, &(0x7f0000000040), 0xbb8) 00:11:49 executing program 4: perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x3f}, 0x0, 0x9, 0x401, 0x7, 0x0, 0x75, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdir(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="06ae44a0f8ef13"], &(0x7f0000000500)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff00f}], 0x5, 0x0, 0xa000000) 00:11:50 executing program 1: r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000000080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="02000000030000000400000030000f", 0xf, 0x1000}, {&(0x7f0000010500)="ffff000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000000100000dbf4655fdcf4655fdcf4655f000000000000040008", 0x1d, 0x4200}], 0x0, &(0x7f0000000300)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00') getdents(r0, &(0x7f0000000340)=""/65, 0x41) connect$inet(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) [ 710.452478][ T26] usb 6-1: new high-speed USB device number 13 using dummy_hcd 00:11:50 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000640)={0x0, 0x1, {0xffffffffffffffff, @usage, 0x0, 0x7, 0x3, 0x8, 0x0, 0xfffffffffffffffe, 0x56, @struct={0x1}, 0x0, 0x0, [0x3, 0x9, 0xb01, 0x10000, 0x100]}, {0x6, @usage, 0x0, 0xdf9, 0x1, 0x9, 0x0, 0x0, 0x0, @struct={0x80000001, 0x2}, 0x0, 0x0, [0x9, 0x4, 0x10000, 0x0, 0x401]}, {0x1, @struct={0xffff}, 0x0, 0xffffffffffffff81, 0x0, 0x5, 0x7fffffff, 0x0, 0x0, @struct={0xd}, 0x20c0, 0x3f, [0x0, 0xfffffffffffffff8, 0x6, 0x20000000000000, 0xffffffffff7f713d]}, {0x7fff, 0x4, 0x2}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000580)={0x4, 0x0, {0x0, @struct={0x32, 0xffffffd6}, 0x0, 0x3, 0x1, 0x4, 0x90, 0x0, 0xa, @struct={0x2, 0x4}, 0x0, 0x6, [0x9, 0x7, 0x7, 0x40, 0x8, 0x4]}, {0x0, @struct={0xffff}, 0x0, 0x5, 0x0, 0x2, 0x40, 0x0, 0x4da, @struct={0x1c0000, 0xf957}, 0x2, 0x9, [0xdfee, 0x0, 0xfffffffffffff800, 0x6eac, 0xf02, 0x8001]}, {0x8000, @struct={0x8}, 0x0, 0x0, 0x64e, 0x200, 0x4, 0x1, 0x440, @usage=0x2, 0xff, 0x1f, [0x7, 0x2, 0x5, 0x8a2, 0x7, 0x2]}, {0x1800000000000, 0x9, 0x3}}) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4188aec6, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x100000, 0x0, 0x30f, 0x0, 0x0, [{0x0, 0x8, 0x0, '\x00', 0x8}, {0x40}, {0x3f, 0x3, 0x0, '\x00', 0x81}, {0x0, 0x3f}, {0x0, 0x6, 0x8}, {0xd8, 0x64, 0x0, '\x00', 0x7}, {0x5, 0x1f, 0x40}, {0x0, 0x40, 0x81}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xac}, {0x7, 0x5, 0x0, '\x00', 0xb5}, {0x1, 0x81, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x81, '\x00', 0x6c}, {}, {0x1c, 0x6, 0x81}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x3f}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0xfe}, {0xfb, 0x3, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x4}, {0x20, 0x5}, {0x9, 0x2, 0x1f}, {0x0, 0x7f, 0x3f, '\x00', 0x8}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 710.657371][T14288] ISOFS: Unable to identify CD-ROM format. [ 710.693048][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 710.833481][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 710.843109][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.914286][ T26] usb 6-1: config 0 descriptor?? [ 710.963685][ T26] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 711.702629][ T26] gspca_zc3xx: reg_w_i err -110 [ 712.322425][ T26] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 712.328924][ T26] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:11:52 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 00:11:52 executing program 0: r0 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) 00:11:52 executing program 4: perf_event_open(&(0x7f0000000540)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0x3f}, 0x0, 0x9, 0x401, 0x7, 0x0, 0x75, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x1) mkdir(0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="06ae44a0f8ef13"], &(0x7f0000000500)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff00f}], 0x5, 0x0, 0xa000000) 00:11:52 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x80000001}, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @dev, 0x1}], 0x2c) 00:11:52 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, 0x0) syz_open_dev$evdev(&(0x7f0000001400), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001700), 0x0, 0xd0800) 00:11:52 executing program 2: pipe(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000640)={0x0, 0x1, {0xffffffffffffffff, @usage, 0x0, 0x7, 0x3, 0x8, 0x0, 0xfffffffffffffffe, 0x56, @struct={0x1}, 0x0, 0x0, [0x3, 0x9, 0xb01, 0x10000, 0x100]}, {0x6, @usage, 0x0, 0xdf9, 0x1, 0x9, 0x0, 0x0, 0x0, @struct={0x80000001, 0x2}, 0x0, 0x0, [0x9, 0x4, 0x10000, 0x0, 0x401]}, {0x1, @struct={0xffff}, 0x0, 0xffffffffffffff81, 0x0, 0x5, 0x7fffffff, 0x0, 0x0, @struct={0xd}, 0x20c0, 0x3f, [0x0, 0xfffffffffffffff8, 0x6, 0x20000000000000, 0xffffffffff7f713d]}, {0x7fff, 0x4, 0x2}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000580)={0x4, 0x0, {0x0, @struct={0x32, 0xffffffd6}, 0x0, 0x3, 0x1, 0x4, 0x90, 0x0, 0xa, @struct={0x2, 0x4}, 0x0, 0x6, [0x9, 0x7, 0x7, 0x40, 0x8, 0x4]}, {0x0, @struct={0xffff}, 0x0, 0x5, 0x0, 0x2, 0x40, 0x0, 0x4da, @struct={0x1c0000, 0xf957}, 0x2, 0x9, [0xdfee, 0x0, 0xfffffffffffff800, 0x6eac, 0xf02, 0x8001]}, {0x8000, @struct={0x8}, 0x0, 0x0, 0x64e, 0x200, 0x4, 0x1, 0x440, @usage=0x2, 0xff, 0x1f, [0x7, 0x2, 0x5, 0x8a2, 0x7, 0x2]}, {0x1800000000000, 0x9, 0x3}}) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) open(0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4188aec6, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x100000, 0x0, 0x30f, 0x0, 0x0, [{0x0, 0x8, 0x0, '\x00', 0x8}, {0x40}, {0x3f, 0x3, 0x0, '\x00', 0x81}, {0x0, 0x3f}, {0x0, 0x6, 0x8}, {0xd8, 0x64, 0x0, '\x00', 0x7}, {0x5, 0x1f, 0x40}, {0x0, 0x40, 0x81}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0xac}, {0x7, 0x5, 0x0, '\x00', 0xb5}, {0x1, 0x81, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x81, '\x00', 0x6c}, {}, {0x1c, 0x6, 0x81}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x3f}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0xfe}, {0xfb, 0x3, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x4}, {0x20, 0x5}, {0x9, 0x2, 0x1f}, {0x0, 0x7f, 0x3f, '\x00', 0x8}]}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 713.129498][ T3583] usb 6-1: USB disconnect, device number 13 00:11:53 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000640)={0x3, 0x200, 0xcb1c007, 0x7, 0x80e34, 0x4}) 00:11:53 executing program 0: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @cond=[{}, {0x0, 0xaca1}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000080)) write$char_usb(r0, &(0x7f0000000040)="e2", 0x35000) 00:11:53 executing program 4: r0 = syz_open_dev$hidraw(0xffffffffffffffff, 0x0, 0x8262) r1 = syz_open_dev$hidraw(0xffffffffffffffff, 0x6000000000000000, 0x10bf62) write$hidraw(r1, &(0x7f0000000000)="44c0f49952ffee802a6334c1dc02b36ebb34f9fe69346eef3d5d6d76b8d2b88369358f2ce7e564a1c36146376d15f0fd89f31cd5c4ee768332b3026569fc2b2ab8cfbfabc7a3387e8e3f51949da7a76d70a47d61701d3ae482c8bea64a0dd73cf5fd5994f42813471bc41cb1a70d0369010cb1276595873d7dc777654a787c062a615f9acb826a390434de36c942cc9d5e639d3c25cbf3de841a31b2a6f0914c98ffb219080d1ed01f2bc2ec74c3634032afc2e37816130582b74554984c7cd8bece7fe269e2f6922349b14cea9331c3bf140ab8d6ef76f7a7521a09788779211faab23160f6cd3bf1f60cc018aa1667bb9751e2032bec608a62330d7b20f024c4444f6744028efa407cf24a5d88cb5ee5770ade7610a4b7c9169614fdd7c703c603d2ec04921ac203fba7b2372acafdc33dbdda972fa7fdc8825c5511e8d52328688097ff3f7d1788995571700db2d76712cf06c8b42e3006b302f686c7f94a958ffa68f90225bacd9a2a7ce6df2b474f77db88b05050ce7d5e5b82dc11dc39c3d0534fd56dfa5b2a20d510195f3e4304de5883a7ba1f80b2487276105a82dc2371edbfad94d518fdf74e05f33ca361ca3b2e75a640ac3412f1b3ed909293f96abe6bf0b19207844be8a509f190dbda564bc15e175c3b904a4be42baed8a5a7ea753efa9614a5e5850dd226c92e9a64b34d42df9d1fd1ab5a58504f4d230da6", 0x800000) write$hidraw(0xffffffffffffffff, &(0x7f0000000140), 0x0) write$hidraw(r0, 0x0, 0x0) read$hidraw(r0, &(0x7f0000001340)=""/4096, 0x20002340) write$hidraw(r1, 0x0, 0x0) write$hidraw(r1, &(0x7f00000005c0)="966d92d3371ba913fc888ddb19780f3a793e1d09abfb6ae345da34ff810de8d24639046880cc423cb3fb52ce005c071f024e3111ff52c4a88eaaa1832b8839e35d3d48861c59969e0cd291a34cc7aacb73930f8b5af46c1c8a051c7fad7ee5df83eece7bb7310d7ca698da5953bc7900660716021b3efceba0198e574060e6496a3bd3cb780e46c82fdffda7be0657ff41f270dc372a0ac10df89c6ac1d88c3ccca695023f9231df5e46e360211d", 0xae) r2 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x641) write$hidraw(r2, &(0x7f0000000000)='4', 0x20000001) syz_open_dev$hidraw(&(0x7f0000000300), 0xb6b, 0x189c40) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000580)) write$hidraw(0xffffffffffffffff, 0x0, 0x0) read$hidraw(0xffffffffffffffff, &(0x7f0000003b40)=""/4109, 0x100d) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000440)) syz_open_dev$hidraw(&(0x7f0000000780), 0x0, 0x109000) write$hidraw(0xffffffffffffffff, &(0x7f0000002f40)="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", 0xbe8) [ 713.802763][ T26] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 714.062582][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 714.122601][ T116] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 714.193476][ T26] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 714.203201][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:11:54 executing program 3: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xab, 0x9f, 0xd5, 0x40, 0x1d50, 0x606f, 0x4400, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd9, 0xf4, 0x96}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1, "ea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 714.237708][ T26] usb 6-1: config 0 descriptor?? [ 714.313231][ T26] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa 00:11:54 executing program 2: syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) [ 714.533547][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.544975][ T116] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.555552][ T116] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 714.568812][ T116] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 714.578145][ T116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:11:54 executing program 0: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 714.681125][ T116] usb 2-1: config 0 descriptor?? [ 714.762474][ T3562] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 715.053379][ T26] gspca_zc3xx: reg_w_i err -110 [ 715.163384][ T3562] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=44.00 [ 715.172843][ T3562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.202920][ T3583] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 715.222042][ T3562] usb 4-1: config 0 descriptor?? [ 715.392692][ T3583] usb 1-1: device descriptor read/64, error 18 [ 715.443067][ T116] usbhid 2-1:0.0: can't add hid device: -71 [ 715.449428][ T116] usbhid: probe of 2-1:0.0 failed with error -71 [ 715.474147][ T116] usb 2-1: USB disconnect, device number 9 [ 715.662812][ T3583] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 715.673412][ T26] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 715.679980][ T26] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 [ 715.722767][ T3562] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 715.852630][ T3583] usb 1-1: device descriptor read/64, error 18 [ 715.975040][ T3583] usb usb1-port1: attempt power cycle [ 716.150879][ T3562] usb 4-1: USB disconnect, device number 7 [ 716.392662][ T3583] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 716.483368][ T3583] usb 1-1: Invalid ep0 maxpacket: 0 00:11:56 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:11:56 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) getpgrp(0x0) sendmsg$unix(r0, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x801) 00:11:56 executing program 1: r0 = msgget(0x3, 0x0) msgctl$MSG_INFO(r0, 0xc, &(0x7f0000000040)=""/229) 00:11:56 executing program 4: chroot(&(0x7f0000000b40)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005ec0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="100107"], 0x10) [ 716.526610][ T3562] usb 6-1: USB disconnect, device number 14 [ 716.652466][ T3583] usb 1-1: new high-speed USB device number 7 using dummy_hcd 00:11:56 executing program 3: msgget$private(0x0, 0x80) r0 = msgget$private(0x0, 0x68c) msgsnd(r0, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], 0x1008, 0x800) r1 = msgget(0x0, 0x302) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/23) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTATu(r2, &(0x7f00000027c0)={0x6d, 0x7d, 0x0, {{0x0, 0x50, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3, '@:@', 0x8, 'batadv0\x00', 0xa, 'L.-+,)*-#\'', 0x8, 'batadv0\x00'}, 0x8, 'batadv0\x00', 0xee01}}, 0x6d) pipe2$9p(&(0x7f0000002600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RSTATu(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d0000007d0000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000300403a40080062617461647630000a004c2e2d2b2c292a2d232708006261746164763000080062617461647630007dbe7a3bee72963c51dd9ee0d4bcb32db001b5f0f79b1fb55f26bf3c6466fcdaf1644564b53a2baeaec2d7ecdffd602177c0a991bb632837554ab0d92fea885dad", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32=0x0], 0x6d) write$P9_RREADLINK(r3, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$P9_RXATTRCREATE(r2, &(0x7f0000000000)={0x7, 0x21, 0x1}, 0x7) [ 716.773117][ T3583] usb 1-1: Invalid ep0 maxpacket: 0 [ 716.781610][ T3583] usb usb1-port1: unable to enumerate USB device 00:11:56 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000240)=0x10000004, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x80, 0x4) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) fchdir(r0) pwritev(r2, &(0x7f0000000280)=[{&(0x7f0000001080)="86", 0x1}, {&(0x7f0000000800)="3d95f27d6c00571526fdca65dea3a87cfca06734db8cf8cfdeebac945c9f397b2d28346b87aee2ae40b1cb0455f83f41427de7d951fa3bff3966d8aeb9279c00be77d4ee5d8e5cced91a57fcfc3d6b711ed265cce436292b0febbe80a9537ff3fc0a6d8c881103e65629c09d9f1e03c5687a3afb998ef7d285125ee81ec23a0cfd8bc49dff8714130dc9cf14e53483c4a1cbcf3f8e4dfa755490c3773af85c18cedf", 0xa2}], 0x2, 0x0, 0x0) dup2(r1, 0xffffffffffffffff) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000100)=""/60, &(0x7f0000000140)=0x3c) 00:11:56 executing program 1: socketpair(0xf, 0x0, 0x0, &(0x7f0000000040)) 00:11:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0xbf6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x900) [ 717.154141][T14351] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 00:11:56 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl(r0, 0x800000000000937e, &(0x7f00000003c0)="0100000000000000180100000508000300000000000000002fe63f596f10f6424dd13f97b3d25ad7e94dce9947a17d6de9766def174c3e3843eba0edb30203f6b0578ffd3193465af44e97a06f3f10cb18a2a028cab95d0312212d6728a0485d69eb6c5607062ca7b6491f5e42d3c12996c401fa742c01c60c1918944aff21d7aab8ba2f40d4c87eb210cf914f3592f2b4c4f09ced6c6f881f3a71d7a442eba630c49c32da4fbde36ff48a92100b5e855c02b16a16b0d62ef4e81cd7bea6ebd436ff14c342a0dd871c426ff7ecf984a98185da22fd3dd338a5b8b23db032a923614ed3da351273b09e8d674379412b712401a87bb50d22c8e0ae49017d7672555105f9ca240fc4fc56453f4de0747c8ed0d11440b813367c") [ 717.212656][ T3583] usb 6-1: new high-speed USB device number 15 using dummy_hcd 00:11:57 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x13, 0x31, 0x53b, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) [ 717.452819][ T3583] usb 6-1: Using ep0 maxpacket: 8 [ 717.499673][T14364] autofs4:pid:14364:validate_dev_ioctl: path string terminator missing for cmd(0x0000937e) [ 717.583703][ T3583] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 717.593242][ T3583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.644801][ T3583] usb 6-1: config 0 descriptor?? 00:11:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0xbf6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x900) [ 717.690324][ T3583] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa 00:11:57 executing program 0: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000080), 0x0) [ 718.425114][ T3583] gspca_zc3xx: reg_w_i err -110 [ 719.042455][ T3583] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 719.048952][ T3583] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:11:59 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:11:59 executing program 1: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000080)={0x28}, 0x28) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18}, 0x18) 00:11:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cubic\x00', 0x6) sendto$inet6(r0, &(0x7f0000000080)='D', 0xfffff, 0x0, 0x0, 0x0) 00:11:59 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x2, @thr={0x0, 0x0}}) 00:11:59 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x9, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @dev}, @nl=@unspec}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00', {}, 0x3}) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3}, 0x100) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30) 00:11:59 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0xbf6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x900) [ 719.871331][ T3583] usb 6-1: USB disconnect, device number 15 00:11:59 executing program 2: capget(0x0, &(0x7f00000006c0)) 00:11:59 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000640)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) creat(&(0x7f0000000440)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) lsetxattr$security_capability(&(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), &(0x7f0000000680)=@v2, 0x14, 0x0) chown(&(0x7f0000000480)='./bus/file0\x00', 0x0, 0x0) 00:11:59 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000280)="b9ab22f7", 0x4) 00:12:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000005c0)=0x80000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000200)=0xbf6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x900) 00:12:00 executing program 2: r0 = fsopen(&(0x7f0000000180)='pstore\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) [ 720.542429][ T3562] usb 6-1: new high-speed USB device number 16 using dummy_hcd 00:12:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{@in=@empty}, 0x0, @in6=@private1}}, 0xe8) [ 720.794918][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 720.898062][T14425] overlayfs: './file0' not a directory [ 720.913427][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 720.922881][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.979414][ T3562] usb 6-1: config 0 descriptor?? [ 721.030617][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 721.752615][ T3562] gspca_zc3xx: reg_w_i err -110 [ 722.372451][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 722.378965][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:12:02 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x9, 0x0, 0x0, "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030cf00"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @private}, @l2tp={0x2, 0x0, @dev}, @nl=@unspec}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'veth1_to_bridge\x00', {}, 0x3}) sendto$inet(r0, 0x0, 0x5, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080, 0x3}, 0x100) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000000200)) write$binfmt_elf64(r0, &(0x7f0000000600)=ANY=[], 0xfc30) 00:12:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/raw6\x00') read$eventfd(r0, &(0x7f0000000040), 0xfffffc96) 00:12:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000380)={'raw\x00', 0x2, [{}, {}]}, 0x48) 00:12:02 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x2040, 0x0, 0x0) 00:12:02 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), 0x0) [ 723.221412][ T3562] usb 6-1: USB disconnect, device number 16 00:12:03 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 00:12:03 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) shmdt(0x0) 00:12:03 executing program 3: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) 00:12:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) 00:12:03 executing program 2: syz_mount_image$vfat(&(0x7f0000000a00), &(0x7f0000000a40)='./file0\x00', 0x0, 0x0, &(0x7f0000000fc0), 0x0, &(0x7f0000001080)) [ 723.903649][ T3562] usb 6-1: new high-speed USB device number 17 using dummy_hcd 00:12:03 executing program 4: syz_mount_image$vfat(&(0x7f0000000a00), 0x0, 0x0, 0x1, &(0x7f0000000fc0)=[{&(0x7f0000000a80)="9e", 0x1, 0x8001}], 0x0, &(0x7f0000001080)) [ 724.151841][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 724.273568][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 724.282926][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.347499][ T3562] usb 6-1: config 0 descriptor?? [ 724.400692][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 724.428810][T14463] loop4: detected capacity change from 0 to 128 [ 725.122615][ T3562] gspca_zc3xx: reg_w_i err -110 [ 725.752536][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 725.759325][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:12:06 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) 00:12:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4b4b, &(0x7f0000000180)) 00:12:06 executing program 1: syz_mount_image$ntfs(&(0x7f0000000040), &(0x7f0000000140)='./bus\x00', 0x0, 0x0, &(0x7f0000001640), 0x0, &(0x7f0000001700)={[{@gid={'gid', 0x3d, 0xffffffffffffffff}}]}) 00:12:06 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffe97, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, r1, 0x85b35f7921e1632d, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 00:12:06 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000036c0)={&(0x7f0000002240)=@l2, 0x80, 0x0}, 0x0) [ 726.587378][ T3562] usb 6-1: USB disconnect, device number 17 00:12:06 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000170000000000000000010000d50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) close(r1) 00:12:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x30, 0x48, 0x1, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @private0}]}, 0x30}}, 0x0) 00:12:06 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x8910, &(0x7f0000001980)={'ip6_vti0\x00', 0x0}) 00:12:06 executing program 4: mlockall(0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 727.252819][ T3562] usb 6-1: new high-speed USB device number 18 using dummy_hcd 00:12:07 executing program 0: syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0xc, &(0x7f0000000200)=[{&(0x7f0000010000)='\x00BEA01', 0x6, 0x8000}, {&(0x7f0000010100)='\x00NSR03', 0x6, 0x8800}, {&(0x7f0000010300)="0100030012000100cbf1f001600000000100000000000000084c696e757855444600000000000000000000000000000000000000000000090100010003000300010000000100000008313233343536373831323334353637384c696e7578554446", 0x61, 0xc000}, {&(0x7f0000010400)="0000000000000019004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000004f53544120436f6d7072657373656420556e69636f64650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e7578206d6b756466667300000000000000000004050000000000007810e4070913142c1643092d002a4c696e757820554446465300000000000000000000000405", 0xde, 0xc0c0}, {&(0x7f0000010500)="00000000000000000100000000000000000000000000000000000000000000000600030061000100fd10e8016100000002000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x7d, 0xc1e0}, {&(0x7f0000010600)="000000000000000000000000000000000000000900020000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000200002000000000000000000000004000000001000000002a4c696e757820554446465300000000000000000000000405", 0x6a, 0xc2c0}, {&(0x7f0000010700)="00000000000000000000000000000000004000008000000002400000002a554446205370617261626c6520506172746974696f6e0102040500000000010000002000020038010000a0000000e0070000000000000000000000000000000000000500030033000100cd0af001620000000500000001000000002b4e535230330000000000000000000000000000000000000000000000000000000000000000000002", 0xa2, 0xc3a0}, {&(0x7f0000010800)="0000000000000000000000000000000000000000000000000300000020050000a0020000002a4c696e757820554446465300000000000000000000000405", 0x3e, 0xc4a0}, {&(0x7f0000011100)="02000300fe0001008f77f00100010000004000006000000000400000c007", 0x1e, 0x20000}, {&(0x7f0000011300)="000103006e0001003a1ef001200000007810e4070913142c1643092d0300030001000000010000000000000000000000004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446", 0x79, 0xa8000}, {&(0x7f00000026c0)="00000000000000000000000000000009004f53544120436f6d7072657373656420556e69636f646500000000000000000000000000000000000000000000000000000000000000000000000000000000084c696e7578554446000000000000000000000000000000000000000000000908436f707972696768740000000000000000000000000000000000000000000a084162737472616374000000000000000000000000000000000000000000000900020000600000000000000000000000002a4f5354412055444620436f6d706c69616e74000000000102000000000000000000000000000000000000000000000002000040", 0xf5, 0xa80e0}, {&(0x7f0000011700)="0a010300ed000100c6e7d0016000000000000000040000000100000400000000000003000000000000000000a53c000002000000000000000801000000000000080100000000000000000000000000000010e4070913122c1643092d0010e4070913122c170936350010e4070913122c1643092d0010e4070913122c1709363501000000000000000000000000000000000000000000000000000000000000000000000000000000002a4c696e75782055444646530000000000000000000000040500000000000000000000000000000000000008010000010103008500010033d418006000000001000a0000020000600000000000000000000000000000000101030087000100e81d1c0060000000010002060002000061000000000000001000000000000866696c6530010103009e0001001ffd1c0060000000010000060002000067000000000000001300000000000866696c6531010103000900010097f01c0060000000010000060002000068000000000000001400000000000866696c65320101030028000100c3e31c0060000000010000060002000068000000000000001500000000000866696c653301010300e4000100b7a72000600000000100000a000200007b000000000000001600000000000866696c652e636f6c64", 0x1e0, 0xb0000}], 0x0, &(0x7f0000013500)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) 00:12:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) [ 727.533108][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 727.663039][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 727.672548][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.702413][ T3562] usb 6-1: config 0 descriptor?? [ 727.708738][T14489] sp0: Synchronizing with TNC [ 727.750598][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 728.472599][ T3562] gspca_zc3xx: reg_w_i err -110 [ 729.112368][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 729.118893][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:12:09 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) 00:12:09 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000001600)=""/4106, 0x100a, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000000c0)={0x2, 0x0, {0x0, 0xf530, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000040)=""/44, 0x2c, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000007c0)=""/74, 0x4a, 0x0, 0x0, 0x3}}, 0x48) 00:12:09 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) setsockopt$inet_int(r0, 0x0, 0xa, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="a4404a2ed468", @val, {@ipv4}}, 0x0) 00:12:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) 00:12:09 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x0, 0x2, 0x4faebc152e3004e5, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}]}, 0x58}}, 0x0) [ 729.942073][ T3583] usb 6-1: USB disconnect, device number 18 [ 730.085077][T14500] sp0: Synchronizing with TNC 00:12:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) 00:12:09 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @empty}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000001c0)="06", 0x1}], 0x1}}], 0x1, 0x44890) 00:12:10 executing program 0: syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x1c0}]) [ 730.573620][T11044] usb 6-1: new high-speed USB device number 19 using dummy_hcd 00:12:10 executing program 2: move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000133000/0x3000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) 00:12:10 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000036c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000003700)={{0xe5}, 'port1\x00'}) 00:12:10 executing program 0: perf_event_open(&(0x7f0000001f80)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x47) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) [ 730.852563][T11044] usb 6-1: Using ep0 maxpacket: 8 [ 730.973412][T11044] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 730.973546][T11044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.978650][T11044] usb 6-1: config 0 descriptor?? [ 731.019978][T11044] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 732.382963][T11044] gspca_zc3xx: reg_w_i err -71 00:12:12 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:12 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) 00:12:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x84, 0x6e, 0x0, 0x0) 00:12:12 executing program 1: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:12 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') read$eventfd(r0, 0x0, 0x0) 00:12:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) [ 733.003168][T11044] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 733.009675][T11044] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 733.036508][T14547] sp0: Synchronizing with TNC [ 733.095423][T11044] usb 6-1: USB disconnect, device number 19 00:12:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000010003904000000000800000000000000", @ANYRES32, @ANYBLOB="0304000000000000180012800b000100697036677265000008000280040012"], 0x38}}, 0x0) 00:12:13 executing program 2: getrusage(0xffffffffffffffff, &(0x7f0000005000)) 00:12:13 executing program 4: request_key(&(0x7f0000000780)='logon\x00', &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000800)='^\xb9}\x00', 0x0) 00:12:13 executing program 1: lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r0, 0x8982, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @nfc, @generic={0x0, "3aa48f1075a0a6d721cb45195a9c"}}) 00:12:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ifreq(r0, 0x8921, &(0x7f0000000040)={'veth1\x00', @ifru_data=0x0}) [ 733.776961][T11044] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 734.025080][T11044] usb 6-1: Using ep0 maxpacket: 8 [ 734.155359][T11044] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 734.155498][T11044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.159332][T11044] usb 6-1: config 0 descriptor?? [ 734.199836][T11044] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 734.946156][T11044] gspca_zc3xx: reg_w_i err -110 [ 735.572379][T11044] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 735.578962][T11044] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:12:16 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:16 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x0, 0x5}}) 00:12:16 executing program 1: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000010003904000000000800000000000000", @ANYRES32=r3, @ANYBLOB="0304000000000000180012800b000100697036677265000008000280040012"], 0x38}}, 0x0) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:12:16 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000001d80)="0bffe388d4a9b036391c1209c2a9deac27", 0x11}, {&(0x7f00000030c0)="04", 0x1}], 0x2}}], 0x1, 0x0) 00:12:16 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x65, 0x33, @beacon={@with_ht={{{}, {}, @device_b, @device_a, @from_mac=@device_b}}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x84}}, 0x0) 00:12:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)={0x88, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x69, 0x33, @beacon={@with_ht={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@device_b, {0xc, 0x6}}, @ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}}, 0x0, @random, 0x0, @val, @val={0x1, 0x1, [{}]}, @val={0x3, 0x1, 0xb}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x88}}, 0x0) [ 736.398902][T11044] usb 6-1: USB disconnect, device number 20 00:12:16 executing program 2: syz_io_uring_setup(0x4a4e, &(0x7f0000000540)={0x0, 0x0, 0x32}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f00000005c0)) 00:12:16 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-224-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 00:12:16 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/icmp6\x00') read$char_usb(r0, &(0x7f0000000040)=""/176, 0xb0) syz_open_procfs(0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 00:12:16 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000040)={{}, {0x7f}}) 00:12:16 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x14, r1, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) [ 737.093685][ T3562] usb 6-1: new high-speed USB device number 21 using dummy_hcd 00:12:16 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000036c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000003700)={{}, 'port1\x00'}) [ 737.342720][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 737.476424][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 737.485940][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.557010][ T3562] usb 6-1: config 0 descriptor?? [ 737.613397][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 738.662705][ T3562] gspca_zc3xx: reg_w_i err -71 00:12:18 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCADDRT(r0, 0x89a0, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @nfc, @generic={0x0, "3aa48f1075a0a6d721cb45195a9c"}}) 00:12:18 executing program 3: keyctl$dh_compute(0x17, &(0x7f0000000280), 0x0, 0x0, &(0x7f00000004c0)={0x0, &(0x7f00000003c0)="573a1241eae15b5845f965545269d196d6cde051925922a3a4e81759223b96c2b4dd251b808f7f6bcbd2deb4fa24a112ed3559d1bf8ff999bf28ffa751923e7332", 0x41}) 00:12:18 executing program 4: openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x410e83, 0x0) 00:12:18 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x980903, '\x00', @raw_data}) 00:12:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000040)={0x84, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x66, 0x33, @beacon={@with_ht={{{}, {}, @device_b, @broadcast, @from_mac=@device_b}}, 0x0, @random, 0x0, @val, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void}}]}, 0x84}}, 0x0) [ 739.283109][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 739.289770][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 739.333869][ T3562] usb 6-1: USB disconnect, device number 21 00:12:19 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x0, 0xfffb}) 00:12:19 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{}, 'port0\x00'}) 00:12:19 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x29, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0x10}}}, 0x24}}, 0x0) 00:12:19 executing program 1: connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x10}, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x105, &(0x7f00000002c0), &(0x7f0000001700)=0x4) 00:12:19 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000000), &(0x7f0000000040)=0x8) [ 739.896927][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 739.913167][ T3562] usb 6-1: new high-speed USB device number 22 using dummy_hcd 00:12:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x16, &(0x7f0000000000)={0x0, 0x9}, 0x8) [ 739.988860][T14636] device bond1 entered promiscuous mode [ 739.995571][T14636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 740.152486][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 740.273838][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 740.283401][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.307499][ T3562] usb 6-1: config 0 descriptor?? [ 740.372931][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 741.432650][ T3562] gspca_zc3xx: reg_w_i err -71 00:12:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:21 executing program 3: socket$inet_sctp(0x2, 0x5, 0x84) select(0x40, &(0x7f0000004640)={0x7fff}, &(0x7f0000004c80)={0xffff}, 0x0, 0x0) 00:12:21 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x7}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0xb) 00:12:21 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000002200f6d7fb17837368", @ANYRES32=r2, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f0000001e00000000001f4b00", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x29, 0x1, 0x0, 0x0, {0xe, 0x0, 0x0, r2, {0x10}}}, 0x24}}, 0x0) 00:12:21 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_mreqn(r0, 0x0, 0x7, &(0x7f0000000000)={@multicast1}, 0xc) 00:12:21 executing program 2: openat$ptmx(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) [ 742.030408][T14656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 742.052417][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 742.058890][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 00:12:21 executing program 4: mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 742.133096][ T3562] usb 6-1: USB disconnect, device number 22 00:12:21 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xb) 00:12:22 executing program 1: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @val, {@ipv6}}, 0x0) [ 742.217615][T14656] device bond2 entered promiscuous mode [ 742.224487][T14656] 8021q: adding VLAN 0 to HW filter on device bond2 00:12:22 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@in6={0x1c}, 0x1c, 0x0, 0x0, 0x0, 0x10}, 0x0) 00:12:22 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000280), 0x10) 00:12:22 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0xb) [ 742.702709][ T3562] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 742.942789][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 743.062863][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 743.072098][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.085287][ T3562] usb 6-1: config 0 descriptor?? [ 743.128414][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 744.192684][ T3562] gspca_zc3xx: reg_w_i err -71 00:12:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000080)={0x0, 0x8}, 0xb) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0xb) 00:12:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10}, 0x10) 00:12:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, 0x0, 0x0, 0x40083, 0x0, 0x0) 00:12:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000000700)={&(0x7f00000000c0), 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="c5", 0x1}], 0x1}, 0x0) bind(r0, &(0x7f0000000000)=@in6, 0x80) 00:12:24 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x2e, &(0x7f0000000140)={@local={0xfe, 0x80, '\x00', 0x0}}, 0x14) [ 744.812598][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 744.821916][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 744.895880][ T3562] usb 6-1: USB disconnect, device number 23 00:12:24 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) accept4$inet(r0, &(0x7f0000000600), &(0x7f0000000640)=0x10, 0x0) 00:12:24 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect(r0, &(0x7f0000000040)=@in={0x10}, 0x10) 00:12:24 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_mreq(r0, 0x0, 0xc, 0x0, 0x0) 00:12:24 executing program 0: openat$ptmx(0xffffff9c, 0x0, 0x20003, 0x0) 00:12:24 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000440)=""/144, 0x90}, 0x0) [ 745.362648][ T3562] usb 6-1: new high-speed USB device number 24 using dummy_hcd 00:12:25 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=@file={0xa}, 0xa) [ 745.602479][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 745.723498][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 745.733463][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.773891][ T3562] usb 6-1: config 0 descriptor?? [ 745.819973][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 746.882596][ T3562] gspca_zc3xx: reg_w_i err -71 00:12:27 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:27 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/module/nf_conntrack_tftp', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/firmware/devicetree', 0x0, 0x0) 00:12:27 executing program 2: r0 = shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x5000) shmat(0x0, &(0x7f0000ffb000/0x3000)=nil, 0x7000) shmdt(r0) 00:12:27 executing program 4: sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x82) 00:12:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="ff0000000000000001"]) 00:12:27 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x0) [ 747.497251][T14712] loop3: detected capacity change from 0 to 4096 [ 747.512425][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 747.518900][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 00:12:27 executing program 0: r0 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2400, 0xffffffffffffffff) 00:12:27 executing program 4: syz_clone(0x40004000, &(0x7f0000000040)="5eda81c7538608f4d6785aca941f002bb9b214356ac0947ad96d1b715eca65af3801a31ebaee723b6fedbbe67a79c48cbbdbed20167443f497a3b6ddc1c93213db4bd141b85d31308305706b64f5e36fd7a1b76852e7bff9c2aa68310d1e1df4a74a86f4f604124b3ce71c5c6987a5a61ea25264dda86df620b485ba351db6994856eda6dc9d019ba6e864fa0c79", 0x8e, &(0x7f0000000100), &(0x7f0000000340), &(0x7f0000000180)="916789e946d2b917268429078c3e250cca3f01a693e24ecb29586539c9c55a913ef1d5b4c04ed2be51df780c714ec85f3fa56542b5c18ddb5ebb3ef76d72c9c665448f356fff2aeaecf40c96486b3e77e117ce0ce0e248456b44d7fe6e022f5bc1025e0bf0cd7593ca84b362aaac938e306f716089c4") [ 747.611470][ T3562] usb 6-1: USB disconnect, device number 24 00:12:27 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240)) 00:12:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000012c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000001300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) [ 747.811606][T14712] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:12:27 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="ff0000000000000001"]) [ 748.153801][ T3562] usb 6-1: new high-speed USB device number 25 using dummy_hcd 00:12:27 executing program 0: syz_emit_ethernet(0x6a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x15, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @private, {[@end, @timestamp_addr={0x44, 0x14, 0x0, 0x1, 0x0, [{@multicast1}, {@dev}]}, @timestamp={0x44, 0x28, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}, @echo}}}}, 0x0) [ 748.293704][T14729] loop3: detected capacity change from 0 to 4096 [ 748.354938][T14729] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 748.412540][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 748.543917][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 748.553488][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.565835][ T3562] usb 6-1: config 0 descriptor?? [ 748.610340][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 749.672597][ T3562] gspca_zc3xx: reg_w_i err -71 00:12:29 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:29 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0908000000004001000001"], 0x30}}, 0x0) 00:12:29 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x8, 0x0, &(0x7f0000000100)) 00:12:29 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="ff0000000000000001"]) 00:12:29 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote}, 0x1c) 00:12:29 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0xfff9) [ 750.272401][T14740] loop3: detected capacity change from 0 to 4096 [ 750.280146][T14738] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 750.292457][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 750.299259][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 [ 750.373529][ T3562] usb 6-1: USB disconnect, device number 25 00:12:30 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) 00:12:30 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x12, 0x0, &(0x7f0000000100)) [ 750.492340][T14740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:12:30 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private2}}) 00:12:30 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, 0x0, 0x0) 00:12:30 executing program 1: clock_gettime(0xa3f2ad7c4a80f912, 0x0) 00:12:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RGETATTR(r1, &(0x7f00000004c0)={0xa0}, 0xa0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="ff0000000000000001"]) [ 751.002954][ T3562] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 751.178325][T14760] loop3: detected capacity change from 0 to 4096 [ 751.243003][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 751.305332][T14760] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 751.373046][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 751.382479][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.425495][ T3562] usb 6-1: config 0 descriptor?? [ 751.470325][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 752.522667][ T3562] gspca_zc3xx: reg_w_i err -71 00:12:32 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @remote, 0x9}, 0x1c) 00:12:32 executing program 2: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@random, @multicast, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @link_local, @remote, @broadcast, @local}}}}, 0x0) 00:12:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x107382) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xcbb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x24002da8) 00:12:32 executing program 1: clock_gettime(0x0, &(0x7f0000000340)={0x0}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)={r0}, &(0x7f0000000400)={&(0x7f00000003c0)={[0xc67]}, 0x8}) 00:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x38}}, 0x0) [ 753.142523][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 753.149173][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -71 00:12:33 executing program 3: syz_clone(0x44020a00, 0x0, 0x0, 0x0, 0x0, 0x0) [ 753.228699][ T3562] usb 6-1: USB disconnect, device number 26 00:12:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x5, 0x0, &(0x7f0000000000)) 00:12:33 executing program 0: socket(0x10, 0x2, 0x200) 00:12:33 executing program 4: syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="916789e946d2b917268429078c3e250cca3f01a693e24ecb29586539c9c55a913ef1d5b4c04ed2be51df780c714ec85f3fa56542b5c18ddb5ebb3ef76d72c9c665448f356fff2aeaecf40c96486b3e77e117ce0ce0e248456b44d7fe6e022f5bc1025e0bf0") 00:12:33 executing program 3: syz_emit_ethernet(0x4e, &(0x7f0000000140)={@empty, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "72c2fe", 0x14, 0x6, 0x0, @empty, @mcast1, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 00:12:33 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) [ 753.831625][ T3562] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 754.122845][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 754.243376][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 754.252717][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.268498][ T3562] usb 6-1: config 0 descriptor?? [ 754.322011][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 754.842606][ T3562] gspca_zc3xx: reg_w_i err -110 [ 755.462415][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 755.468998][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:12:36 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:36 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000000)) 00:12:36 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="ff7f"]) 00:12:36 executing program 1: r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local}, 0x20) 00:12:36 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, 0xe8) 00:12:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) [ 756.648929][ T3583] usb 6-1: USB disconnect, device number 27 00:12:36 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x11, 0x0, &(0x7f0000000040)) 00:12:36 executing program 0: socketpair(0xa, 0x5, 0x2, &(0x7f0000003840)) 00:12:36 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x23, &(0x7f0000000440)={0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:36 executing program 3: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x80047437, 0x0) 00:12:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000009c0)="bb06fee58e593bb18957338e4f6490d5", 0x10}], 0x1}}], 0x1, 0x0) 00:12:36 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000001c0)=@in6={0xa, 0x4e23, 0x0, @remote}, 0x80, 0x0}, 0x0) [ 757.272860][ T3562] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 757.514331][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 757.633217][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 757.642845][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.715530][ T3562] usb 6-1: config 0 descriptor?? [ 757.759691][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 758.282596][ T3562] gspca_zc3xx: reg_w_i err -110 [ 758.902457][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 758.909139][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:12:39 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:39 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@ldst={0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:39 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func_proto={0x2}]}, {0x0, [0x0]}}, &(0x7f00000011c0)=""/4096, 0x27, 0x1000, 0x1}, 0x20) 00:12:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x19, 0x0, 0x0, 0xfffffffb, 0x0, 0x1}, 0x48) 00:12:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x82, 0x0, 0x0) 00:12:39 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x8f802df7c5c58125}, 0x14}}, 0x0) [ 760.108155][ T3562] usb 6-1: USB disconnect, device number 28 00:12:40 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0x100}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000140)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:12:40 executing program 3: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 00:12:40 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@typedef={0x2}, @func_proto]}, {0x0, [0x0, 0x5f, 0x5f]}}, &(0x7f00000011c0)=""/4096, 0x35, 0x1000, 0x1}, 0x20) 00:12:40 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f00000000c0)=""/143, 0x2a, 0x8f, 0x1}, 0x20) 00:12:40 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000380)={'ip6gre0\x00'}) 00:12:40 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x1}]}, {0x0, [0x5f, 0x5f, 0x61]}}, &(0x7f00000021c0)=""/4097, 0x29, 0x1001, 0x1}, 0x20) [ 760.672539][ T3583] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 760.752669][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 760.759216][ T1199] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.933334][ T3583] usb 6-1: Using ep0 maxpacket: 8 [ 761.067264][ T3583] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 761.076921][ T3583] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.101415][ T3583] usb 6-1: config 0 descriptor?? [ 761.153675][ T3583] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 761.682770][ T3583] gspca_zc3xx: reg_w_i err -110 [ 762.302386][ T3583] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 762.308805][ T3583] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:12:43 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x24, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @local}], 0x1c) 00:12:43 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x0, 0x0, 0x5}, 0x48) 00:12:43 executing program 4: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0xfc, 0x0, 0x98, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x8, 0x4, 0x0, 0x2, @perf_config_ext={0x0, 0x400}, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="040000000000000020"]}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000020"]}) dup(0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) socket$inet(0x2, 0x0, 0x1) modify_ldt$write(0x1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0189436, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 00:12:43 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f0000000300)=0x7, 0x4) 00:12:43 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000000200)=""/39, 0x27}], 0x1, 0x0, 0x0) [ 763.468643][ T3562] usb 6-1: USB disconnect, device number 29 [ 763.575702][T14849] TCP: TCP_TX_DELAY enabled 00:12:43 executing program 0: setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000080)={0x3ff, {{0x2, 0x0, @dev}}}, 0x88) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) setuid(0x0) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r1, 0xf10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) ftruncate(r0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x26, 0x1, 0x0) 00:12:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000400)) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000002680)={0x0, 0x3938700}, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x29, 0x2, @thr={&(0x7f0000000240), 0x0}}, 0x0) 00:12:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/igmp6\x00') read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000056c0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) 00:12:43 executing program 3: r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000000)=""/135, 0xffffffffffffff5b) 00:12:43 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f0000000000)='jbd2_handle_stats\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='lock_acquire\x00', r1}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) 00:12:43 executing program 1: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/54, 0x36) 00:12:44 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:44 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f00000001c0), 0xb, 0x0) r1 = socket$inet6(0xa, 0x3, 0xa) dup2(r1, r0) 00:12:44 executing program 3: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000002680)={0x0, 0x3938700}, 0x0) 00:12:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000400)) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000002680)={0x0, 0x3938700}, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x29, 0x2, @thr={&(0x7f0000000240), 0x0}}, 0x0) 00:12:44 executing program 4: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004d80), 0x4000000000000e5, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000100)=0xe8d4, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x6000000000000003, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x8f, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x160, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback=0x7f008e04, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {0xf400000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "4bc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358) 00:12:44 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x30}}, 0x0) 00:12:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc0405519, &(0x7f0000000340)={{0x109, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) 00:12:44 executing program 0: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4084, 0xff4}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000500), 0xf1, 0x0, 0x0) 00:12:44 executing program 4: preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f0000001440)=""/4084, 0xff4}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat\x00') mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000500), 0xf1, 0x0, 0x0) 00:12:45 executing program 1: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) poll(&(0x7f0000000040)=[{r0, 0x2001}], 0x1, 0x0) 00:12:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x15, &(0x7f0000000300)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0xc1, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{&(0x7f0000003300)=@tipc=@id, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x52}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/215, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x20004582, 0x2, 0x0) 00:12:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000140)) 00:12:45 executing program 5: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000400)) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000002680)={0x0, 0x3938700}, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x29, 0x2, @thr={&(0x7f0000000240), 0x0}}, 0x0) 00:12:45 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 00:12:45 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, "c6f53c"}) 00:12:45 executing program 3: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000002680)={0x0, 0x3938700}, 0x0) 00:12:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4221, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x4c004) sendmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)="10", 0x1}], 0x1}}, {{&(0x7f0000000880)=@sco={0x1f, @fixed}, 0x80, 0x0}}], 0x2, 0x0) [ 766.343393][T14908] input: syz1 as /devices/virtual/input/input20 00:12:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000400)) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000002680)={0x0, 0x3938700}, 0x0) timer_create(0x0, &(0x7f0000000480)={0x0, 0x29, 0x2, @thr={&(0x7f0000000240), 0x0}}, 0x0) [ 766.597562][T14897] not chained 10000 origins [ 766.602721][T14897] CPU: 0 PID: 14897 Comm: syz-executor.0 Not tainted 5.16.0-rc5-syzkaller #0 [ 766.611532][T14897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 766.621620][T14897] Call Trace: [ 766.624919][T14897] [ 766.627868][T14897] dump_stack_lvl+0x1ff/0x28e [ 766.633164][T14897] dump_stack+0x25/0x28 [ 766.637378][T14897] kmsan_internal_chain_origin+0x78/0x110 [ 766.643218][T14897] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 766.649355][T14897] ? kmsan_get_metadata+0x33/0x220 [ 766.654522][T14897] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 766.660391][T14897] ? kmsan_get_metadata+0x33/0x220 [ 766.665556][T14897] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 766.671413][T14897] ? should_fail+0x75/0x9c0 [ 766.676016][T14897] ? packet_recvmsg+0x1faf/0x20d0 [ 766.681159][T14897] ? kmsan_get_metadata+0x33/0x220 [ 766.686322][T14897] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 766.692611][T14897] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 766.698723][T14897] ? kmsan_get_metadata+0x33/0x220 [ 766.703881][T14897] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 766.709736][T14897] __msan_chain_origin+0xbf/0x140 [ 766.714802][T14897] __get_compat_msghdr+0x6e1/0x9d0 [ 766.720020][T14897] get_compat_msghdr+0x108/0x2c0 [ 766.724996][T14897] ? __sys_recvmmsg+0x51c/0x6f0 [ 766.729946][T14897] do_recvmmsg+0xd77/0x2120 [ 766.734521][T14897] ? __this_cpu_preempt_check+0x13/0x20 [ 766.740164][T14897] ? sysvec_apic_timer_interrupt+0x5d/0xc0 [ 766.746050][T14897] __sys_recvmmsg+0x51c/0x6f0 [ 766.750780][T14897] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 766.757160][T14897] __do_fast_syscall_32+0x96/0xf0 [ 766.762240][T14897] do_fast_syscall_32+0x34/0x70 [ 766.767133][T14897] do_SYSENTER_32+0x1b/0x20 [ 766.771677][T14897] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 766.778103][T14897] RIP: 0023:0xf6f59549 [ 766.782192][T14897] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 766.801847][T14897] RSP: 002b:00000000f59535cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 766.810295][T14897] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020004b40 [ 766.818291][T14897] RDX: 0000000020004582 RSI: 0000000000000002 RDI: 0000000000000000 [ 766.826285][T14897] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 766.834276][T14897] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 766.842277][T14897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 766.850367][T14897] [ 766.853665][T14897] Uninit was stored to memory at: [ 766.858758][T14897] __get_compat_msghdr+0x6e1/0x9d0 [ 766.864000][T14897] get_compat_msghdr+0x108/0x2c0 [ 766.868972][T14897] do_recvmmsg+0xd77/0x2120 [ 766.873618][T14897] __sys_recvmmsg+0x51c/0x6f0 [ 766.878340][T14897] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 766.884918][T14897] __do_fast_syscall_32+0x96/0xf0 [ 766.890000][T14897] do_fast_syscall_32+0x34/0x70 [ 766.895001][T14897] do_SYSENTER_32+0x1b/0x20 [ 766.899545][T14897] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 766.906018][T14897] [ 766.908352][T14897] Uninit was stored to memory at: [ 766.913516][T14897] __get_compat_msghdr+0x6e1/0x9d0 [ 766.918749][T14897] get_compat_msghdr+0x108/0x2c0 [ 766.923801][T14897] do_recvmmsg+0xd77/0x2120 [ 766.928351][T14897] __sys_recvmmsg+0x51c/0x6f0 [ 766.933174][T14897] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 766.939642][T14897] __do_fast_syscall_32+0x96/0xf0 [ 766.944816][T14897] do_fast_syscall_32+0x34/0x70 [ 766.949716][T14897] do_SYSENTER_32+0x1b/0x20 [ 766.954358][T14897] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 766.960751][T14897] [ 766.963184][T14897] Uninit was stored to memory at: [ 766.968282][T14897] __get_compat_msghdr+0x6e1/0x9d0 [ 766.973524][T14897] get_compat_msghdr+0x108/0x2c0 [ 766.978512][T14897] do_recvmmsg+0xd77/0x2120 [ 766.983166][T14897] __sys_recvmmsg+0x51c/0x6f0 [ 766.987898][T14897] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 766.994367][T14897] __do_fast_syscall_32+0x96/0xf0 [ 766.999440][T14897] do_fast_syscall_32+0x34/0x70 [ 767.004429][T14897] do_SYSENTER_32+0x1b/0x20 [ 767.008977][T14897] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 767.015472][T14897] [ 767.017833][T14897] Uninit was stored to memory at: [ 767.023032][T14897] __get_compat_msghdr+0x6e1/0x9d0 [ 767.028268][T14897] get_compat_msghdr+0x108/0x2c0 [ 767.033355][T14897] do_recvmmsg+0xd77/0x2120 [ 767.037966][T14897] __sys_recvmmsg+0x51c/0x6f0 [ 767.042782][T14897] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 767.049158][T14897] __do_fast_syscall_32+0x96/0xf0 [ 767.054430][T14897] do_fast_syscall_32+0x34/0x70 [ 767.059341][T14897] do_SYSENTER_32+0x1b/0x20 [ 767.064048][T14897] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 767.070495][T14897] [ 767.072969][T14897] Uninit was stored to memory at: [ 767.078054][T14897] __get_compat_msghdr+0x6e1/0x9d0 [ 767.083361][T14897] get_compat_msghdr+0x108/0x2c0 [ 767.088517][T14897] do_recvmmsg+0xd77/0x2120 [ 767.093223][T14897] __sys_recvmmsg+0x51c/0x6f0 [ 767.097969][T14897] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 767.104515][T14897] __do_fast_syscall_32+0x96/0xf0 [ 767.109596][T14897] do_fast_syscall_32+0x34/0x70 [ 767.114665][T14897] do_SYSENTER_32+0x1b/0x20 [ 767.119220][T14897] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 767.125771][T14897] [ 767.128209][T14897] Uninit was stored to memory at: [ 767.133458][T14897] __get_compat_msghdr+0x6e1/0x9d0 [ 767.138608][T14897] get_compat_msghdr+0x108/0x2c0 [ 767.143747][T14897] do_recvmmsg+0xd77/0x2120 00:12:46 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180), 0x4) 00:12:46 executing program 4: io_setup(0x10001, &(0x7f0000000100)) [ 767.148297][T14897] __sys_recvmmsg+0x51c/0x6f0 [ 767.153191][T14897] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 767.159594][T14897] __do_fast_syscall_32+0x96/0xf0 [ 767.164823][T14897] do_fast_syscall_32+0x34/0x70 [ 767.169732][T14897] do_SYSENTER_32+0x1b/0x20 [ 767.174447][T14897] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 767.180924][T14897] [ 767.183417][T14897] Uninit was stored to memory at: [ 767.188518][T14897] __get_compat_msghdr+0x6e1/0x9d0 [ 767.193830][T14897] get_compat_msghdr+0x108/0x2c0 00:12:46 executing program 3: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000002680)={0x0, 0x3938700}, 0x0) [ 767.198808][T14897] do_recvmmsg+0xd77/0x2120 [ 767.203461][T14897] __sys_recvmmsg+0x51c/0x6f0 [ 767.208196][T14897] __ia32_compat_sys_recvmmsg_time32+0x16e/0x1d0 [ 767.214750][T14897] __do_fast_syscall_32+0x96/0xf0 [ 767.219833][T14897] do_fast_syscall_32+0x34/0x70 [ 767.224890][T14897] do_SYSENTER_32+0x1b/0x20 [ 767.229463][T14897] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 767.236006][T14897] [ 767.238349][T14897] Local variable msg_sys created at: [ 767.243834][T14897] do_recvmmsg+0xbb/0x2120 [ 767.248310][T14897] __sys_recvmmsg+0x51c/0x6f0 00:12:47 executing program 0: msgsnd(0x0, &(0x7f0000000000)={0x1, "3b0e4a162d50596ceb6d38ec5e0fdc2d21c35b31adbba0ce8ecd00fabcac5b141a2f2453af7db82b4696b2b1933eff3b2f90cb51bc64fa2d5583111b0bfbb7a1ed5bb24946409f635e54f5927fa7753a52ada759cd76ef25d0daa7b42a5b7fd793ab79fa3c422f050a2591fb0c3d7a6cae813faf8e412b7cb83602bbce95228ff5bd84a06ce949edeb53c78192b0dc7af6208818e1e89dd22c87be0eeadd8dac2620fad975af7f4b58b917f59b7b6816d72bc5f9cc5ecda19421ee4e0a0feba9f445e2212cd605348291bacfecc45268deb65e92169ed838f2779fb82d28812d4559d5c8bf4936f965e4580b4079ea376ac47cc50da51ca536d4d290c70c0aaaf01ae8c21abae064bafddff5796333e8c4a24bd43132929617114523d5869b4dfa43087fe32a51c07844d5511e1045b11bca93da20e8832889aeba59bfed490687cddd8537393bc79c7af1c5b36918bdfd6e9b87761e4685524de0d85a8115b36b6712508fe1e7daabd22599f08f7f4cfd2897c42e58a10ad65c11582fa9df10be4c1c67fb64fa03aaf6f6c2db8f266f8fcb649e88cf7e914dff027f0188abcb1163e482eed3800b24f0fae556115a92ec6f6441227b8ec41bfb529be5af735fcdeea2b85ee314bc58903fabade701b13895871ca14a18b12ec36881d4e200b546ba18a041a54e594b3ef4b70ef978d877364742ea5b1ae7dee7ba643c2a1921ac035bbee87dfea9dc4b03087069f9515228303655f6b042060566ebaa3fcc7b93d499c5883faae5ec3adccfeb769587163e4628644f91d9b50a5c0418d3899ca4e5ce6a9c1ad7e1113f0b20567dde31068b8783210524ada02c7d7ddbeb9253cb4884c9d7d08a32f38a3a3fe837ae3777c799c00c2fb076a7abcce1464ba3997c217b4641e684e8a1880ea4972fe50fa08a9ed9cbf6925087bb1201bd933113ca4215abdf2732dde54392812677c2fd79b8bdb2f9def951e5cba42540d6e9ee3e666aa184528098eaadf75ed95f1b21e00c9e31fa895fccf35b4b0d40d076f76ebc36f405eb380305f645fb32b05cf7d6ced2f988df777be0094cde959ca69ef8710fbcf169a773a0f5dc56e0a540f14d72fc271db61e92cbcb990e175c13ed9634495c0c5a2a32d4c0d553b0fda7aa31f166b06460779c5d8bf20af86ca4dae1ec0705729b48f6bd0d159c7e020bf36021abdb0fb9c00db5e3d0d22c6028cf4cee4ea13e026adeaa7f22f7e00ed457f6161cb6fc6a66a24338ae0fc58384a87a7f467dea5eef28ba7cfcebf18bfcbf630ffc9c2fc50f0e965be2ce92e0356cdc7e0fd51307be2fca7881c66bd5502e8266c98cc926ac852bc61bec023c2a2e658b094c93e0b8a4230b6595b4bf22e616d52a98fa255d57f5fb052707b870da6dfd739996f48d09c3e91d279d673f06c3d35bbec3847c860307754683dd7b6d5bba51c1cd09ea9c6cdbeea3efef2f930e5db33237802ec26ff291c20653040ddff02b5a0a327277220b7647f5190d4b831e51eba7240b58f53d42a935b1b2ed644991a855b3b9c3db5142010370441b11282ff1618d8226de787252c69724b7f6bbe093580d629c58b9ec403b25b17af77c25a397ee4470e4116bcc36ad89672b8fdca4f5a64f52dc200799865b0b9be7c0a8abcc7b37a532168115be7a27a1a5317999b606a6214da17c394b71123cf8630231db37b55e5b48f55cb2fd291c76062fa15c53589f0f65050424b174a2f5fe4c167c44575f50f0ecabe158589e08911b6b7f7e0efee004a09c56ecc711640cd63f90284514c5d5ebdbbace7b0a48d97e3ae5f66162c995889bbe45dbf526186d4a9fc65ad06711002e79d9de6dfa79fe3784b819196f66506a222174e41a7d2225e46afe66d26e19b7176c117c08b91357d6df28114e3a38755a92a888bc37421a87cd2e9acc2730d79eaa0f3d8d21e5215b0800221cbbce52f70788722af3e3fd4977a02e67f2c7049d4f1348af41d931fec2201931ba641bc9de57bb59924040056d43adddce2a00062a36ec88eec61a461572f5b348b3ff18c96e88c3500d895276135c041d73a89974405e2b46054033461560dd7d40d66b86541f3293bc2b0bc2f69cd8be74cb87a85aee213c7c37746c6c11dc4cdbde36dd18bcad042d4a318f8ca45ac2d2327d8c59a38f74e1ea474e57108c469c56b10afcfd7011654860927b8c28e4828bd8e97440812f65012b576a7edbcca6b5ee9bbff5422411f85de10f0e14758d582392fce2e28e17b81a7173c24ff095b61e5673d4506377d7db53652b18c381bc52d60003430df8102372699a75bbcb20c7cd3e1e9a40531da18acb6f15ad7dd4a6fc156862564ded2fbcefc339de39bd1eaa9b9667012d80560a1b165674649acc7ccbbb04eb3b96f4be301eff20d02e714a464715b7e027a7c93c506d269b79973d816544a3e46697b5136c16f15eafce4bee38da50ea9d2f78b6fa71494a7783f5ed80af0f37b2d25b14d2bce057fb26934442afcae749b3ab129f285e629a595e7fbdee279de451d7b0da45d6fb1ea38fc8510791a5bd22fcacb35982a34e54da267303a0b3c19cb8328bf12ee9a63d4c8b693fcd45e24582b7bb6ec878870e4739c8875e9091776be0ef13b412e445eaa361eeb9cea7e1608539973acb4f849961bbaece9d5dcd3cb52fc0a15f3f012ecb271cb15897d67e42d1ac76ea44f9a63b38979978d8d5baa33ad666189ff61ae12fe6847b32572e23c1315395512a2f27a4507b5803607e1b69518fe9be2d750588f34705c3632259fd462ff86ed98188d368fbd83c30a8eb580b3b79938120afac5827a02ede37e37b5fddf5fbffe1949e7ab482e95f4f91e8b4d6651355dab04613ef503d201509f2a1e7e05d265c80cc3075e42d5e25a1c5e8db5d7b64c7e7420dfbb0f05b6434b5f8b97e9592e4eef4980cd2d903375c8a3199590ed4a9fa5906c0cbbf8492540a4966f9704f973bada5bb04ba4fb29494084aa6af652603e7cdb4a9c12004103ab2e5e78f709e8e32d5d0a315f63870128033917c598197d1cd1316fef048c8dd14432c3829766e4c5681b284ef41fc1e9e522bd8e0b99b7e5da992d5b9e4c9b8af63be3b31f2fdc3bdfd3d96a3cbf072b1c709b4a79d047707c8523356c6aa342dd24b3c942e794996ec572935ccbdceb81150bf3c179f2214bc1879c6fb180106890f1f8f96881202a614d0eacdfb1d59999a13a69b78fc9fa735d9f47a66e85c187131902196b5324e8644fb50330812711552a86ca49683119d8cf69a750eeb8455f4b8e52d2be5f26247a56ed14aa656694ce1811dc84583a90151ba32cdd37b10dd04c129a9683e739e1b996411eaa161200493d9ea778c05b7666152bcf26ae5000de4e3f10f6a99fb99d1de5510ae048a1f39f095c47b8ec511a2ecca942382e55780f59a7280d5b3b622d4b90bfde96a84b4dfae199c63f707a6fc6ae616d9391f198222ddee3a09419ad4dd6dc2470425d553ec7c8ba51ef6280488ad7d168e4e0958b246a525206f0cf56bd58d124d6a5f5595faee842ea7789d6945a2554966775037bc8c94ed346936ef671e28063a70c66e977ed86cfe0d8f2d70efeac542ce3fc877f7ab95580fe4b77845d69fa795a98afd3711e967554d79380bdfefd331400d915c4dce35e2f3814a6417d614689285528620407f88e930289c52692e761f977dc86d0850e3a2e6a4388f66b8b4083d99b97b93b3248b05f8cbff877c84600a605bba63dc07263a984fe549c7f426f1edbf5af45fce87d60f8f43966e0d2d89a1965491fd6d2d1e63ee32568f51d9fb5b3e3f59450b2d1d1f056e3801bf6185691e56b2a99b3b04b58dc53f5f22014fd787b05b0d51d486c25451b8a2b30829bc1fa19b57673b85bc3ff9700fe5db25c55da3156938e90aae02c53bc3d8abac17ac72736fa3963bbc717b350301f6ade14e624ed2fe21e65226595af83734846cd4147b37ef8040f47aa3926247454690ca2b025c02441189c4826acd21de3f76546147b62524068a88ca1b07735455c9a9d513c94de4f90a5984a76d9d7a942c67560b0d7aa643cac3b0f804a772bf3fb2a16183b7ccfffe166a1f874e693a8b1ffd77e4e72c9e760e1da8f4211ae41cfee8b1fe521612bfed449e2ff5200ce34f06006331182e2d79dc25178bd6730d4a97a64c2f3b019a74cb3618b8fa423acedc5af3aa1c17be812572ccdbaad8126ed5bd13fb582d6f9a8dd223431410b97082492deca7e434c6de71f19348cca44be5b23e4331d0a83e2551f0057f4da69b1059383df1f507986c4af0a386c5487ba3791a6c0e7c5196aa9a4f8523d39b1c58a4e8a6db8ea89a2a7f304c24b01012f20ba43c782ebe0b08f19bbaf98bebb6ea9a0e526e199f9c11ecca23b7d82efb8308bf538f69a9e0d2309357aa10e25d960a7dff3c4c17325fbe17330c121204d355199ca81632b488f3c64370e9b7ea48fa71676e4545d5b512b531d967729d0965cc326165a956fdf0d9352eac4069cc1d94f2d36077d6c45906c17a7292049085894d6240ca7fe20a9b3723533b7a53e88aee15e03a29db83eb20f694fcb6628f7f7faf15e2bd09a2f72de60b34cdd2b2c43a36f07d55e354c74a3402cf1465e218b4c2b774785d4d7e1f1dea63f9dce2206b6295bedb94b4a2ca01db8be6f45565655a11fb75d16e0a5128f0e39f2d4d155571c30917d50abd51d4fa5a4b7765f5bc2d9ee3f953cd333876e1d0b1ad4973e0c1346eb87b18d676e0bfe98fcc53d3f85c1c1c64d7d5c575cfce85a16ff3ac558f4bda2416d53289058b5f45ac68089fe58f72718d58f64cb878e627800b459add9d90d646ea3a0c8901b4e2eda4fdb579f809c7408234947150bbd3e4bf8af038eced747205642d8bf755167d966b78ebddbafb7d31f68155a7dae90f9d002f902c037a77e7b20df76305dddcd69f56ee14f6a54963d2555b81b3fa2e4677ac1e26240066fdc3121102091c7ed105da4df5dec1f3124ae7561851d615c81330e2ef30509e75d955922a34fba028115c6dfc0a8912ac6d9d0d3baa6740e8ff827c199220e89d4ab42a3a5fb85c41496e83e05e96eaf84ed1618e6bdd95a5529ca16265c16b44617c051b2cb564eb8da5b06a7393096c1d56c4875af9e90490c5ed64b489aec7784c3a1849281a8a5fbad2e1e185be655b555ca1a7b7e9940fe32e8d2a9df1bda51afcc88bd9332547bdc99ba899c7e2a5339875b79e7dfbf76bcf18941ab30aa6eb6c9f4b3fdca313195ae2ccbfa5055c0f3e6d55ec20fa96a8c403101ab99565029468acad3f283aa945c3e18b6d3e2a22f7ae4e4dd74d3e0e9b33e9abb7ff94abbcce1ebd5ffb79d811c77c22f13f33f1be516cd63a12c3d93bc4cca21afad4c55ae91ce15c9e157671ad6e135b39adfda8cea588e32a17273da725e50dfdcd633109f20df7c067af985fd79cc2dfcb30bf5e08326b217c805e003541ebb14383d431a3d1bfad59145415dbc20fe9647e66681408988457ef3a6e460847ab361e314f6d4e4f4e69ebd6e8d985f7b819a03d1eb8777630e0d07edcf8b7907cb62f50b7ed1f1dde513c8211877e6b24f61bfbcd793823a60509f1375324b19e5986f2810583f250f35488ec7d6cef798075baf140ba3288f9a3653406e295d88e619a9db20155299a7b3837759e73afe11d7b7a902cb884c31746d699"}, 0x2000, 0x0) 00:12:47 executing program 5: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}, 0x0) 00:12:47 executing program 1: io_setup(0xffff, &(0x7f00000082c0)) io_submit(0x0, 0x1, &(0x7f0000002600)=[0x0]) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000008100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001a80)=@nfc={0x27, 0x1, 0x1}, 0x80, &(0x7f0000001e00)=[{0x0}, {&(0x7f0000001c40)}, {&(0x7f0000001c80)="c46401eed24c3a", 0x7}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000068c0)=@x25, 0x80, 0x0}}, {{&(0x7f0000007c80)=@nl=@kern={0x10, 0x0, 0x0, 0x2000}, 0x80, 0x0}}], 0x6, 0x0) 00:12:47 executing program 3: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_pgetevents(r1, 0x5, 0x5, &(0x7f00000004c0)=[{}, {}, {}, {}, {}], &(0x7f0000002680)={0x0, 0x3938700}, 0x0) 00:12:47 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mounts\x00') r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r1, r0, 0x0, 0x400000000006) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syslog(0x3, &(0x7f00000000c0)=""/147, 0x6558a7e3409167e0) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000300), 0xfffffffffffffffe, 0x400900) write$P9_RREADLINK(r2, &(0x7f0000000740)={0xe, 0x17, 0x2, {0x5, './bus'}}, 0xe) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='pstore\x00', 0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000006680)={0x3d0, 0x0, 0x0, [{{0x0, 0x1, 0x0, 0x0, 0x3, 0x87a6, {0x0, 0xffff, 0x0, 0x5, 0x1, 0x0, 0x0, 0x3ff, 0x85, 0xa000, 0x6, 0xffffffffffffffff, 0xee01}}, {0x6, 0x1, 0x7, 0x39cb, 'mounts\x00'}}, {{0x0, 0x0, 0x0, 0x0, 0xf85, 0x2, {0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd, 0x7, 0x0, 0x2, 0x4, 0x4000, 0xfffff2f8, 0xffffffffffffffff, 0x0, 0x100}}, {0x5, 0x9, 0x7, 0x3, 'mounts\x00'}}, {{0x0, 0x3, 0x8, 0x7, 0x0, 0x401, {0x6, 0x0, 0x3, 0x1, 0xe2, 0x7, 0xa7cb, 0x0, 0xce0d, 0x2000, 0x2, 0x0, 0x0, 0x401, 0xfffffffe}}, {0x4, 0x6, 0x1, 0x10000, ','}}, {{0x2, 0x2, 0x2, 0x1, 0x1, 0x1f, {0x3, 0xff, 0x9797, 0x47, 0x0, 0x5, 0xc05, 0x1000, 0x0, 0x1000, 0xffefff81, 0xffffffffffffffff, 0x0, 0x2, 0x8}}, {0x6, 0x7, 0x8, 0x3, 'oom_adj\x00'}}, {{0x0, 0x0, 0x80000000, 0x0, 0x1, 0x101, {0x1, 0x8, 0xfffffffffffffffe, 0xba, 0x301d7dec, 0x6, 0x974, 0x0, 0x8, 0x0, 0xd8d, 0xee01, 0xee00, 0x0, 0x2}}, {0x0, 0xb4, 0x7, 0x95dd, ',@}}--#'}}, {{0x0, 0x1, 0x0, 0x0, 0x8, 0x0, {0x0, 0x0, 0x8, 0x6, 0x4, 0x3, 0x6, 0x0, 0x2, 0x0, 0x5, 0xee01, 0x0, 0x9, 0x40000000}}, {0x2, 0x8, 0x2, 0x0, '/-'}}]}, 0x3d0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syslog(0x2, &(0x7f0000000680)=""/161, 0xa1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_adj\x00') recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004380)=[{{&(0x7f0000000600), 0x6e, &(0x7f00000007c0)=[{0x0}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000dc0), 0x0, &(0x7f0000001fc0)}}], 0x3, 0x0, 0x0) setns(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x80000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0) 00:12:47 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000005e00)={'sit0\x00', &(0x7f0000005d80)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) 00:12:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x20000080) 00:12:48 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x2000, 0x4) sendto$inet(r0, &(0x7f0000000080)="bf", 0x1, 0x0, 0x0, 0x0) 00:12:48 executing program 5: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:49 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x12}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x20}]}) 00:12:49 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000180)={0x1, @write_link_policy={{0x80d, 0x4}}}, 0x8) 00:12:49 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x184540, 0x0) 00:12:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f00000000c0)={0x1, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @multicast1}}}, 0x108) 00:12:49 executing program 1: ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000400)={0x0, &(0x7f0000000340)}) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/6, 0x6}], 0x1}}], 0x1, 0x0, 0x0) readv(r0, &(0x7f0000000300), 0x10000000000000ad) 00:12:49 executing program 4: syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0xaaaaaaaaaaaadfd, &(0x7f0000000640), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="636f6465706167653d3836342c0054d6379553abb2c64873ef5c8f17290e3243d72b6315edc0"]) 00:12:49 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x0, 0x0, 0xfdfdffff}) 00:12:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000040, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000c811, 0x0, 0x0) 00:12:49 executing program 0: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x989680}, 0x0) 00:12:49 executing program 1: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, 0x0, 0x0, 0x3) 00:12:49 executing program 5: r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000007680)=[{0x10}], 0x10}}, {{&(0x7f0000000280)=@hci, 0x80, 0x0}}], 0x2, 0x240480c4) 00:12:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)) 00:12:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x2, 0x2, 0x401}, 0x14}}, 0x0) 00:12:50 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') read$FUSE(r0, 0x0, 0x0) 00:12:50 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x2010, r0, 0x993a8000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 00:12:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 00:12:50 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 00:12:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)) 00:12:50 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) unlink(&(0x7f0000000040)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) 00:12:51 executing program 1: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 00:12:51 executing program 4: perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) select(0x8, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0) 00:12:51 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x0, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)) 00:12:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) 00:12:51 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 00:12:51 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) bind(r0, 0x0, 0x11) 00:12:51 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}, 0x0) 00:12:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14, 0x2, 0x1, 0x201}, 0x14}}, 0x0) 00:12:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)) [ 772.173125][ T3562] usb 6-1: new high-speed USB device number 30 using dummy_hcd 00:12:52 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x1000, 0x9}, 0x10) 00:12:52 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 772.363219][ T3562] usb 6-1: device descriptor read/64, error 18 00:12:52 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x141042, 0x0) syncfs(r0) [ 772.633068][ T3562] usb 6-1: new high-speed USB device number 31 using dummy_hcd 00:12:52 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000380)='./file0\x00', 0x141042, 0x0) syncfs(r0) [ 772.830917][ T3562] usb 6-1: device descriptor read/64, error 18 [ 772.953948][ T3562] usb usb6-port1: attempt power cycle [ 773.372528][ T3562] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 773.462664][ T3562] usb 6-1: Invalid ep0 maxpacket: 0 [ 773.612392][ T3562] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 773.703231][ T3562] usb 6-1: Invalid ep0 maxpacket: 0 [ 773.708988][ T3562] usb usb6-port1: unable to enumerate USB device 00:12:54 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x0, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:54 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 00:12:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000001c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') mount(0x0, 0x0, &(0x7f0000000640)='cgroup\x00', 0x0, &(0x7f0000000680)='\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x1d9) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0x44) sendfile(r0, r0, &(0x7f0000000240), 0x7ffa) 00:12:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:12:54 executing program 2: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[], 0x0) 00:12:54 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) syz_open_procfs(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)) syz_emit_ethernet(0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) 00:12:54 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) 00:12:54 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8833f3", 0x8, 0x3a, 0x0, @ipv4, @mcast2, {[], @echo_reply}}}}}, 0x0) 00:12:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1, 0x0, 0x10000) 00:12:54 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:12:54 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) [ 775.432373][ T3583] usb 6-1: new high-speed USB device number 34 using dummy_hcd 00:12:55 executing program 1: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 775.623624][ T3583] usb 6-1: device descriptor read/64, error 18 [ 775.903122][ T3583] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 776.114037][ T3583] usb 6-1: device descriptor read/64, error 18 [ 776.232739][ T3583] usb usb6-port1: attempt power cycle [ 776.662697][ T3583] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 776.752907][ T3583] usb 6-1: Invalid ep0 maxpacket: 0 [ 776.902562][ T3583] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 777.022822][ T3583] usb 6-1: Invalid ep0 maxpacket: 0 [ 777.033635][ T3583] usb usb6-port1: unable to enumerate USB device 00:12:57 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x0, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:12:57 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:12:57 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:12:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "00e5ffffffffffffff00000000ba65002000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x541b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "0000000300000007db82456fa79c812600"}) 00:12:57 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f0000000640)) 00:12:57 executing program 1: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) 00:12:58 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system', 0x60940, 0x1fb) 00:12:58 executing program 1: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) 00:12:58 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:12:58 executing program 4: pipe(&(0x7f0000003a40)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(r0, 0x0, 0x0) 00:12:58 executing program 2: unlinkat(0xffffffffffffffff, 0x0, 0x89e1d33a6f6c09da) 00:12:58 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 778.723031][ T3583] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 778.932529][ T3583] usb 6-1: device descriptor read/64, error 18 [ 779.202409][ T3583] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 779.392445][ T3583] usb 6-1: device descriptor read/64, error 18 [ 779.512923][ T3583] usb usb6-port1: attempt power cycle [ 779.922470][ T3583] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 780.012551][ T3583] usb 6-1: Invalid ep0 maxpacket: 0 [ 780.162472][ T3583] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 780.253005][ T3583] usb 6-1: Invalid ep0 maxpacket: 0 [ 780.258960][ T3583] usb usb6-port1: unable to enumerate USB device 00:13:01 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:13:01 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4041, 0x0) 00:13:01 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x10) 00:13:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) close(r0) 00:13:01 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') write$cgroup_netprio_ifpriomap(r0, 0x0, 0x0) 00:13:01 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 781.452705][ T24] audit: type=1804 audit(781.189:9): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir914359526/syzkaller.kTdgPf/877/file0" dev="sda1" ino=1158 res=1 errno=0 00:13:01 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) close(r0) 00:13:01 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x200040, 0x1da) 00:13:01 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) 00:13:01 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4) 00:13:01 executing program 1: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 782.022950][ T3562] usb 6-1: new high-speed USB device number 42 using dummy_hcd 00:13:01 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000001300), 0x8802, 0x0) write$nbd(r0, 0x0, 0x0) [ 782.282728][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 782.413781][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 782.423298][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.487953][ T3562] usb 6-1: config 0 descriptor?? [ 782.546466][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 783.072576][ T3562] gspca_zc3xx: reg_w_i err -110 [ 783.692399][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 783.698871][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:13:04 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:13:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x18) close(r0) 00:13:04 executing program 0: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/power_supply', 0x80800, 0x8) 00:13:04 executing program 2: rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000300)) 00:13:04 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @broadcast}}) 00:13:04 executing program 1: socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 784.865769][ T3562] usb 6-1: USB disconnect, device number 42 00:13:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001100)={'veth0_to_bond\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x0, 0x0, "177a396800c4"}}) 00:13:04 executing program 1: socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) 00:13:04 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000140), 0x4) 00:13:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000040)) [ 785.443337][ T3562] usb 6-1: new high-speed USB device number 43 using dummy_hcd 00:13:05 executing program 1: socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 785.682989][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 785.803139][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 785.812833][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.851814][ T3562] usb 6-1: config 0 descriptor?? [ 785.899630][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 786.422609][ T3562] gspca_zc3xx: reg_w_i err -110 [ 787.042366][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 787.048798][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:13:07 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:13:07 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000006c0)) 00:13:07 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x62) 00:13:07 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:07 executing program 2: r0 = msgget$private(0x0, 0x0) setresuid(0x0, 0xee00, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) 00:13:07 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) [ 788.223198][T11044] usb 6-1: USB disconnect, device number 43 00:13:08 executing program 0: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/8) 00:13:08 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:08 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)=""/162, &(0x7f0000000000)=0xa2) 00:13:08 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:13:08 executing program 4: pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) read$char_usb(r0, &(0x7f0000000140)=""/65, 0xfffffffffffffeeb) 00:13:08 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f0000000040)=0x36) [ 788.832814][T11044] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 789.082822][T11044] usb 6-1: Using ep0 maxpacket: 8 [ 789.202801][T11044] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 789.212053][T11044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.224699][T11044] usb 6-1: config 0 descriptor?? [ 789.269832][T11044] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 789.792695][T11044] gspca_zc3xx: reg_w_i err -110 [ 790.412466][T11044] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 790.419029][T11044] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:13:11 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:13:11 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 00:13:11 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup.net/syz1\x00', 0x200002, 0x0) 00:13:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_FILTER={0x4}, @CTA_ZONE={0x6}]}, 0x20}}, 0x0) 00:13:11 executing program 4: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000cc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c80)={0x0, 0x14}}, 0x0) [ 791.595197][T11044] usb 6-1: USB disconnect, device number 44 00:13:11 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) 00:13:11 executing program 3: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(0xffffffffffffffff) 00:13:11 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1a, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x48) 00:13:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000380)={0xcc, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0xa4, 0x8, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "df22c91a31860e9747d248aa7ff0290dc524bf3259a9dbdad60cd56cd145f50e"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0xcc}}, 0x0) [ 792.255182][T15171] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 00:13:12 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) 00:13:12 executing program 3: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(0xffffffffffffffff) [ 792.536652][T15180] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 792.652402][T11044] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 792.892494][T11044] usb 6-1: Using ep0 maxpacket: 8 [ 793.042925][T11044] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 793.052304][T11044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.064243][T11044] usb 6-1: config 0 descriptor?? [ 793.109888][T11044] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 793.832638][T11044] gspca_zc3xx: reg_w_i err -110 [ 794.472463][T11044] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 794.478956][T11044] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:13:15 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:13:15 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr={0x0, 0x0, 0x0, 0x12}]}}, &(0x7f00000000c0)=""/164, 0x26, 0xa4, 0x1}, 0x20) 00:13:15 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendto(r0, 0x0, 0x0, 0x400a811, 0x0, 0x0) 00:13:15 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect(r0, &(0x7f0000000600)=@in, 0xf) [ 795.289310][T11044] usb 6-1: USB disconnect, device number 45 00:13:15 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) 00:13:15 executing program 3: setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(0xffffffffffffffff) [ 795.439002][T15190] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 00:13:15 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x9}, 0x4) 00:13:15 executing program 3: r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:15 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x2, @multicast, 'tunl0\x00'}}, 0x1e) 00:13:15 executing program 1: bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001240)=0xffffffffffffffff, 0x4) 00:13:15 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) [ 795.802687][T11044] usb 6-1: new high-speed USB device number 46 using dummy_hcd 00:13:15 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev(r0, &(0x7f00000005c0)=[{&(0x7f0000000840)='X', 0x1}, {&(0x7f0000002a00)='R', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0, 0x0) [ 795.989155][T15208] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 796.052780][T11044] usb 6-1: Using ep0 maxpacket: 8 [ 796.181110][T11044] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 796.190941][T11044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.249367][T11044] usb 6-1: config 0 descriptor?? [ 796.305594][T11044] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 797.052599][T11044] gspca_zc3xx: reg_w_i err -110 [ 797.688336][T11044] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 797.694953][T11044] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:13:18 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:13:18 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000040), 0x4) 00:13:18 executing program 1: mknod(&(0x7f0000000000)='./file\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file\x00', 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000040)) 00:13:18 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1003, 0x0, 0x0) 00:13:18 executing program 3: r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:18 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) [ 798.495650][ T3562] usb 6-1: USB disconnect, device number 46 00:13:18 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)) 00:13:18 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) 00:13:18 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) pwritev(r0, &(0x7f0000000480)=[{&(0x7f0000000240)='2', 0x1}], 0x1, 0x0, 0x0) 00:13:18 executing program 2: pipe2(&(0x7f0000001300)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, 0x0) 00:13:18 executing program 4: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) 00:13:18 executing program 3: r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) [ 799.112726][ T3562] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 799.353000][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 799.472808][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 799.482055][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.508191][ T3562] usb 6-1: config 0 descriptor?? [ 799.560866][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 800.292507][ T3562] gspca_zc3xx: reg_w_i err -110 [ 800.922383][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 800.929057][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:13:21 executing program 0: pipe2$9p(&(0x7f0000007500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r0, 0x0, 0x0) 00:13:21 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) 00:13:21 executing program 1: r0 = getpgid(0x0) r1 = getpgid(0x0) rt_tgsigqueueinfo(r1, r0, 0x0, &(0x7f0000000040)) 00:13:21 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:13:21 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:21 executing program 2: pipe2(&(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 801.754985][ T3562] usb 6-1: USB disconnect, device number 47 00:13:21 executing program 2: pipe2(&(0x7f0000001540)={0xffffffffffffffff}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 00:13:21 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) 00:13:21 executing program 0: pipe2(&(0x7f00000011c0)={0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 00:13:21 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xc0c0, 0x0) 00:13:22 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) [ 802.363046][ T24] audit: type=1800 audit(802.109:10): pid=15266 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=".log" dev="sda1" ino=1166 res=0 errno=0 [ 802.382904][T11044] usb 6-1: new high-speed USB device number 48 using dummy_hcd 00:13:22 executing program 2: clock_gettime(0x981e3bd95117cd70, 0x0) [ 802.622823][T11044] usb 6-1: Using ep0 maxpacket: 8 [ 802.744004][T11044] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 802.753501][T11044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.808027][T11044] usb 6-1: config 0 descriptor?? [ 802.860128][T11044] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 803.592619][T11044] gspca_zc3xx: reg_w_i err -110 [ 804.222378][T11044] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 804.229009][T11044] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:13:24 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:13:24 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003280)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) 00:13:24 executing program 4: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c0004"], 0x114}], 0x1}, 0x0) 00:13:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000003280)={0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x40000, 0x0, 0x0) 00:13:24 executing program 2: stat(&(0x7f0000000100)='.\x00', &(0x7f0000000140)) 00:13:24 executing program 3: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) [ 805.071249][ T3562] usb 6-1: USB disconnect, device number 48 00:13:25 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0) 00:13:25 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 00:13:25 executing program 1: mkdir(&(0x7f0000000940)='./file2\x00', 0x0) 00:13:25 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000080)=""/155) [ 805.672779][T11044] usb 6-1: new high-speed USB device number 49 using dummy_hcd 00:13:25 executing program 2: rmdir(&(0x7f00000005c0)='./file0\x00') 00:13:25 executing program 0: r0 = socket(0x2, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) [ 805.912593][T11044] usb 6-1: Using ep0 maxpacket: 8 [ 806.033287][T11044] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 806.042786][T11044] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.076101][T11044] usb 6-1: config 0 descriptor?? [ 806.120415][T11044] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 806.842573][T11044] gspca_zc3xx: reg_w_i err -110 [ 807.472581][T11044] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 807.479139][T11044] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:13:28 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 00:13:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:28 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100000a, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) r2 = openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x10, r2, 0x0) preadv(r2, &(0x7f0000001580)=[{0x0}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) openat(0xffffffffffffffff, &(0x7f0000001640)='/proc/self/exe\x00', 0x0, 0x0) 00:13:28 executing program 2: lchown(0x0, 0xffffffffffffffff, 0xffffffffffffffff) 00:13:28 executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x6, &(0x7f0000000680)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x54, 0x10, 0x0, 0x34, 0xffffffffffffffff}, 0xb9) [ 808.367554][ T3562] usb 6-1: USB disconnect, device number 49 00:13:28 executing program 5: r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000015c0)={{0x12, 0x1, 0x0, 0xa5, 0x73, 0x39, 0x8, 0x46d, 0x8aa, 0x408d, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe7, 0x27, 0x95}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 00:13:28 executing program 0: bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffff8b}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x48, 0x4b29, &(0x7f0000000500)="b9ff0321000d698cb89e14f088a8000f88a800608864638877fbac140057e9", 0x0, 0x67, 0x0, 0x3a00}, 0x28) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x4) 00:13:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:28 executing program 1: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='\x00'}, 0x10) 00:13:28 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 00:13:28 executing program 2: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000240)=""/175, 0x26, 0xaf, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x6, 0xec, &(0x7f0000000080)=""/236, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2}, 0x10}, 0x80) 00:13:28 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) [ 808.932539][ T3562] usb 6-1: new high-speed USB device number 50 using dummy_hcd 00:13:28 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@volatile]}, {0x0, [0x0]}}, &(0x7f0000000040)=""/206, 0x27, 0xce, 0x1}, 0x20) 00:13:28 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 00:13:28 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43408) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x9, 0x2a8a0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc2, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x10970, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x0, 0x1f, 0x0, 0x881}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000e00)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x560}, 0x10040801) write$cgroup_int(r2, &(0x7f0000000200), 0x806087) [ 809.203751][ T3562] usb 6-1: Using ep0 maxpacket: 8 [ 809.324048][ T3562] usb 6-1: New USB device found, idVendor=046d, idProduct=08aa, bcdDevice=40.8d [ 809.333710][ T3562] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.407564][ T3562] usb 6-1: config 0 descriptor?? 00:13:29 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fda={0x77682a85}, @flat=@handle={0x70742a85}, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:29 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) [ 809.459882][ T3562] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08aa [ 809.819066][T15338] binder: 15336:15338 ioctl c0306201 20001480 returned -14 [ 810.202678][ T3562] gspca_zc3xx: reg_w_i err -110 [ 810.822543][ T3562] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 810.829023][ T3562] gspca_zc3xx: probe of 6-1:0.0 failed with error -110 00:13:31 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 00:13:31 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='\b', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 00:13:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:31 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f0007ffff0000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef010001000000d1f4655f000000000000000001000000000000000b000000800000000800000052", 0x61, 0x400}], 0x0, &(0x7f0000000600)=ANY=[]) 00:13:31 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x43408) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x9, 0x2a8a0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc2, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x10970, 0x0, 0x0, 0x7, 0x0, 0x1, 0x5, 0x0, 0x1f, 0x0, 0x881}, 0x0, 0x0, 0xffffffffffffffff, 0x2) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000e00)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x560}, 0x10040801) write$cgroup_int(r2, &(0x7f0000000200), 0x806087) [ 811.648650][ T3562] usb 6-1: USB disconnect, device number 50 00:13:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:31 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:31 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) 00:13:31 executing program 5: syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:31 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='\b', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 812.424807][T15360] binder: 15356:15360 ioctl c0306201 20001480 returned -14 [ 812.499238][T15360] binder: transaction release 11 bad object at offset 0, size 0 [ 812.507385][T15360] binder: transaction release 11 bad object at offset 0, size 0 [ 812.515654][T15360] binder: transaction release 11 bad object at offset 0, size 0 00:13:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:32 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 00:13:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder1\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000140)={@fda={0x77682a85}, @flat=@handle={0x77682a85}, @fda={0x77622a85}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000800)=[@enter_looper], 0x50, 0x0, &(0x7f00000014c0)="ad8d5c6fcc578f509709283293ec9c26fd7e947f70310baee9222624395239b070012a73627bff4bc88cd8efa84ca315cb62092ec070fd7454e1079d0859f4a049fb93234a537d476ab659d89e5e72eb"}) 00:13:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:32 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='\b', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 00:13:32 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="88"}) 00:13:32 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 00:13:32 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) [ 813.143291][T15378] binder: 15375:15378 ioctl 40046205 0 returned -22 [ 813.181570][T15376] binder: 15374:15376 ioctl c0306201 20001480 returned -14 [ 813.192823][T15378] binder: 15375:15378 ioctl c0306201 20000240 returned -11 [ 813.261347][T15376] binder: transaction release 18 bad object at offset 0, size 0 [ 813.264825][T15380] binder: 15379:15380 ioctl c0306201 20001480 returned -14 [ 813.269390][T15376] binder: transaction release 18 bad object at offset 0, size 0 [ 813.284336][T15376] binder: transaction release 18 bad object at offset 0, size 0 00:13:33 executing program 1: add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="eb", 0x1, 0xfffffffffffffffd) 00:13:33 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e40)=ANY=[], 0x1378) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000140)=[&(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)='\b', 0x1}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 00:13:33 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, 0x0, 0x0) 00:13:33 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)}, 0x0) 00:13:33 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(r0) 00:13:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:33 executing program 1: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, r0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf315bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r2, &(0x7f0000000040)="8a4727ff3fc745e43ce9673066b7236781e141342a73988f", 0x18) 00:13:33 executing program 5: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000b40)='/sys/module/nf_conntrack_tftp', 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:33 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x114}], 0x1}, 0x0) [ 814.212484][T15398] binder: 15396:15398 ioctl c0306201 20001480 returned -14 [ 814.248080][T15398] binder: transaction release 26 bad object at offset 0, size 0 00:13:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) close(r0) 00:13:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') read$FUSE(r0, 0x0, 0x0) [ 814.256201][T15398] binder: transaction release 26 bad object at offset 0, size 0 [ 814.264112][T15398] binder: transaction release 26 bad object at offset 0, size 0 00:13:34 executing program 1: r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/72, 0x48) 00:13:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:34 executing program 2: syz_clone(0x824000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) 00:13:34 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:13:34 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x114}], 0x1}, 0x0) 00:13:34 executing program 1: add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="bf", 0x1, 0xfffffffffffffffe) 00:13:34 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) close(r0) 00:13:34 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x4, &(0x7f00000015c0)=0x1, 0x4) [ 814.988246][T15418] binder: 15413:15418 ioctl c0306201 20001480 returned -14 [ 815.009775][T15418] binder: transaction release 31 bad object at offset 0, size 0 [ 815.018414][T15418] binder: transaction release 31 bad object at offset 0, size 0 [ 815.026343][T15418] binder: transaction release 31 bad object at offset 0, size 0 00:13:34 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x114}], 0x1}, 0x0) 00:13:35 executing program 2: r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="eb", 0x1, 0xfffffffffffffffd) keyctl$update(0x2, r0, &(0x7f0000000b80)='o', 0x1) 00:13:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:35 executing program 1: r0 = socket(0x11, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) 00:13:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) close(r0) 00:13:35 executing program 5: syz_clone(0xc2884680, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:35 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[], 0x114}], 0x1}, 0x0) [ 815.685269][T15432] binder: 15429:15432 ioctl c0306201 20001480 returned -14 00:13:35 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x77622a85}, @fda={0x73622a85}, @fda}, &(0x7f0000000240)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) [ 815.757028][T15432] binder_alloc: 15429: binder_alloc_buf, no vma 00:13:35 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r0, 0x89e0, &(0x7f0000000140)) 00:13:35 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x2}}}}}, 0x0) close(r0) 00:13:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:35 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[], 0x114}], 0x1}, 0x0) [ 816.144135][T15440] binder: 15439:15440 ioctl c0306201 20001480 returned -14 00:13:36 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000001040), 0x4) 00:13:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x77622a85}, @fda={0x73622a85}, @fda}, &(0x7f0000000240)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) [ 816.344932][T15448] binder: 15446:15448 ioctl c0306201 20001480 returned -14 00:13:36 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x2}}}}}, 0x0) close(r0) [ 816.397334][T15449] binder_alloc: 15446: binder_alloc_buf, no vma 00:13:36 executing program 5: syz_clone(0xc2884680, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:36 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[], 0x114}], 0x1}, 0x0) [ 816.685759][T15455] binder: 15454:15455 ioctl c0306201 20001480 returned -14 00:13:36 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000015c0)=0x1, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 00:13:36 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x77622a85}, @fda={0x73622a85}, @fda}, &(0x7f0000000240)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) [ 816.868805][T15461] binder: 15457:15461 ioctl c0306201 20001480 returned -14 [ 816.924067][T15464] binder_alloc: 15457: binder_alloc_buf, no vma 00:13:36 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0x0, 0x2}}}}}, 0x0) close(r0) 00:13:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:36 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) [ 817.186756][T15468] binder: 15466:15468 ioctl c0306201 20001480 returned -14 00:13:37 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x18, &(0x7f0000000140)={@fda={0x77682a85}, @flat=@handle={0x77682a85}, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:37 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000140)={@fda={0x77622a85}, @fda={0x73622a85}, @fda}, &(0x7f0000000240)={0x0, 0x20, 0x40}}}], 0x0, 0x0, 0x0}) 00:13:37 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000}}}}}, 0x0) close(r0) 00:13:37 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) [ 817.660694][T15478] binder: 15477:15478 ioctl c0306201 20001480 returned -14 [ 817.830325][T15483] binder: 15480:15483 ioctl c0306201 20001480 returned -14 00:13:37 executing program 5: syz_clone(0xc2884680, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:37 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:37 executing program 2: pselect6(0x40, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000580), 0x0) 00:13:37 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000}}}}}, 0x0) close(r0) 00:13:37 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) 00:13:37 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') read$eventfd(r0, &(0x7f0000000040), 0xfffffc96) 00:13:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @multicast1}}}}) 00:13:38 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100001300010000000000"], 0x114}], 0x1}, 0x0) 00:13:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000}}}}}, 0x0) close(r0) 00:13:38 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fda={0x77682a85}, @flat=@handle={0x77682a85}, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x2000000, &(0x7f00000001c0)="ed"}) 00:13:38 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 818.967732][T15508] binder: BINDER_SET_CONTEXT_MGR already set [ 818.974043][T15508] binder: 15505:15508 ioctl 40046207 0 returned -16 [ 819.034569][T15509] binder: 15505:15509 ioctl c0306201 20001480 returned -14 [ 819.080836][T15508] binder: 15505:15508 ioctl c0306201 20000440 returned -14 [ 819.156608][T15511] binder: 15510:15511 ioctl c0306201 20001480 returned -14 00:13:39 executing program 5: syz_clone(0xc2884680, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:39 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x10, 0x0, &(0x7f0000000600)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 00:13:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(0xffffffffffffffff) 00:13:39 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100001300010000000000"], 0x114}], 0x1}, 0x0) 00:13:39 executing program 1: syz_clone(0x93003180, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 819.463666][T15516] binder: 15513:15516 ioctl c0306201 20001480 returned -14 00:13:39 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000280)=0x1000, 0x4) 00:13:39 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100001300010000000000"], 0x114}], 0x1}, 0x0) 00:13:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(0xffffffffffffffff) [ 819.699003][T15524] binder: 15522:15524 ioctl c0306201 20001480 returned -14 00:13:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fda={0x77682a85}, @flat=@handle={0x77682a85}, @fda={0x77622a85}}, &(0x7f0000000240)={0x2, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:39 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:39 executing program 2: timer_create(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 820.187861][T15534] binder: 15533:15534 ioctl c0306201 20001480 returned -14 [ 820.428411][T15537] binder: 15535:15537 ioctl c0306201 20001480 returned -14 00:13:40 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @multicast1}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) close(0xffffffffffffffff) 00:13:40 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100001300010000000000000000000301"], 0x114}], 0x1}, 0x0) 00:13:40 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fda={0x77682a85}, @flat=@handle={0x77682a85}, @fda={0x77622a85}}, &(0x7f0000000240)={0x2, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:40 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:40 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x1032, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x1032, 0xffffffffffffffff, 0x8000000) [ 820.727657][T15544] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 820.781109][T15542] binder: BINDER_SET_CONTEXT_MGR already set [ 820.787490][T15542] binder: 15541:15542 ioctl 40046207 0 returned -16 00:13:40 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100001300010000000000000000000301"], 0x114}], 0x1}, 0x0) [ 820.906705][T15542] binder: 15541:15542 ioctl c0306201 20001480 returned -14 [ 820.969693][T15547] binder: 15546:15547 ioctl c0306201 20001480 returned -14 00:13:40 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:40 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x11, &(0x7f0000000000)={@multicast, @dev, @void, {@x25}}, 0x0) 00:13:40 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[], 0x32623) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x81, 0x7, 0x7, 0x0, 0x0, 0x14104, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f00000002c0)}, 0x40509, 0x10001, 0x7, 0x8, 0x6, 0x0, 0x39, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x6, r1, 0x1b) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x12}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x1100000000000044, 0x43408) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x8, 0xf7, 0x3, 0xa1, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xbd9, 0x818592ea8fdcfb2e, @perf_bp={&(0x7f0000000000), 0x4}, 0x9100, 0x7, 0x1, 0x1, 0x7, 0x1f, 0x8, 0x0, 0x4b, 0x0, 0x7}, 0x0, 0xf, r0, 0xf) close(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_int(r4, 0x0, 0x0) 00:13:41 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:41 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x8, 0x3, &(0x7f0000001340)=@framed, &(0x7f00000013c0)='GPL\x00', 0x1, 0x88, &(0x7f0000001400)=""/136, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x8, 0x0, 0x0}}, 0x10) [ 821.336141][T15555] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 821.354765][T15556] binder: 15552:15556 ioctl c0306201 20001480 returned -14 00:13:41 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100001300010000000000000000000301"], 0x114}], 0x1}, 0x0) 00:13:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000014c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f0000001700)=""/37, 0x25}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x3f) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002340)=ANY=[@ANYBLOB="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"/1337], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) socket$kcm(0x10, 0x7, 0x0) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r2, 0x4) 00:13:41 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 821.555233][T15562] binder: 15559:15562 ioctl c0306201 20001480 returned -14 00:13:41 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000014c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f0000001700)=""/37, 0x25}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x3f) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002340)=ANY=[@ANYBLOB="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"/1337], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) socket$kcm(0x10, 0x7, 0x0) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r2, 0x4) 00:13:41 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 821.880912][T15569] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 821.974786][T15571] binder: 15567:15571 ioctl c0306201 20001480 returned -14 00:13:41 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, &(0x7f0000000140)=""/198, 0x26, 0xc6, 0x1}, 0x20) 00:13:41 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c"], 0x114}], 0x1}, 0x0) [ 822.140067][T15577] binder: 15574:15577 ioctl c0306201 20001480 returned -14 00:13:41 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000014c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, 0x0, 0x0, &(0x7f0000001700)=""/37, 0x25}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000140)=0x3f) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002340)=ANY=[@ANYBLOB="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"/1337], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10) socket$kcm(0x10, 0x7, 0x0) bpf$LINK_DETACH(0xf, &(0x7f0000000000)=r2, 0x4) [ 822.191444][ T1199] ieee802154 phy0 wpan0: encryption failed: -22 [ 822.198097][ T1199] ieee802154 phy1 wpan1: encryption failed: -22 00:13:42 executing program 2: perf_event_open$cgroup(&(0x7f00000003c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8101}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 00:13:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 822.435927][T15580] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 00:13:42 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0xe, 0x3, &(0x7f0000001340)=@framed, &(0x7f00000013c0)='GPL\x00', 0x1, 0x88, &(0x7f0000001400)=""/136, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x15, 0x1, &(0x7f0000000140)=@raw=[@generic], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r0}, 0x80) [ 822.536966][T15583] binder: 15581:15583 ioctl c0306201 20001480 returned -14 00:13:42 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c"], 0x114}], 0x1}, 0x0) [ 822.639311][T15587] binder: BINDER_SET_CONTEXT_MGR already set [ 822.646099][T15587] binder: 15586:15587 ioctl 40046207 0 returned -16 00:13:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:42 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x107200, 0x0) [ 822.696392][T15591] binder: 15586:15591 ioctl c0306201 20001480 returned -14 00:13:42 executing program 3: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc028660f, &(0x7f00000005c0)=0x443000033) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000740)='memory.swap.events\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x4ea00) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000140)='wlan1\x00\x1b\x1a\xec\xb5\x12\x03F\xd9U\x02\x00\x00\x00 \x00\x00\x00\x00\x01\x00\x01\x00,C\xfdj\xe3\x8d\xe3\xd6\xe0|6l\xe9\xd9;\x13\xdf\xf7\xber\'\x8a\xd5\xd5\xe1\xf5\\\x9b\xb2\a\xde\xbbg\xc18\x84\xb5:f\xcb\xe8oO\x8dArYZ\xe1\x1f\xebX\xf5\xfb\xaad\x1a\xa0\xb1\x9c\xac\xe8\xff^9P\xee\x8aG\xd52\x0e\xd8\a\xca\xc8~\x82\xf6\xaaj\xe5\xf7\x19\xeb#;|\xabA1\xaa\xbc7Tf\xf1Y\x1c\xed~\xe9\xe9\xf9\xcfW0\x16\x9e2I[\xcf\xf7\xb0K\x1c\x1c\x06h\x8cd\f6\xfe\xb7\xbf\xae\xea\x99\xea\xb3G\xd5\x8c\x80\x907\x9f\x95\x86\"\x8a\x96\xf5\x19\xb6\x19\twp\xfa\xa9\xd8\xbfSa\xb9\v3\xb1\x05\xb9\xf93\xac6\xafXf\xfd\xde\x1e\x83\x7f\x80\xddL[t% /H\xed\xea\x80*NA\xbaX\r\xea\v\x83<\xa1\x05{\xc6lw\xd24\xfe\xd6\xa1SV\x03\x88eGXC^w\x11D\xce\r 5R+y\xc3Dew\xa4O\xfa\rc\x170\xdbA\xfe\xe9\xa7\xb3\x91\x88(\f8\x14\n;\xd8\x02\xa8\x135\x92\xf5\xe4JV\x0f\x10\xd7\x06\x86z\t\x13\xc2\xe5E\xc3\xf2Mb\xf0+\xed{y\xd7\xf2r\xc9\xcbVq\x01') 00:13:42 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:42 executing program 1: socketpair(0x2, 0x2, 0x0, &(0x7f0000000700)) [ 823.013904][T15598] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 823.075184][T15600] binder: 15597:15600 ioctl c0306201 20001480 returned -14 00:13:42 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x2}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000000380)=""/4096, 0x29, 0x1000, 0x1}, 0x20) 00:13:42 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c"], 0x114}], 0x1}, 0x0) 00:13:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 823.263214][T15603] binder: BINDER_SET_CONTEXT_MGR already set [ 823.269335][T15603] binder: 15601:15603 ioctl 40046207 0 returned -16 [ 823.305440][T15608] binder: 15601:15608 ioctl c0306201 20001480 returned -14 00:13:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040), 0x10) 00:13:43 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x84, 0x78, &(0x7f0000000000), 0x4) 00:13:43 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:43 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000022c0)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000002200)=[@dstaddrv4={0x10, 0x84, 0x9, @local={0xac, 0x14, 0x0}}], 0x10}, 0x0) [ 823.599637][T15615] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 823.617310][T15614] binder: 15613:15614 ioctl c0306201 20001480 returned -14 [ 823.669060][T15616] binder_alloc: 15613: binder_alloc_buf, no vma 00:13:43 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c00"], 0x114}], 0x1}, 0x0) 00:13:43 executing program 1: socketpair(0x2, 0x3, 0x6, 0x0) 00:13:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:43 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[{0xc}], 0xc}, 0x0) [ 823.984623][T15625] binder: BINDER_SET_CONTEXT_MGR already set [ 823.990820][T15625] binder: 15622:15625 ioctl 40046207 0 returned -16 [ 824.047391][T15626] binder: 15622:15626 ioctl c0306201 20001480 returned -14 00:13:43 executing program 2: openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0) [ 824.098386][T15627] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. 00:13:43 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:44 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c00"], 0x114}], 0x1}, 0x0) 00:13:44 executing program 1: syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60d0490700380700fe800000000000000000000097"], 0x0) [ 824.270222][T15632] binder: 15629:15632 ioctl c0306201 20001480 returned -14 [ 824.307522][T15632] binder_alloc: 15629: binder_alloc_buf, no vma 00:13:44 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f0000000000), &(0x7f0000000100)=0x8) 00:13:44 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:44 executing program 2: chmod(&(0x7f0000000140)='./file0\x00', 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) link(&(0x7f0000000340)='./file0\x00', 0x0) [ 824.578445][T15640] binder: BINDER_SET_CONTEXT_MGR already set [ 824.585341][T15640] binder: 15636:15640 ioctl 40046207 0 returned -16 [ 824.615337][T15638] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 824.619116][T15640] binder: 15636:15640 ioctl c0306201 20001480 returned -14 00:13:44 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) 00:13:44 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:44 executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="14010000130001000000000000000000030100800c00"], 0x114}], 0x1}, 0x0) [ 824.884498][T15647] binder: 15643:15647 ioctl c0306201 20001480 returned -14 00:13:44 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000200)={0x1c, 0x1c}, 0x1c) 00:13:44 executing program 2: mount(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) [ 824.933606][T15647] binder_alloc: 15643: binder_alloc_buf, no vma 00:13:44 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 825.178111][T15653] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 825.192396][T15656] binder: BINDER_SET_CONTEXT_MGR already set [ 825.198635][T15656] binder: 15651:15656 ioctl 40046207 0 returned -16 [ 825.274321][T15660] binder: 15651:15660 ioctl c0306201 20001480 returned -14 00:13:45 executing program 1: munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 00:13:45 executing program 2: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:13:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:45 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c) r1 = dup2(r0, r0) listen(r1, 0x3f) 00:13:45 executing program 3: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = socket$inet6_sctp(0x1c, 0x5, 0x84) r2 = dup2(r1, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x8002, &(0x7f0000000140), 0x98) [ 825.571736][T15663] binder: BINDER_SET_CONTEXT_MGR already set [ 825.578598][T15663] binder: 15662:15663 ioctl 40046207 0 returned -16 00:13:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:45 executing program 1: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x15, &(0x7f00000000c0), 0x8) 00:13:45 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) [ 825.906346][T15675] binder: BINDER_SET_CONTEXT_MGR already set [ 825.912573][T15675] binder: 15672:15675 ioctl 40046207 0 returned -16 [ 825.983366][T15675] binder: 15672:15675 ioctl c0306201 20001480 returned -14 00:13:45 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x84}], 0x10}, 0x0) 00:13:45 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:46 executing program 3: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) link(&(0x7f0000000340)='./file0\x00', 0x0) 00:13:46 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x84, 0xc, &(0x7f0000000040)=0xfffffffe, 0x4) 00:13:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:46 executing program 1: linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) [ 826.652836][T15694] binder: 15692:15694 ioctl c0306201 20001480 returned -14 00:13:46 executing program 4: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0x40, &(0x7f00000000c0)='cubic\x00', 0x4) 00:13:46 executing program 3: renameat(0xffffffffffffffff, &(0x7f0000001240)='./file0/file0\x00', 0xffffffffffffffff, 0x0) 00:13:46 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:46 executing program 2: futimesat(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x80000000}}) 00:13:46 executing program 1: mount(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 00:13:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 827.145950][T15708] binder: 15706:15708 ioctl c0306201 20001480 returned -14 00:13:47 executing program 3: mount(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) 00:13:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000240)={0x0, @in, 0x0, 0x0, 0x385}, 0x98) 00:13:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 827.415790][T15714] binder: 15710:15714 ioctl c0306201 20001480 returned -14 00:13:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10, 0x2}, 0x10) r1 = dup(r0) sendto$inet(r1, &(0x7f0000000080)="9d", 0x1, 0x0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 00:13:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, @in, 0x0, 0x0, 0x300}, 0x98) 00:13:47 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x8, &(0x7f0000000200), 0x4) 00:13:47 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:47 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_int(r0, 0x84, 0x13, &(0x7f0000000000), 0x4) [ 827.788785][T15721] binder: 15720:15721 ioctl c0306201 20001480 returned -14 00:13:47 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:47 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000040), 0x10) 00:13:47 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000380)=@un=@file={0xa}, 0x1b) [ 828.090479][T15730] binder: 15726:15730 ioctl c0306201 20001480 returned -14 00:13:48 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x1a, &(0x7f0000000440), 0x8) 00:13:48 executing program 3: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') 00:13:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 828.289847][T15734] binder: BINDER_SET_CONTEXT_MGR already set [ 828.296519][T15734] binder: 15732:15734 ioctl 40046207 0 returned -16 00:13:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xf}}]}}]}, 0x3c}}, 0x0) 00:13:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:48 executing program 2: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)={&(0x7f0000000b00)='./file0/file0\x00'}, 0x10) [ 828.657089][T15744] binder: 15741:15744 ioctl c0306201 20001480 returned -14 00:13:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x5, &(0x7f0000000040)={@in6={{0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x0, 0x0, "374bcf1ef3c14374b7653e6713139e902d95b62349000000000000d4234241f72fe320e3e0050e49c552398b6e62b9c48f3e92536bc25000f94c49b0b32c72fbf01da019f2db0ee26d2600000800"}, 0xd8) 00:13:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_ISOLATION_MARK={0xa}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0xfffffffffffffee6}]}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 00:13:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 00:13:48 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:48 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3000}, 0x4) 00:13:49 executing program 4: sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0xe9fda234e8343d8a) [ 829.237435][T15761] binder: 15756:15761 ioctl c0306201 20001480 returned -14 [ 829.251703][T15759] netlink: 'syz-executor.3': attribute type 43 has an invalid length. [ 829.260283][T15759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:13:49 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000006300)=@bloom_filter={0x1e, 0x0, 0x5, 0x1, 0x0, 0x1}, 0x48) 00:13:49 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) 00:13:49 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x20c000, 0x1000, 0x1000000}, 0x20) 00:13:49 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:49 executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={r0, &(0x7f00000001c0)}, 0x20) [ 829.746623][T15772] binder: 15770:15772 ioctl c0306201 20001480 returned -14 00:13:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x18}]}, 0x1c}}, 0x0) 00:13:49 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 00:13:49 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x3fffffffffffe51, 0x0) sendmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 00:13:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x49, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) [ 830.050733][T15781] binder: 15778:15781 ioctl c0306201 20001480 returned -14 00:13:49 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 830.200070][T15783] netlink: 'syz-executor.1': attribute type 24 has an invalid length. 00:13:50 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040), 0x4) [ 830.404908][T15792] binder: 15788:15792 ioctl c0306201 20001480 returned -14 00:13:50 executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x80) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4000113, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) socket$inet(0x2, 0x0, 0x3) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000740)={'broute\x00', 0x0, 0x4, 0x47, [0x0, 0x0, 0x7ff, 0x5771deb3, 0x6, 0x400], 0x2, &(0x7f0000000680)=[{}, {}], &(0x7f00000006c0)=""/71}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x31, @mcast2, @private0, 0x0, 0x7800, 0x989, 0x9}}) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000ac0)=""/4096, 0x1000, 0x40000100, 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001ac0), 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x1c, r0, 0x2, 0x0, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5}]}, 0x1c}}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={0x0}, 0x1, 0x0, 0x0, 0x40005}, 0x40801) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001d80)={0x3c, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x20040000) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001e80), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x84, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'macsec0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0xc0) 00:13:50 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) 00:13:50 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 830.596609][T15796] binder: 15794:15796 ioctl c0306201 20001480 returned -14 00:13:50 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1, &(0x7f00000018c0)=""/245, 0xf5}, 0x2020) sendmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) [ 830.937949][T15806] binder: BINDER_SET_CONTEXT_MGR already set [ 830.944319][T15806] binder: 15802:15806 ioctl 40046207 0 returned -16 [ 830.984914][T15806] binder: 15802:15806 ioctl c0306201 20001480 returned -14 00:13:50 executing program 4: pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, 0x0, 0x0) [ 831.119761][T15809] binder: 15808:15809 ioctl c0306201 20001480 returned -14 00:13:50 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:51 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private0}, 0x80) 00:13:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0x2}}}, 0x24}}, 0x0) 00:13:51 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="3d9bcad8832cc7405e413e1c67bb0cfbd845d81b9e00270939890a1221e600d272963092d3348a784a271d270ae0182fd5426efd0e17950f28ee9cb3fed8902fc7", 0x41) 00:13:51 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000a80)={'syztnl2\x00', 0x0}) [ 831.602846][T15817] binder: BINDER_SET_CONTEXT_MGR already set [ 831.609007][T15817] binder: 15816:15817 ioctl 40046207 0 returned -16 [ 831.696007][T15819] binder: 15818:15819 ioctl c0306201 20001480 returned -14 [ 831.712059][T15822] binder: 15816:15822 ioctl c0306201 20001480 returned -14 00:13:51 executing program 2: fchmodat(0xffffffffffffffff, 0x0, 0x0) 00:13:51 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:51 executing program 1: munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) 00:13:51 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000c80)={&(0x7f0000000740)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0}, 0x0) 00:13:51 executing program 2: shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x4000)=nil, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x1000)=nil, 0x0) [ 832.303384][T15837] binder: 15834:15837 ioctl c0306201 20001480 returned -14 00:13:52 executing program 1: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) [ 832.368746][T15838] binder: BINDER_SET_CONTEXT_MGR already set [ 832.374953][T15838] binder: 15835:15838 ioctl 40046207 0 returned -16 [ 832.430066][T15840] binder: 15835:15840 ioctl c0306201 20001480 returned -14 00:13:52 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x6) 00:13:52 executing program 0: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:52 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, r0, 0x0, 0x0, 0x0}, 0x30) 00:13:52 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0x40305828, 0x0) 00:13:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:52 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x2) 00:13:52 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) [ 832.957755][T15850] binder: 15849:15850 ioctl c0306201 20001480 returned -14 [ 833.020817][T15856] binder: BINDER_SET_CONTEXT_MGR already set [ 833.027282][T15856] binder: 15853:15856 ioctl 40046207 0 returned -16 00:13:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000340)) 00:13:52 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 833.074482][T15859] binder: 15853:15859 ioctl c0306201 20001480 returned -14 00:13:52 executing program 1: r0 = epoll_create(0x4) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0xc3) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x20002007}) 00:13:52 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:53 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f00000002c0)="eb3c8f000000732e66617400020101000240008080f801", 0x17}, {0x0, 0x0, 0x10000001000}], 0x3014014, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) fallocate(r0, 0x100000001, 0x0, 0x2811fdff) r1 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0) creat(0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e80), 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000000a) 00:13:53 executing program 3: syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x8000000, 0x2a, &(0x7f0000000200)=[{&(0x7f0000010000)="02020202020202027468697320697320616e206f6366733220766f6c756d650002020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d6500020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202027468697320697320616e206f6366733220766f6c756d65000202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202024f434653563200002759ebdbffffffff0000000000800000000000000000000000000000000000000000000031000000000000000000000048c3655f0000000048c3655f000000000000000000000000020000000000000000000000000000002759ebdb00000000000000000000000000000000000000000000000000000000d0a0f17f93080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a0000001400000000000000000048c3655f00000000000000000300000058bf000007000000050000000000000006000000000000000c0000000c00000001000000133439040300"/8480, 0x2120}, {&(0x7f0000012200)="000000000000000000000000000000006b66a41b92d14cca853f99c548cbb63c000000000000000000000000000000000000000000000000000100008438e2ad097c57b5fd01f23d00"/96, 0x60, 0x2140}, {&(0x7f0000012300)="47524f5550303100c00f007ede3300002759ebdb0000000000000000000000000b0000000000000003000000000000001dfaf730217f00000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0300"/2464, 0x9a0, 0x3000}, {&(0x7f0000012d00)="47524f5550303100c00f0d01fb0000002759ebdb000000000000000000000000080000000000000004000000000000008a9a0183210000000000000000000000ffff0300"/96, 0x60, 0x4000}, {&(0x7f0000012e00)="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", 0x100, 0x5000}, {&(0x7f0000012f00)="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", 0x280, 0x6000}, {&(0x7f0000013200)="494e4f44453031002759ebdbffff0300000000000000000000000000000000000000000000000000a48101001100000048c3655f0000000048c3655f0000000048c3655f000000000000000000000000070000000000000000000000000000002759ebdb0000000000000000000000000000000000000000000000000000000087f4745ab402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f300"/224, 0xe0, 0x7000}, {&(0x7f0000013300)="494e4f44453031002759ebdbffff0400000000000d010000000000000000000000d0100000000000a48101009104000048c3655f0000000048c3655f0000000048c3655f000000000000000000000000080000000000000000000000000000002759ebdb0000000000000000000000000000000000000000000000000000000077a06576bc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000120000000d0100000d010100f30001000000000000000000fb0000000d0100000400000000000000", 0xe0, 0x8000}, {&(0x7f0000013400)="494e4f44453031002759ebdbffff0500000000000100000000000000000000000010000000000000a48101001100000048c3655f0000000048c3655f0000000049c3655f000000000000000000000000090000000000000000000000000000002759ebdb00000000000000000000000000000000000000000000000000000000cf25fcd7c905000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000010000001146000000000000", 0xe0, 0x9000}, {&(0x7f0000013500)="494e4f44453031002759ebdbffff0600000000000001000000000000000000000000100000000000a48101001102000048c3655f0000000048c3655f0000000048c3655f0000000000000000000000000a0000000000000000000000000000002759ebdb0000000000000000000000000000000000000000000000000000000091807968b206000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000000100001101000000000000", 0xe0, 0xa000}, {&(0x7f0000013600)="494e4f44453031002759ebdbffff0700000000000080000000000000000000000000000800000000a48101009104000048c3655f0000000048c3655f0000000048c3655f0000000000000000000000000b0000000000000000000000000000002759ebdb00000000000000000000000000000000000000000000000000000000f1a2e699b5060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000234a000000800000007e0100f30002000000000000000000de330000007e00000300000000000000ff01000000020000007e00"/256, 0x100, 0xb000}, {&(0x7f0000013700)="494e4f44453031002759ebdbffff0800000000000600000000000000000000000060000000000000a48101001110000048c3655f0000000048c3655f0000000049c3655f0000000000000000000000000c0000000000000000000000000000002759ebdb000000000000000000000000000000000000000000000000000000000e5cbeda5805000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3000200000000000000000000000000000002000000124600000000000002000000040000001a4600"/256, 0x100, 0xc000}, {&(0x7f0000013800)="494e4f44453031002759ebdbffff0900000000000600000000000000000000000060000000000000a48101001110000048c3655f0000000048c3655f000000004ac3655f0000000000000000000000000d0000000000000000000000000000002759ebdb0000000000000000000000000000000000000000000000000000000063b598472c06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3000200000000000000000000000000000002000000164600000000000002000000040000001e4600"/256, 0x100, 0xd000}, {&(0x7f0000013900)="494e4f44453031002759ebdbffff0a0000000000000000000000000000000000380f000000000000ed4102001100000048c3655f0000000048c3655f0000000048c3655f0000000000000000000000000e0000000000000000000000000000002759ebdb0000000000000000000000000000000000000100000000000000000091fcbf40900700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000000e00000000000000100001022e0000000600000000000000280f02022e2e00"/256, 0x100, 0xe000}, {&(0x7f0000013a00)="494e4f44453031002759ebdbffff0b00000000000004000000000000000000000000400000000000a48101009104000048c3655f0000000048c3655f0000000048c3655f0000000000000000000000000f0000000000000000000000000000002759ebdb00000000000000000000000000000000000000000000000000000000c17ee5cf7f010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000004000000040100f30001000000000000000000ff030000000400001142000000000000", 0xe0, 0xf000}, {&(0x7f0000013b00)="494e4f44453031002759ebdbffff0c00000000000004000000000000000000000000400000000000a48101009104000048c3655f0000000048c3655f0000000048c3655f000000000000000000000000100000000000000000000000000000002759ebdb0000000000000000000000000000000000000000000000000000000019164cccd4030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000004000000040100f30001000000000000000000fe030000000400002246000000000000", 0xe0, 0x10000}, {&(0x7f0000013c00)="494e4f44453031002759ebdbffff0d00000000000040000000000000000000000000000400000000a48101001101000048c3655f0000000048c3655f0000000048c3655f000000000000000000000000110000000000000000000000000000002759ebdb00000000000000000000000000000000000000000000000000000000ae61dae4fc06000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000004000001102000000000000", 0xe0, 0x11000}, {&(0x7f0000013d00)="494e4f44453031002759ebdbffff0e00000000000000000000000000000000000000000000000000a4810100d100000048c3655f0000000048c3655f0000000048c3655f000000000000000000000000120000000000000000000000000000002759ebdb00000000000000000000000000000000000000000000000000000000bb14c8e445000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300f00"/224, 0xe0, 0x12000}, {&(0x7f0000013e00)="494e4f44453031002759ebdbffff0f00000000000000000000000000000000000000000000000000a48101001108000048c3655f0000000048c3655f0000000048c3655f000000000000000000000000130000000000000000000000000000002759ebdb000000000000000000000000000000000000000000000000000000005e6636c7c80500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e70100"/224, 0xe0, 0x13000}, {&(0x7f0000013f00)="494e4f44453031002759ebdbffff1000000000000200000000000000000000000020000000000000a48101001110000048c3655f0000000048c3655f000000004ac3655f000000000000000000000000140000000000000000000000000000002759ebdb00000000000000000000000000000000000000000000000000000000ff378188c004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000020000001446000000000000", 0xe0, 0x14000}, {&(0x7f0000014000)="494e4f44453031002759ebdbffff1100000000000200000000000000000000000020000000000000a48101001110000048c3655f0000000048c3655f000000004ac3655f000000000000000000000000150000000000000000000000000000002759ebdb00000000000000000000000000000000000000000000000000000000df2f78cc3206000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30001000000000000000000000000000000020000001846000000000000", 0xe0, 0x15000}, {&(0x7f0000014100)="c03b399800000004000000000000100000004000000000010000000100000001000000000000000000000000000000006b66a41b92d14cca853f99c548cbb63c0000000100"/96, 0x60, 0x211000}, {&(0x7f0000014200)="47524f555030310000010004ff0300002759ebdb0000000000000000000000000f000000000000001142000000000000c68076331202000000000000000000000100"/96, 0x60, 0x4211000}, {&(0x7f0000014300)="7024f50c00000000803a0900803a090010270000060000000000000005000000380f000000000000ed4103001100000048c3655f0000000048c3655f0000000048c3655f000000000000000000000000050000000000000000000000000000002759ebdb000000000000000000000000000000000000010000000000000000007d92db80760200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000000500000000000000100001022e0000000500000000000000280f02022e2e00"/256, 0x100, 0x4612000}, {&(0x7f0000014400)="000000000000000000000000000000000000000000000000e511e8a7a70200000200"/64, 0x40, 0x4612fe0}, {&(0x7f0000014500)="000000000000000000000000000000000000000000000000b6ad528d05000000c024f50c0000000001000000010000000200"/64, 0x40, 0x4613fe0}, {&(0x7f0000014600)="00000000000000000000000000000000000000000000000090aefd31bc000000", 0x20, 0x4614fe0}, {&(0x7f0000014700)="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"/288, 0x120, 0x4615fe0}, {&(0x7f0000014900)="000000000000000000000000000000000000000000000000e0c186a1a40100000200"/64, 0x40, 0x4616fe0}, {&(0x7f0000014a00)="000000000000000000000000000000000000000000000000b6ad528d05000000c124f50c0000000001000000010000000200"/64, 0x40, 0x4617fe0}, {&(0x7f0000014b00)="000000000000000000000000000000000000000000000000bc07256bbf000000", 0x20, 0x4618fe0}, {&(0x7f0000014c00)="000000000000000000000000000000000000000000000000eeffe338000000000300"/64, 0x40, 0x4619fe0}, {&(0x7f0000014d00)="0000000000000000000000000000000000000000000000009a048ad7060000000400"/64, 0x40, 0x461afe0}, {&(0x7f0000014e00)="0000000000000000000000000000000000000000000000001f5df088060000000500"/64, 0x40, 0x461bfe0}, {&(0x7f0000014f00)="00000000000000000000000000000000000000000000000033f428d205000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x461cfe0}, {&(0x7f0000015000)="00000000000000000000000000000000000000000000000073751915020100000300"/64, 0x40, 0x461dfe0}, {&(0x7f0000015100)="0000000000000000000000000000000000000000000000009a048ad7060000000400"/64, 0x40, 0x461efe0}, {&(0x7f0000015200)="0000000000000000000000000000000000000000000000001f5df088060000000500"/64, 0x40, 0x461ffe0}, {&(0x7f0000015300)="00000000000000000000000000000000000000000000000033f428d205000000000000000000000001000000000000000000000000000000000000000000000000000000000000000100"/96, 0x60, 0x4620fe0}, {&(0x7f0000015400)="000000000000000000000000000000000000000000000000737519150201000047524f555030310000010004fe0300002759ebdb00000000000000000000000010000000000000002246000000000000df4dd2132c00000000000000000000000300"/128, 0x80, 0x4621fe0}, {&(0x7f0000015500)="494e4f44453031002759ebdb0000010000000000000000000000000000000000380f000000000000ed410200010000004ac3655f000000004ac3655f000000004ac3655f000000000000000000000000234600000000000000000000000000002759ebdb00000000000000000000000000000000000001000000000000000000ea2d15cac90400000000000000000000000000000000000022460000000000000000000000000000000000000000000000000000000000000000000000000000380f0000000000002346000000000000100001022e0000000500000000000000280f02022e2e00"/256, 0x100, 0x4623000}, {&(0x7f0000015600)="47524f5550303100c00f0002ff0101002759ebdb0000000000000000000000000b00000000000000007e00000000000076ae9cec4103000000000000000000000100"/96, 0x60, 0x7e00000}], 0x0, &(0x7f0000015700)) [ 833.522984][T15870] binder: 15867:15870 ioctl c0306201 20001480 returned -14 [ 833.556741][T15872] binder: BINDER_SET_CONTEXT_MGR already set [ 833.563099][T15872] binder: 15868:15872 ioctl 40046207 0 returned -16 00:13:53 executing program 2: syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20bc, 0x5500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x20, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x6, {0x9}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}, [{{0x9, 0x5, 0x2, 0x3, 0x40}}]}}}]}}]}}, 0x0) 00:13:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x2, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 833.646086][T15875] binder: 15868:15875 ioctl c0306201 20001480 returned -14 00:13:53 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 833.704223][T15877] loop4: detected capacity change from 0 to 16 [ 833.818560][ T24] audit: type=1800 audit(833.559:11): pid=15877 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048593 res=0 errno=0 [ 833.858603][T15878] loop3: detected capacity change from 0 to 264192 00:13:53 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 834.001761][T15878] (syz-executor.3,15878,1):ocfs2_parse_options:1477 ERROR: Invalid heartbeat mount options [ 834.012440][T15878] (syz-executor.3,15878,1):ocfs2_fill_super:1186 ERROR: status = -22 00:13:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0x80045500, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) [ 834.139235][T15884] binder: 15882:15884 ioctl c0306201 20001480 returned -14 00:13:53 executing program 3: syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20bc, 0x5500, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) 00:13:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 834.247888][T15887] binder: BINDER_SET_CONTEXT_MGR already set [ 834.254781][T15887] binder: 15886:15887 ioctl 40046207 0 returned -16 [ 834.333010][T15889] binder: 15886:15889 ioctl c0306201 20001480 returned -14 [ 834.343372][ T3583] usb 3-1: new high-speed USB device number 12 using dummy_hcd 00:13:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 00:13:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 834.592633][ T3583] usb 3-1: Using ep0 maxpacket: 8 [ 834.651714][T15893] binder: 15892:15893 ioctl c0306201 20001480 returned -14 [ 834.713411][ T3583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 834.725167][ T3583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 00:13:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)) 00:13:54 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 834.850701][T15898] binder: 15896:15898 ioctl c0306201 20001480 returned -14 00:13:54 executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000000)=0x4) [ 834.903166][ T3583] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.40 [ 834.913020][ T3583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.921162][ T3583] usb 3-1: Product: syz [ 834.925646][ T3583] usb 3-1: Manufacturer: syz [ 834.930371][ T3583] usb 3-1: SerialNumber: syz [ 834.943869][T11044] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 835.182832][T11044] usb 4-1: Using ep0 maxpacket: 8 [ 835.216279][T15902] binder: 15899:15902 ioctl c0306201 20001480 returned -14 [ 835.303535][T11044] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 835.394665][ T3583] usbhid 3-1:1.0: can't add hid device: -22 [ 835.401034][ T3583] usbhid: probe of 3-1:1.0 failed with error -22 [ 835.441575][ T3583] usb 3-1: USB disconnect, device number 12 [ 835.492893][T11044] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.40 [ 835.502342][T11044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.510488][T11044] usb 4-1: Product: syz [ 835.515002][T11044] usb 4-1: Manufacturer: syz [ 835.519758][T11044] usb 4-1: SerialNumber: syz [ 835.600619][T11044] usbhid 4-1:1.0: couldn't find an input interrupt endpoint 00:13:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000140)=""/112) 00:13:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:55 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x52269493bf8ab82d, 0x2, &(0x7f0000000000)=@raw=[@cb_func], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:13:55 executing program 2: syz_clone(0x10120100, 0x0, 0x0, 0x0, 0x0, 0x0) 00:13:55 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 835.806124][ T3583] usb 4-1: USB disconnect, device number 8 [ 835.931257][T15910] binder: 15907:15910 ioctl c0306201 20001480 returned -14 [ 835.966221][T15911] binder: 15908:15911 ioctl c0306201 20001480 returned -14 00:13:56 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 00:13:56 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f0000002440)={0x0, 0x0, 0x1, @thr={&(0x7f0000002300)="81931672f1b0633a742b67dc0acfcf5aced400cccbf0cac1bb2465c4934c3075087fca0c38546c6daeb448628a8238412095d673ebf101c9291a1e448d71dab0d086a83acf8539085f9eed29f83faa89e6409bbd7e61c8502919ae5920ec844ec18d95", &(0x7f0000002400)}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_uring_enter(0xffffffffffffffff, 0x71dd, 0x0, 0x2, &(0x7f00000000c0)={[0x6]}, 0x8) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 00:13:56 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89e0, 0x0) 00:13:56 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:56 executing program 2: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x768d, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000002440)={0x0, 0x0, 0x1, @thr={&(0x7f0000002300)="81931672f1b0633a742b67dc0acfcf5aced400cccbf0cac1bb2465c4934c3075087fca0c38546c6daeb448628a8238412095d673ebf101c9291a1e448d71dab0d086a83acf8539085f9eed", &(0x7f0000002400)="2468ade4473bd6b750f7170e4920d7ff340e751c643def89b82e392a3b30dd2443439e1002561aee28ce8c06ffc64d7e77322645678c8d43"}}, &(0x7f0000002480)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) io_uring_enter(0xffffffffffffffff, 0x71dd, 0x0, 0x2, &(0x7f00000000c0)={[0x6]}, 0x8) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) r3 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000002180)='smaps\x00') timer_create(0x1, &(0x7f0000000040)={0x0, 0x0, 0x4, @tid=r1}, &(0x7f0000002140)) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) [ 836.483822][T15925] binder: 15921:15925 ioctl c0306201 20001480 returned -14 [ 836.505174][T15924] binder: 15918:15924 ioctl c0306201 20001480 returned -14 00:13:56 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 00:13:56 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f0000002440)={0x0, 0x0, 0x1, @thr={&(0x7f0000002300)="81931672f1b0633a742b67dc0acfcf5aced400cccbf0cac1bb2465c4934c3075087fca0c38546c6daeb448628a8238412095d673ebf101c9291a1e448d71dab0d086a83acf8539085f9eed29f83faa89e6409bbd7e61c8502919ae5920ec844ec18d95", &(0x7f0000002400)}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_uring_enter(0xffffffffffffffff, 0x71dd, 0x0, 0x2, &(0x7f00000000c0)={[0x6]}, 0x8) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 00:13:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:56 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:56 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0) 00:13:56 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001440)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) 00:13:56 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:56 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:57 executing program 2: syz_emit_ethernet(0x37, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}, "74ae48d9448a4f793337521b5634f17ce4"}}}}, 0x0) 00:13:57 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:57 executing program 1: clock_adjtime(0x0, &(0x7f0000000100)={0x3ff}) 00:13:57 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:57 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f0000002440)={0x0, 0x0, 0x1, @thr={&(0x7f0000002300)="81931672f1b0633a742b67dc0acfcf5aced400cccbf0cac1bb2465c4934c3075087fca0c38546c6daeb448628a8238412095d673ebf101c9291a1e448d71dab0d086a83acf8539085f9eed29f83faa89e6409bbd7e61c8502919ae5920ec844ec18d95", &(0x7f0000002400)}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_uring_enter(0xffffffffffffffff, 0x71dd, 0x0, 0x2, &(0x7f00000000c0)={[0x6]}, 0x8) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) 00:13:57 executing program 2: syz_clone3(&(0x7f0000001a80)={0x14000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0], 0x1}, 0x58) 00:13:57 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001440)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8ba566d6f9af1b84bedb1a149884ef5885f0ad66b1f910723e16901f308d241c0f", 0x21) 00:13:57 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:57 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000001d40)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r0, &(0x7f00000017c0), 0x332, 0x0, 0x0) 00:13:57 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 838.378497][T15963] binder: 15960:15963 ioctl c0306201 20001480 returned -14 [ 838.535738][T15968] binder: 15965:15968 ioctl c0306201 20001480 returned -14 00:13:58 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f0000000000), 0x0) 00:13:58 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:58 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, 0x0) 00:13:58 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:58 executing program 2: r0 = socket(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)='X', 0x1}], 0x1, &(0x7f00000004c0)=[{0x10, 0x1, 0x2}], 0x10}, 0x0) 00:13:58 executing program 4: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) timer_create(0x0, &(0x7f0000002440)={0x0, 0x0, 0x1, @thr={&(0x7f0000002300)="81931672f1b0633a742b67dc0acfcf5aced400cccbf0cac1bb2465c4934c3075087fca0c38546c6daeb448628a8238412095d673ebf101c9291a1e448d71dab0d086a83acf8539085f9eed29f83faa89e6409bbd7e61c8502919ae5920ec844ec18d95", &(0x7f0000002400)}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_uring_enter(0xffffffffffffffff, 0x71dd, 0x0, 0x2, &(0x7f00000000c0)={[0x6]}, 0x8) perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syslog(0x2, &(0x7f00000004c0)=""/67, 0x43) [ 839.076115][T15980] binder: 15975:15980 ioctl c0306201 20001480 returned -14 [ 839.141220][T15981] binder: 15979:15981 ioctl c0306201 20001480 returned -14 00:13:58 executing program 3: r0 = socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 00:13:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}]}]}, 0x2c}}, 0x0) 00:13:59 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:59 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:59 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/150) [ 839.588361][T15993] binder: 15989:15993 ioctl c0306201 20001480 returned -14 [ 839.633930][T15996] binder: 15992:15996 ioctl c0306201 20001480 returned -14 00:13:59 executing program 1: sigaltstack(&(0x7f0000000100)={0x0, 0x80000002}, &(0x7f0000000140)={0xfffffffffffffffe}) 00:13:59 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:13:59 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40}, {0x6}]}) 00:13:59 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:13:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x1000000002, 0x80, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) [ 840.012660][T16001] binder: 16000:16001 ioctl c0306201 20001480 returned -14 [ 840.088500][T16006] binder: 16003:16006 ioctl c0306201 0 returned -14 00:13:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e21, 0x0, @local, 0x1000}, 0x1c, 0x0}}], 0x2, 0x0) 00:13:59 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 840.147767][T16006] binder: 16003:16006 ioctl c0306201 20001480 returned -14 00:14:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x30, 0x0, 0x0, 0x3}, [@RTA_OIF={0x8}, @RTA_IP_PROTO={0x5}]}, 0x2c}}, 0x0) 00:14:00 executing program 2: mq_open(&(0x7f00000000c0)='\v<\xd3d\x1f\x02[\x00\x00\x00\x00\x00\x00\x00\x00', 0x6d7c4d88ccd5c14e, 0x0, 0x0) 00:14:00 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x410801, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x3, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 00:14:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 840.465677][T16012] binder: 16010:16012 ioctl c0306201 20001480 returned -14 00:14:00 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 00:14:00 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:00 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0xfe9e}}, 0x0) [ 840.655258][T16019] binder: 16017:16019 ioctl c0306201 0 returned -14 [ 840.695467][T16019] binder: 16017:16019 ioctl c0306201 20001480 returned -14 00:14:00 executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r0) 00:14:00 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'ipvlan0\x00', 0xc00}) 00:14:00 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 840.936983][T16025] binder: 16022:16025 ioctl c0306201 20001480 returned -14 00:14:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, 0x0) 00:14:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:00 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @multicast1}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) [ 841.209472][T16032] binder: 16029:16032 ioctl c0306201 0 returned -14 00:14:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x203}, 0x14}}, 0x0) [ 841.251991][T16032] binder: 16029:16032 ioctl c0306201 20001480 returned -14 00:14:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:01 executing program 3: sched_getaffinity(0x0, 0x8, &(0x7f00000020c0)) [ 841.458010][T16038] binder: 16036:16038 ioctl c0306201 20001480 returned -14 00:14:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f0000000240)=0xffff, 0x4) 00:14:01 executing program 2: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f00000001c0)=""/195, 0xd2b05d77d4770080) 00:14:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) 00:14:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 841.666805][T16046] binder: 16043:16046 ioctl c0306201 20000080 returned -14 [ 841.730437][T16046] binder: 16043:16046 ioctl c0306201 20001480 returned -14 00:14:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0xc, &(0x7f0000000000)="b030c19e", 0x4) 00:14:01 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:01 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) fcntl$setstatus(r0, 0x4, 0x0) [ 842.034756][T16054] binder: 16050:16054 ioctl c0306201 20001480 returned -14 00:14:01 executing program 1: io_setup(0xffff, &(0x7f0000000000)=0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = eventfd2(0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}]) 00:14:01 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) 00:14:02 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:02 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(r0, &(0x7f0000001140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) [ 842.358463][T16062] binder: 16058:16062 ioctl c0306201 20000080 returned -14 00:14:02 executing program 2: munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0}) [ 842.458007][T16062] binder: 16058:16062 ioctl c0306201 20001480 returned -14 00:14:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:02 executing program 4: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x34324948, 0x0, @stepwise}) [ 842.617282][T16069] binder: 16066:16069 ioctl c0306201 20001480 returned -14 00:14:02 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() getpgrp(0x0) syz_clone3(&(0x7f0000000340)={0x4400, 0x0, &(0x7f0000000200), 0x0, {}, 0x0, 0x0, &(0x7f00000002c0)=""/26, 0x0}, 0x58) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$ttys(0xc, 0x2, 0x1) 00:14:02 executing program 3: r0 = epoll_create(0x8e) epoll_pwait2(r0, &(0x7f0000002880)=[{}], 0x1, &(0x7f0000002900), &(0x7f0000002940), 0x8) 00:14:02 executing program 2: r0 = syz_io_uring_setup(0x2dd7, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) 00:14:02 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 842.880120][T16076] binder: 16074:16076 ioctl c0306201 20000080 returned -14 [ 842.926076][T16076] binder: 16074:16076 ioctl c0306201 20001480 returned -14 00:14:02 executing program 4: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x0, 0x0, 0xb}) 00:14:02 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:02 executing program 2: syz_io_uring_setup(0x2dd7, &(0x7f0000000040), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) [ 843.203352][T16085] binder: 16080:16085 ioctl c0306201 20001480 returned -14 00:14:03 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$ttys(0xc, 0x2, 0x1) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) 00:14:03 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 843.447746][T16092] binder: 16089:16092 unknown command 0 [ 843.453625][T16092] binder: 16089:16092 ioctl c0306201 20000080 returned -22 00:14:03 executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12018000c015e810da059a007bca0000000109022d0001020000000904"], 0x0) [ 843.551950][T16092] binder: 16089:16092 ioctl c0306201 20001480 returned -14 00:14:03 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:03 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0xe, 0x0, 0xb, 0x5, 0x10005}) [ 844.099224][T16101] binder: 16099:16101 ioctl c0306201 20001480 returned -14 00:14:04 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() getpgrp(0x0) syz_clone3(&(0x7f0000000340)={0x4400, 0x0, &(0x7f0000000200), 0x0, {}, 0x0, 0x0, &(0x7f00000002c0)=""/26, 0x0}, 0x58) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 844.312590][ T3583] usb 5-1: new high-speed USB device number 11 using dummy_hcd 00:14:04 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 844.546021][T16106] binder: 16105:16106 unknown command 0 [ 844.551877][T16106] binder: 16105:16106 ioctl c0306201 20000080 returned -22 [ 844.559961][ T3583] usb 5-1: Using ep0 maxpacket: 16 00:14:04 executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) gettid() getpgrp(0x0) syz_clone3(&(0x7f0000000340)={0x4400, 0x0, &(0x7f0000000200), 0x0, {}, 0x0, 0x0, &(0x7f00000002c0)=""/26, 0x0}, 0x58) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$ttys(0xc, 0x2, 0x1) [ 844.676823][T16106] binder: 16105:16106 ioctl c0306201 20001480 returned -14 [ 844.685572][ T3583] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 844.696204][ T3583] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=ca.7b [ 844.705533][ T3583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:14:04 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r1}}, 0x18) [ 844.779445][T16110] binder: 16108:16110 ioctl c0306201 20001480 returned -14 00:14:04 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 844.906140][ T3583] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. 00:14:04 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 845.106034][ T3583] usb 5-1: USB disconnect, device number 11 [ 845.555449][T16123] binder: 16122:16123 unknown command 0 [ 845.561139][T16123] binder: 16122:16123 ioctl c0306201 20000080 returned -22 00:14:05 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, &(0x7f0000002cc0)=ANY=[], 0xed5) [ 845.676768][T16123] binder: BINDER_SET_CONTEXT_MGR already set [ 845.683181][T16123] binder: 16122:16123 ioctl 40046207 0 returned -16 [ 845.692012][T16123] binder: 16122:16123 ioctl c0306201 20001480 returned -14 00:14:05 executing program 3: syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00006371ae9b1c01"}}}}}, 0x0) 00:14:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00005fd000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x2) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 00:14:05 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:05 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:05 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) io_setup(0x3c3, &(0x7f0000000140)) 00:14:05 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0) msgrcv(0x0, &(0x7f0000000100)={0x0, ""/148}, 0x9c, 0x3, 0x1000) 00:14:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005fd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000140)) [ 846.405804][T16139] binder: 16136:16139 unknown command 0 [ 846.411600][T16139] binder: 16136:16139 ioctl c0306201 20000080 returned -22 00:14:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@security={'security\x00', 0xe, 0x4, 0x418, 0xffffffff, 0x108, 0x268, 0x268, 0xffffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [], 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x9}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'team_slave_0\x00', 'bond_slave_0\x00'}}, @common=@mh={{0x28}, {"a5fa"}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) 00:14:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xaea2, 0x0) 00:14:06 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 846.510783][T16142] binder: 16136:16142 ioctl c0306201 20001480 returned -14 00:14:06 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005fd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000140)) 00:14:06 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:06 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 846.976301][T16154] binder: 16153:16154 unknown command 0 [ 846.981986][T16154] binder: 16153:16154 ioctl c0306201 20000080 returned -22 00:14:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, 0x0) [ 847.060926][T16155] binder: 16153:16155 ioctl c0306201 20001480 returned -14 00:14:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 847.267957][T16161] binder: 16158:16161 ioctl c0306201 20001480 returned -14 00:14:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x8d) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}}) 00:14:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:07 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005fd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000140)) 00:14:07 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18b1, 0x37, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0xfffffffffffffd7f, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x3, {[@global=@item_4={0x3, 0x1, 0x0, "5f85dced"}]}}, 0x0}, 0x0) [ 847.578909][T16170] binder: 16169:16170 unknown command 0 [ 847.584927][T16170] binder: 16169:16170 ioctl c0306201 20000080 returned -22 [ 847.685921][T16172] binder: 16169:16172 ioctl c0306201 20001480 returned -14 00:14:07 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 847.994729][T16180] binder: 16174:16180 ioctl c0306201 20001480 returned -14 00:14:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x8d) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}}) 00:14:08 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005fd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000140)) [ 848.365495][T16187] binder: 16186:16187 unknown command 25348 [ 848.371815][T16187] binder: 16186:16187 ioctl c0306201 20000080 returned -22 [ 848.404767][ T26] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 848.450865][T16187] binder: 16186:16187 ioctl c0306201 20001480 returned -14 00:14:08 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 848.568434][T16189] binder: 16188:16189 ioctl c0306201 20001480 returned -14 00:14:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 848.672394][ T26] usb 5-1: Using ep0 maxpacket: 16 [ 848.792962][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.793116][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 00:14:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000040)) [ 848.793240][ T26] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 00:14:08 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) [ 848.793425][ T26] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.40 [ 848.793554][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 00:14:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 848.797153][ T26] usb 5-1: config 0 descriptor?? [ 849.077105][T16200] binder: 16199:16200 unknown command 25348 [ 849.077186][T16200] binder: 16199:16200 ioctl c0306201 20000080 returned -22 [ 849.119303][T16200] binder: 16199:16200 ioctl c0306201 20001480 returned -14 00:14:09 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 849.230065][T16202] binder: 16201:16202 ioctl c0306201 0 returned -14 [ 849.242690][T16202] binder: 16201:16202 ioctl c0306201 20001480 returned -14 [ 849.333859][ T26] petalynx 0003:18B1:0037.0001: item fetching failed at offset 0/3 [ 849.334500][ T26] petalynx 0003:18B1:0037.0001: parse failed [ 849.334735][ T26] petalynx: probe of 0003:18B1:0037.0001 failed with error -22 [ 849.526188][ T26] usb 5-1: USB disconnect, device number 12 [ 849.631901][T16210] binder: 16209:16210 unknown command 25348 [ 849.631979][T16210] binder: 16209:16210 ioctl c0306201 20000080 returned -22 [ 849.644949][T16210] binder: 16209:16210 ioctl c0306201 20001480 returned -14 [ 849.719252][T16212] binder: 16211:16212 ioctl c0306201 0 returned -14 [ 849.731840][T16212] binder: 16211:16212 ioctl c0306201 20001480 returned -14 00:14:09 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$inet6(r0, 0x0, &(0x7f00000002c0), 0x0) 00:14:09 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/cgroup', 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 00:14:09 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:09 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_destroy(0x0) 00:14:09 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x8d) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {}, {}, {0x0, 0x0, 0x1}}) [ 850.167840][T16219] binder: 16213:16219 ioctl c0306201 0 returned -14 [ 850.181050][T16221] binder: 16216:16221 unknown command 287492 [ 850.187444][T16221] binder: 16216:16221 ioctl c0306201 20000080 returned -22 00:14:10 executing program 3: io_setup(0x8, &(0x7f0000000000)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/cgroup', 0x0, 0x0) io_submit(r0, 0x2, &(0x7f00000008c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 00:14:10 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_destroy(0x0) 00:14:10 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 850.285817][T16219] binder: 16213:16219 ioctl c0306201 20001480 returned -14 [ 850.332517][T16221] binder: 16216:16221 ioctl c0306201 20001480 returned -14 00:14:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000100)="0f23250f01cf66b83d008ed064660f3a2066f500640f01c4660f6bea66b8ea008ee0b9800000c00f3235008000000f309adb9c52d181000f20d80f22d8", 0x3d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00005fd000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}, 0x38) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:14:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x12, r1, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000040)) [ 850.767123][T16231] binder: 16229:16231 ioctl c0306201 20000080 returned -14 00:14:10 executing program 3: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0) r1 = msgget(0x3, 0x20d) msgrcv(r1, &(0x7f0000000140)={0x0, ""/20}, 0x1c, 0x3, 0x1000) msgsnd(r1, &(0x7f0000001200)={0x3, "cbf018858956855411d20ce882991d2c7c4b26cf967e4ed2f0dfaf6dc354d83c72c5037ac49a1d30c22c1db918406b714023beec2dadfe44b639cc5dfa1b7baf6aa6e0280517838a3fbcd7e38724f8"}, 0x57, 0x800) msgctl$IPC_RMID(0x0, 0x0) [ 850.843463][T16234] binder: 16232:16234 unknown command 287492 [ 850.849760][T16234] binder: 16232:16234 ioctl c0306201 20000080 returned -22 [ 850.868473][T16231] binder: 16229:16231 ioctl c0306201 20001480 returned -14 [ 850.878206][T16234] binder: 16232:16234 ioctl c0306201 20001480 returned -14 00:14:10 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:10 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_destroy(0x0) 00:14:10 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:11 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/cgroup', 0x0, 0x0) io_setup(0xfe000000, &(0x7f0000000000)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/cgroup', 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000480)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) [ 851.343078][T16248] binder: 16244:16248 ioctl c0306201 20000080 returned -14 00:14:11 executing program 4: clock_gettime(0x6, &(0x7f0000000300)) [ 851.431803][T16248] binder: BINDER_SET_CONTEXT_MGR already set [ 851.438331][T16248] binder: 16244:16248 ioctl 40046207 0 returned -16 [ 851.465408][T16252] binder: 16249:16252 unknown command 287492 [ 851.471534][T16252] binder: 16249:16252 ioctl c0306201 20000080 returned -22 00:14:11 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f00000054c0), 0x2, 0x0) [ 851.488850][T16251] binder: 16244:16251 ioctl c0306201 20001480 returned -14 00:14:11 executing program 2: io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) [ 851.564330][T16252] binder: BINDER_SET_CONTEXT_MGR already set [ 851.570430][T16252] binder: 16249:16252 ioctl 40046207 0 returned -16 00:14:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 851.703944][T16255] binder: 16249:16255 ioctl c0306201 20001480 returned -14 00:14:11 executing program 3: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug', 0x280000, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 00:14:11 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000013c0), &(0x7f0000001400)=0xc) 00:14:11 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) 00:14:11 executing program 2: io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) [ 852.033333][T16265] binder: 16264:16265 ioctl c0306201 20000080 returned -14 [ 852.076425][T16265] binder: 16264:16265 ioctl c0306201 20001480 returned -14 [ 852.164927][T16271] binder: BINDER_SET_CONTEXT_MGR already set [ 852.171317][T16271] binder: 16269:16271 ioctl 40046207 0 returned -16 00:14:12 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) 00:14:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:12 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/cgroup', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) [ 852.284136][T16271] binder: 16269:16271 ioctl c0306201 20001480 returned -14 00:14:12 executing program 1: socket$inet6(0xa, 0x1, 0x80000001) 00:14:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:12 executing program 2: io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) [ 852.598042][T16282] binder: 16280:16282 unknown command 0 [ 852.604173][T16282] binder: 16280:16282 ioctl c0306201 20000080 returned -22 00:14:12 executing program 3: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) accept4$inet6(r0, 0x0, 0x0, 0x0) [ 852.644553][T16282] binder: BINDER_SET_CONTEXT_MGR already set [ 852.650750][T16282] binder: 16280:16282 ioctl 40046207 0 returned -16 [ 852.684404][T16282] binder: 16280:16282 ioctl c0306201 20001480 returned -14 00:14:12 executing program 4: syz_clone(0x10880c00, 0x0, 0x0, 0x0, 0x0, 0x0) [ 852.777094][T16285] binder: BINDER_SET_CONTEXT_MGR already set [ 852.783421][T16285] binder: 16283:16285 ioctl 40046207 0 returned -16 [ 852.797616][T16285] binder: 16283:16285 ioctl c0306201 20001480 returned -14 00:14:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:12 executing program 1: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) 00:14:12 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, 0x0) [ 853.190586][T16296] binder: 16293:16296 unknown command 0 [ 853.196750][T16296] binder: 16293:16296 ioctl c0306201 20000080 returned -22 00:14:13 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@multicast1, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, 0xe8) [ 853.264811][T16296] binder: 16293:16296 ioctl c0306201 20001480 returned -14 00:14:13 executing program 1: openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x7b1082, 0x0) [ 853.326104][T16300] binder: BINDER_SET_CONTEXT_MGR already set [ 853.332898][T16300] binder: 16297:16300 ioctl 40046207 0 returned -16 [ 853.360363][T16300] binder: 16297:16300 ioctl c0306201 20001480 returned -14 00:14:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:13 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 00:14:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:13 executing program 4: r0 = msgget(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x2, 0x0, 0x0, 0x0, 0xee00}}) [ 853.742994][T16310] binder: 16307:16310 unknown command 0 [ 853.748684][T16310] binder: 16307:16310 ioctl c0306201 20000080 returned -22 00:14:13 executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/cgroup', 0x0, 0x0) getsockname$unix(r0, 0x0, 0x0) [ 853.785857][T16311] binder: 16307:16311 ioctl c0306201 20001480 returned -14 [ 853.861589][T16314] binder: BINDER_SET_CONTEXT_MGR already set [ 853.868035][T16314] binder: 16309:16314 ioctl 40046207 0 returned -16 [ 853.903204][T16314] binder: 16309:16314 ioctl c0306201 20001480 returned -14 00:14:13 executing program 3: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@uni_xlateno}, {@fat=@allow_utime}, {@shortname_mixed}, {@shortname_winnt}]}) 00:14:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:13 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:13 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000100)) 00:14:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) [ 854.352660][T16323] FAT-fs (loop3): bogus number of reserved sectors [ 854.359406][T16323] FAT-fs (loop3): Can't find a valid FAT filesystem [ 854.392114][T16329] binder: 16325:16329 unknown command 0 [ 854.398151][T16329] binder: 16325:16329 ioctl c0306201 20000080 returned -22 00:14:14 executing program 4: socketpair(0x26, 0x5, 0x1ff, &(0x7f00000001c0)) [ 854.476370][T16330] binder: BINDER_SET_CONTEXT_MGR already set [ 854.482752][T16330] binder: 16326:16330 ioctl 40046207 0 returned -16 [ 854.490410][T16332] binder: 16325:16332 ioctl c0306201 20001480 returned -14 [ 854.510016][T16330] binder: 16326:16330 ioctl c0306201 20001480 returned -14 00:14:14 executing program 2: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:14 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x1c1142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) write$cgroup_type(r1, &(0x7f0000000200), 0x175d900f) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x9) 00:14:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:14 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:14 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="20000000c8a78e1ec5570bed4e6c40cb286d000100000000000000003fbad08952", @ANYRES32=0x0], 0x20}}, 0x0) fsetxattr$security_evm(r0, 0x0, &(0x7f0000000080)=ANY=[], 0x9, 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x194, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) r4 = inotify_init1(0x80000) inotify_add_watch(r4, &(0x7f0000000140)='./file0\x00', 0x800) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0x8) sendfile(r3, r3, &(0x7f00000001c0), 0xa198) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="43c3ae46", 0x4, 0x24000080, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x8027e, 0x0) 00:14:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) io_setup(0x50, &(0x7f0000000040)) [ 854.976977][T16342] binder: 16337:16342 unknown command 0 [ 854.983351][T16342] binder: 16337:16342 ioctl c0306201 20000080 returned -22 [ 855.018750][T16342] binder: 16337:16342 ioctl c0306201 20001480 returned -14 [ 855.044860][T16345] binder: BINDER_SET_CONTEXT_MGR already set [ 855.050948][T16345] binder: 16340:16345 ioctl 40046207 0 returned -16 [ 855.126702][T16347] binder: 16340:16347 ioctl c0306201 20001480 returned -14 00:14:14 executing program 2: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:15 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000002ac1414aa0000000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x80050020}}}}}, 0x0) 00:14:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:15 executing program 4: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000002}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) [ 855.570631][T16354] binder: 16352:16354 unknown command 0 [ 855.577084][T16354] binder: 16352:16354 ioctl c0306201 20000080 returned -22 [ 855.697378][T16357] binder: 16352:16357 ioctl c0306201 20001480 returned -14 [ 855.726908][T16359] binder: BINDER_SET_CONTEXT_MGR already set [ 855.733675][T16359] binder: 16356:16359 ioctl 40046207 0 returned -16 00:14:15 executing program 2: perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) [ 855.790458][T16363] binder: 16356:16363 ioctl c0306201 20001480 returned -14 00:14:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 00:14:15 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000380)={'veth1_to_bond\x00', @ifru_flags}) 00:14:15 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 856.249476][T16369] binder: 16368:16369 unknown command 25348 [ 856.255861][T16369] binder: 16368:16369 ioctl c0306201 20000080 returned -22 [ 856.281406][T16369] binder: 16368:16369 ioctl c0306201 20001480 returned -14 00:14:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000002c0)) 00:14:16 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) [ 856.445876][T16374] binder: BINDER_SET_CONTEXT_MGR already set [ 856.452066][T16374] binder: 16370:16374 ioctl 40046207 0 returned -16 00:14:16 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 856.504649][T16377] binder: 16370:16377 ioctl c0306201 20001480 returned -14 00:14:16 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r0, r1, &(0x7f0000000240)=0x208, 0x9) 00:14:16 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:16 executing program 4: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[{&(0x7f0000000400)="f746", 0x2, 0xffff}], 0x0, 0x0) 00:14:16 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:16 executing program 1: bpf$BPF_LINK_CREATE(0x21, &(0x7f0000000040), 0x10) [ 856.803545][T16382] binder: 16381:16382 unknown command 25348 [ 856.809681][T16382] binder: 16381:16382 ioctl c0306201 20000080 returned -22 [ 856.893218][T16385] binder: 16381:16385 ioctl c0306201 20001480 returned -14 00:14:16 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f00000001c0)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x2000000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x1d9) write$P9_RREADLINK(r0, &(0x7f00000001c0)=ANY=[], 0x44) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x7, &(0x7f0000000840)=[{&(0x7f0000000140)}, {&(0x7f0000000280)}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x7}, {&(0x7f00000006c0)="897f57b3ff9babd7784b1948dcd7dc075ab2c238cffbd6ea0c", 0x19, 0xc81}, {&(0x7f00000005c0), 0x0, 0x2}, {&(0x7f0000000780)}], 0x20000, 0x0) sendfile(r0, r0, &(0x7f0000000240), 0x7ffa) [ 857.004473][T16391] loop4: detected capacity change from 0 to 255 [ 857.008680][T16389] binder: BINDER_SET_CONTEXT_MGR already set [ 857.017089][T16389] binder: 16386:16389 ioctl 40046207 0 returned -16 00:14:16 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 857.106138][T16394] binder: 16386:16394 ioctl c0306201 20001480 returned -14 00:14:16 executing program 4: add_key(&(0x7f0000001740)='asymmetric\x00', 0x0, &(0x7f0000001900)="88f8", 0x2, 0xffffffffffffffff) 00:14:17 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x1, &(0x7f0000000000)=@raw=[@func], &(0x7f0000000080)='GPL\x00', 0x7, 0xc9, &(0x7f00000000c0)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:17 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 857.366219][T16397] loop3: detected capacity change from 0 to 4096 [ 857.427217][T16398] binder: 16396:16398 unknown command 25348 [ 857.433750][T16398] binder: 16396:16398 ioctl c0306201 20000080 returned -22 [ 857.470208][T16398] binder: BINDER_SET_CONTEXT_MGR already set [ 857.476571][T16398] binder: 16396:16398 ioctl 40046207 0 returned -16 00:14:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, @empty, @private0}}) [ 857.535136][T16403] binder: 16396:16403 ioctl c0306201 20001480 returned -14 [ 857.557472][T16397] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. 00:14:17 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 857.709770][T16411] binder: 16407:16411 ioctl c0306201 20001480 returned -14 00:14:17 executing program 4: socketpair(0x11, 0x2, 0x6, &(0x7f0000000000)) 00:14:17 executing program 1: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0xc030, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r4, r5, &(0x7f0000000240)=0x208, 0x9) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001780)={&(0x7f0000000a80)=ANY=[@ANYRESDEC, @ANYRES16=r6, @ANYBLOB="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", @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x20008004) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYRES32=r2, @ANYRES16=r6, @ANYBLOB="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", @ANYRESHEX=r0], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058200)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5e, "75b49d29fa3163"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000059200)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2, r7}], 0x6, "cba70761e489b2"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000003c0)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000200)={r2, 0x1ff}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000cc0)={r2, 0x7}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{&(0x7f0000000400)=""/132, 0x84}], 0x1, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000800)=""/245, 0xf5}], 0x2, 0x0) 00:14:17 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:17 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) [ 858.120794][T16417] binder: 16415:16417 unknown command 287492 [ 858.127077][T16417] binder: 16415:16417 ioctl c0306201 20000080 returned -22 [ 858.218088][T16421] binder: 16415:16421 ioctl c0306201 20001480 returned -14 00:14:18 executing program 3: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000780)={0x0, ""/256, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x1f, 0x0, 0x400000000}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(0xffffffffffffffff, r4, &(0x7f0000000240), 0x9) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x20008004) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000d80)=ANY=[@ANYRES16=r5, @ANYBLOB="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", @ANYRESHEX=r0], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000058200)={0x0, [], 0x0, "75b49d29fa3163"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000003c0)={0x0, r2, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000200)={r2, 0x1ff}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000000cc0)={r2, 0x7}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}], 0x1, &(0x7f0000000c80)=[{0x0}, {0x0}], 0x2, 0x0) [ 858.270244][T16423] binder: 16420:16423 ioctl c0306201 20001480 returned -14 00:14:18 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x16}, 0x48) 00:14:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:18 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000001400)=ANY=[], 0xda00) 00:14:18 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) [ 858.809665][T16431] binder: 16428:16431 unknown command 287492 [ 858.815960][T16431] binder: 16428:16431 ioctl c0306201 20000080 returned -22 00:14:18 executing program 4: openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x60201, 0x0) [ 858.898115][T16437] binder: 16433:16437 ioctl c0306201 20001480 returned -14 [ 858.927548][T16431] binder: 16428:16431 ioctl c0306201 20001480 returned -14 00:14:18 executing program 1: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_LOCK(r0, 0xb) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 00:14:18 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:18 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 00:14:18 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:19 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) write$bt_hci(r0, &(0x7f00000003c0)={0x1, @write_eir={{0xc52, 0xf1}, {0x0, "06095a22a4e97c881a69461b74263d283a3306089f931891bce9f35390a77613e1f997fa23490b085fcebdd66c9b591537888ac1450fa9d1a1ca1d60e5ec264090547a07cfa135109970771c82d1f776b6cb039c4a43e8765d7861fbcd5012ee9834672abbb36c16757c1e442f8545605288dff685b76ef4ec772328331dcda688b83bb1a3ba9bbb94fbbb8e362a730d378f9a4e0a4d5fb27b5ebfef3837a5c7696812676cb915884b980e579b3c82ec6f9fba4d7f0ec92a47197bd2f4a5f59053bb7de984157d990a5e16a4cce323652bf07b2226b7af945084bbb65717cba6c96cf7d3de4cb1411c3d2b94a4643745"}}}, 0xf5) [ 859.501117][T16448] binder: 16444:16448 ioctl c0306201 20001480 returned -14 [ 859.517696][T16451] binder: 16445:16451 unknown command 287492 [ 859.524431][T16451] binder: 16445:16451 ioctl c0306201 20000080 returned -22 00:14:19 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) [ 859.574499][T16453] binder: BINDER_SET_CONTEXT_MGR already set [ 859.580761][T16453] binder: 16445:16453 ioctl 40046207 0 returned -16 00:14:19 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000578c0)={0x0, [], 0x0, "6b90c337677051"}) 00:14:19 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 859.700836][T16451] binder: 16445:16451 ioctl c0306201 20001480 returned -14 00:14:19 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') read$eventfd(r0, &(0x7f0000000040), 0xfffffc96) 00:14:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 860.025110][T16461] hub 9-0:1.0: USB hub found 00:14:19 executing program 1: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0x4100, 0x0) [ 860.087650][T16464] binder: 16462:16464 ioctl c0306201 20001480 returned -14 [ 860.104026][T16461] hub 9-0:1.0: 8 ports detected 00:14:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 860.305289][T16470] binder: BINDER_SET_CONTEXT_MGR already set [ 860.311645][T16470] binder: 16469:16470 ioctl 40046207 0 returned -16 00:14:20 executing program 4: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f00000010c0)={0x5, 0x80, 0x3f, 0x4, 0x81, 0x3, 0x0, 0x0, 0x2488a, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4e4, 0x0, @perf_bp={&(0x7f0000000ac0), 0x1}, 0x13520, 0x10001, 0x800007f, 0x3, 0x150b, 0x4515, 0x400, 0x0, 0x9, 0x0, 0xffffffffffff8000}, 0xffffffffffffffff, 0xa, r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x4, @none, 0x8001, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x200, @none, 0x1e4}, 0xe) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)="cc6e8ceba8e2848c64fd51773f8efc2bbf5ca67c99cad71e0e62285ffd2a6fe9bea2e85c71c695b95e54c88da803099c800668924a39ed10e3adec0236acea863ed0c86f68b2", 0x46}, {&(0x7f0000000240)="e2e923285a0b4f0f16f68b7de621e12476d7a4ad739e55991df246651e177870f7c3086c247d14fe5fdc238993674d506af47a209dfbb3088112b899052b24e4e8029f13905671b942e679d706550a595bdec73c74e35e1f08af84ff720ff5c751e69ca561da616e18ac01a3a7f34f448f9c7294278de38947ef668b2df6bdb7f610cc97ec25d5584d49f9269ee3819400afa9310c4f", 0x96}, {&(0x7f0000000300)="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", 0x719}], 0x3, &(0x7f0000002440)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x60}}], 0xffffff1f, 0x48048) dup2(r1, r2) socket$nl_netfilter(0x10, 0x3, 0xc) 00:14:20 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000578c0)={0x0, [], 0x0, "6b90c337677051"}) 00:14:20 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open$cgroup(&(0x7f00000010c0)={0x5, 0x80, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x2488a, 0xe, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4e4, 0x0, @perf_bp={&(0x7f0000000ac0), 0x1}, 0x13520, 0x10001, 0x800007f, 0x3, 0x150b, 0x4515, 0x400, 0x0, 0x9, 0x0, 0xffffffffffff8000}, 0xffffffffffffffff, 0xa, r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x4, @none, 0x8001, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x200, @none, 0x1e4}, 0xe) sendmmsg$inet(r2, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000001c0)="cc6e8ceba8e2848c64fd51773f8efc2bbf5ca67c99cad71e0e62285ffd2a6fe9bea2e85c71c695b95e54c88da803099c800668924a39ed10e3adec0236acea863ed0c86f68b2", 0x46}, {&(0x7f0000000240)="e2e923285a0b4f0f16f68b7de621e12476d7a4ad739e55991df246651e177870f7c3086c247d14fe5fdc238993674d506af47a209dfbb3088112b899052b24e4e8029f13905671b942e679d706550a595bdec73c74e35e1f08af84ff720ff5c751e69ca561da616e18ac01a3a7f34f448f9c7294278de38947ef668b2df6bdb7f610cc97ec25d5584d49f9269ee3819400afa9310c4f", 0x96}, {&(0x7f0000000300)="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", 0x719}], 0x3, &(0x7f0000002440)=[@ip_tos_int={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11}}], 0x60}}], 0xffffff1f, 0x48048) dup2(r1, r2) [ 860.516700][T16472] binder: 16469:16472 ioctl c0306201 20001480 returned -14 [ 860.576191][T16476] binder: 16475:16476 ioctl c0306201 20001480 returned -14 00:14:20 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:20 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xe) [ 861.076046][T16490] binder: BINDER_SET_CONTEXT_MGR already set [ 861.082326][T16490] binder: 16488:16490 ioctl 40046207 0 returned -16 00:14:20 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@empty}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@empty}, 0x14) [ 861.125950][T16490] binder: 16488:16490 ioctl c0306201 20001480 returned -14 00:14:20 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000578c0)={0x0, [], 0x0, "6b90c337677051"}) 00:14:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:21 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x48) 00:14:21 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x20000000000077, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x1}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000001b80)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES64, @ANYBLOB="be5922ebc93ec98806d5bbbb28294e97207942447ff85c216a80656ecc9dfb1fe659eff7c845991d8bb7b2df41a56336b6e33e026b5f3d8040e82c267cfe05637220545e0fec8f5b8b332fe1595b47c38ec3b76d20fccddd7876b30d3bc09461ece1c57b062a21e579f4ae8e0a8b41c5fcee6da6f76578801d79ef819b18cc9339fb8898e8a8197b027e64cc6ffc7e91b02bc302cc89d3e2e39c9d8aefde8d716eb25e42bd97eeb0dc110c84e0f8f012b4a4216a67a2a2e9afedc45d138aa50c50c9786c5a5858b4284a685fc5b0ee5d05a55e37a7d77f6d668bbb7f067b96dbf0ee325d250f7dedee18a52402fbdf4d4aaf76b00fe31f812b1fe9bdf7838e090b21b5fd8d9551654a4b8c37609bee2dd8a8371b28acec3b0753482941ced48fd4c37602bb6b1b6d7f4e9edd6f6679de0395", @ANYRESOCT=r4, @ANYBLOB="f82ef35c948fdc2d0d42c5c8e635b03c7890b309f8f82ebf8c0df2f44e2bd96c8d36c89c18416c88006b023f25711c68feb528d59df3217277739c37fcbecd56a2010a3fc5d9e8829c138feb3439b3f379f590ee63759dc26aed8afdce1003286869b28e6e165f9687ed1419fb971666358cc4e04ec1a1962033139bf37e0c51bb088464b1c4f75ffd4e7f98c1d77382813b71445a05e48c1222b8", @ANYRES32], 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000001c0)={0x0, r4, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000578c0)={0x35, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xfb, "6b90c337677051"}) 00:14:21 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000578c0)={0x0, [], 0x0, "6b90c337677051"}) [ 861.705659][T16507] binder: BINDER_SET_CONTEXT_MGR already set [ 861.711850][T16507] binder: 16504:16507 ioctl 40046207 0 returned -16 00:14:21 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 00:14:21 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) io_destroy(r0) 00:14:21 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 861.783501][T16507] binder: 16504:16507 ioctl c0306201 20001480 returned -14 00:14:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000022c0), &(0x7f0000002300)=0x8) [ 862.357503][T16520] binder: BINDER_SET_CONTEXT_MGR already set [ 862.363929][T16520] binder: 16519:16520 ioctl 40046207 0 returned -16 00:14:22 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, &(0x7f00000002c0)=""/171, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000fc0)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) clock_gettime(0x0, &(0x7f0000000040)) 00:14:22 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, 0x0) io_destroy(0x0) [ 862.413951][T16521] binder: 16519:16521 ioctl c0306201 20001480 returned -14 00:14:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:22 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x20000000000077, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x1}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000001b80)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=r4, @ANYBLOB="f82ef35c948fdc2d0d42c5c8e635b03c7890b309f8f82ebf8c0df2f44e2bd96c8d36c89c18416c88006b023f25711c68feb528d59df3217277739c37fcbecd56a2010a3fc5d9e8829c138feb3439b3f379f590ee63759dc26aed8afdce1003286869b28e6e165f9687ed1419fb971666358cc4e04ec1a1962033139bf37e0c51bb088464b1c4f75ffd4e7f98c1d77382813b71445a05e48c1222b8", @ANYRES32], 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000001c0)={0x0, r4, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000578c0)={0x35, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xfb, "6b90c337677051"}) 00:14:22 executing program 4: mount$fuseblk(0x0, &(0x7f0000002140)='.\x00', &(0x7f0000004180), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd']) 00:14:22 executing program 3: pipe2$9p(&(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RMKNOD(r0, &(0x7f0000002800)={0x14}, 0x14) 00:14:22 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, 0x0) io_destroy(0x0) [ 863.003413][T16531] binder: 16530:16531 ioctl c0306201 0 returned -14 00:14:22 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:22 executing program 4: mkdir(&(0x7f0000000100)='./file1\x00', 0x0) execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) [ 863.178328][T16535] binder: 16532:16535 ioctl c0306201 20001480 returned -14 00:14:23 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x20000000000077, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x1}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000001b80)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=r4, @ANYBLOB="f82ef35c948fdc2d0d42c5c8e635b03c7890b309f8f82ebf8c0df2f44e2bd96c8d36c89c18416c88006b023f25711c68feb528d59df3217277739c37fcbecd56a2010a3fc5d9e8829c138feb3439b3f379f590ee63759dc26aed8afdce1003286869b28e6e165f9687ed1419fb971666358cc4e04ec1a1962033139bf37e0c51bb088464b1c4f75ffd4e7f98c1d77382813b71445a05e48c1222b8", @ANYRES32], 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000001c0)={0x0, r4, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000578c0)={0x35, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xfb, "6b90c337677051"}) 00:14:23 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') read$eventfd(r0, &(0x7f0000000040), 0xfffffc96) 00:14:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 863.468344][T16546] binder: 16545:16546 ioctl c0306201 0 returned -14 00:14:23 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, 0x0) io_destroy(0x0) 00:14:23 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 863.687719][T16554] binder: BINDER_SET_CONTEXT_MGR already set [ 863.693355][T16552] hub 9-0:1.0: USB hub found [ 863.694044][T16554] binder: 16551:16554 ioctl 40046207 0 returned -16 [ 863.724473][T16552] hub 9-0:1.0: 8 ports detected 00:14:23 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 863.750286][T16555] binder: 16551:16555 ioctl c0306201 20001480 returned -14 00:14:23 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpgid(0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000003c0)='./file0\x00', 0x100000001, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="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", 0x200}], 0x0, &(0x7f00000000c0)=ANY=[]) getdents64(r1, &(0x7f0000000040)=""/179, 0xb3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)) [ 864.026935][T16562] binder: 16559:16562 ioctl c0306201 0 returned -14 00:14:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:24 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)) io_destroy(0x0) 00:14:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 864.385984][T16569] loop3: detected capacity change from 0 to 1 00:14:24 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x20000000000077, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)={0x0}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000080)=@usbdevfs_connect={0x1}) ioctl$USBDEVFS_IOCTL(r3, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect={0x1}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a700)={0x0, ""/256, 0x0, 0x0}) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000001b80)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=r4, @ANYBLOB="f82ef35c948fdc2d0d42c5c8e635b03c7890b309f8f82ebf8c0df2f44e2bd96c8d36c89c18416c88006b023f25711c68feb528d59df3217277739c37fcbecd56a2010a3fc5d9e8829c138feb3439b3f379f590ee63759dc26aed8afdce1003286869b28e6e165f9687ed1419fb971666358cc4e04ec1a1962033139bf37e0c51bb088464b1c4f75ffd4e7f98c1d77382813b71445a05e48c1222b8", @ANYRES32], 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000001c0)={0x0, r4, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000578c0)={0x35, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}], 0xfb, "6b90c337677051"}) [ 864.455859][T16569] syz-executor.3: attempt to access beyond end of device [ 864.455859][T16569] loop3: rw=2048, want=8, limit=1 [ 864.459262][T16570] binder: BINDER_SET_CONTEXT_MGR already set [ 864.468085][T16569] SQUASHFS error: Failed to read block 0x0: -5 [ 864.468232][T16569] unable to read squashfs_super_block [ 864.486319][T16570] binder: 16568:16570 ioctl 40046207 0 returned -16 00:14:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000005c0)={'vcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c00)={0x688, r1, 0x1, 0x70bd2a, 0x0, {0x0}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x2}, {0x8, 0x4, 0xc0230}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x238, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @user_linkup_enabled}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0xc4, 0x2, 0x0, 0x1, [{0xfffffffffffffee6, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2000000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r4}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0xfffffffffffffcf3}, {0x8}}, {0x8}}}]}}]}, 0x688}}, 0x0) [ 864.608058][T16572] binder: 16568:16572 ioctl c0306201 20001480 returned -14 00:14:24 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:24 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) [ 865.015474][T16585] netlink: 672 bytes leftover after parsing attributes in process `syz-executor.3'. 00:14:24 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)) io_destroy(0x0) 00:14:24 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x200000, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000010500)="7f000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff7e23a065916bffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1002, 0x2000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0x11fffffc7) 00:14:25 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000049d00)) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f0000000240)=0x208, 0x9) [ 865.395980][T16589] binder: BINDER_SET_CONTEXT_MGR already set [ 865.402095][T16589] binder: 16587:16589 ioctl 40046207 0 returned -16 00:14:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 865.458003][T16594] binder: 16587:16594 ioctl c0306201 20001480 returned -14 00:14:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x44800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39) [ 865.547785][T16598] loop3: detected capacity change from 0 to 4096 00:14:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:25 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x1ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0x8108551b, &(0x7f0000000380)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000005a700)) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) 00:14:25 executing program 2: perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000000)) io_destroy(0x0) 00:14:25 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000049d00)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0xc030, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000280)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x1, 0x1}, 0x21) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0x208, 0x9) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 00:14:25 executing program 1: socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONCLEX(r0, 0x5450) 00:14:25 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 866.065039][T16607] binder: BINDER_SET_CONTEXT_MGR already set [ 866.071256][T16607] binder: 16605:16607 ioctl 40046207 0 returned -16 [ 866.114513][T16607] binder: 16605:16607 ioctl c0306201 20001480 returned -14 00:14:26 executing program 4: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 00:14:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 866.404273][T16615] binder: BINDER_SET_CONTEXT_MGR already set [ 866.410554][T16615] binder: 16612:16615 ioctl 40046207 0 returned -16 00:14:26 executing program 1: openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r1, r0, 0x0, 0x7ffff002) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 00:14:26 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sysfs$3(0x3) 00:14:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 866.671953][T16621] binder: 16619:16621 ioctl c0306201 20001480 returned -14 00:14:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000380)=""/211, 0xd3}, {0x0}, {0x0}], 0x3) [ 866.852702][ T3583] usb 5-1: new high-speed USB device number 13 using dummy_hcd 00:14:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:26 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x76, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x5, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xfc, 0x2, 0x5, 0x0, 0x0, 0x8c, 0x2120, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xca18, 0x0, @perf_config_ext={0xb9, 0x6}, 0x44, 0x2, 0x0, 0x0, 0x81, 0x5, 0x9, 0x0, 0x20, 0x0, 0x1000}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x2, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdf8c}, 0x3b82, 0xfff, 0x0, 0x8, 0x40000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003740), 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000bc4e112384da00000000c86f7cbe000000"], 0x18}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001440)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[@ANYRES64=r2, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT=r0, @ANYRES32], 0x70}, 0x10160) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x40041) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) readv(r4, &(0x7f0000000880)=[{&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)=""/163, 0xa3}, {&(0x7f0000000680)=""/159, 0x9f}, {&(0x7f0000000740)=""/69, 0x45}, {&(0x7f00000007c0)=""/139, 0x8b}], 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[], 0x14}}, 0x0) fgetxattr(r3, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00', &(0x7f0000000240)=""/177, 0xb1) r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x6, 0x1) fdatasync(r5) 00:14:26 executing program 1: mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) r1 = shmat(r0, &(0x7f0000000000/0x13000)=nil, 0x4000) mlockall(0x3) shmdt(r1) 00:14:26 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:26 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack\x00') read$char_usb(r0, 0x0, 0x0) [ 867.294177][T16632] binder: 16630:16632 ioctl c0306201 20001480 returned -14 [ 867.373489][ T3583] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 867.383108][ T3583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.391254][ T3583] usb 5-1: Product: syz [ 867.395733][ T3583] usb 5-1: Manufacturer: syz [ 867.400460][ T3583] usb 5-1: SerialNumber: syz 00:14:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) [ 867.555091][ T3583] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 868.162011][T11044] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 868.357070][T16620] UDC core: couldn't find an available UDC or it's busy: -16 [ 868.364826][T16620] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 868.397757][ T3562] usb 5-1: USB disconnect, device number 13 00:14:28 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:28 executing program 4: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) ftruncate(r0, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff002) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x200000, 0x0, 0x0, 0x100010, &(0x7f00000000c0)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_mount_image$udf(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000000880)="0042454130310100008058d0ca3bd8a1c7e380f2125efd7ddcf79a8a18ab1be3dfe74204541762e55db7f6211e89c62269d82f9aa24930516c2bbc7b8e1bef977d0b43187e252bd32819395cc0585c4bd7ca8251", 0x54}, {&(0x7f0000000780)="004e53523033010000000000000000000000000000000000000000007400", 0x1e, 0x8804}, {0x0, 0x0, 0xc000}, {0x0, 0x0, 0xc0c0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00OSTA Compressed Unicode\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bLinuxUDF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\bCopyrig', 0x78, 0xa80e0}], 0x9b56c74fc0e9fb5c, &(0x7f0000000b40)=ANY=[@ANYBLOB='longad,rootdir=00000000000000000084,se00000000000000000004,undelete,func=CREDS_CHECK,defcontext=system_u,fowner<\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYBLOB="c5fadba9c2979e560a8ab4303cf19d5d725ce0bb14dec3142e0ecb1638d11096b8165aca2a75792b3da044d19476ea89ec7018a9200fa0542e6c03afa96439ad88f839d4ac314e942213f61b6b1d6854f3937690d8509771f4d4", @ANYBLOB=',fowner>', @ANYRESDEC=0x0]) 00:14:28 executing program 3: bpf$MAP_CREATE(0x2300000000000000, &(0x7f0000000880)=@base={0x16, 0x0, 0x400000, 0x4}, 0x48) 00:14:28 executing program 2: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv(r0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/159, 0x9f}], 0x1) 00:14:28 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x1) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002300)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003b00)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00)}}], 0x4, 0x40000001, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) open(0x0, 0x101c0, 0x0) clock_gettime(0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/241, 0xffd1) syz_mount_image$squashfs(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)}], 0x0, &(0x7f00000000c0)=ANY=[]) syz_mount_image$squashfs(0x0, 0x0, 0x8, 0x6, &(0x7f0000000a80)=[{&(0x7f0000000600), 0x0, 0x6}, {0x0}, {0x0, 0x0, 0x10001}, {0x0, 0x0, 0x5}, {&(0x7f0000000900)="9770a5df2fe1fe0ffe0d54591bcd16af2c3e82ce305289", 0x17}, {&(0x7f0000000940)="cf440b1bb37df061a411", 0xa, 0x8}], 0x2008080, &(0x7f0000000d00)=ANY=[]) readv(0xffffffffffffffff, &(0x7f0000000740), 0x0) 00:14:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 869.126477][T16649] binder: 16644:16649 ioctl c0306201 20001480 returned -14 [ 869.128817][T16650] binder: BINDER_SET_CONTEXT_MGR already set [ 869.140172][T16650] binder: 16648:16650 ioctl 40046207 0 returned -16 00:14:29 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000049d00)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1f, 0x0, @perf_bp={0x0}, 0xc030, 0x0, 0x2, 0x0, 0x9}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x103382) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000280)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000010c0)=ANY=[@ANYBLOB="00e193e1a41d28e59803e7a9f69459d7269395402d80e8869430a8dcca000000006e11892c027ea74d0c40000000004b5a60840c9a762f720d13efa1bc9e3d826c524de83c24460df69f6d8ad29a69a215502457de71617ff30f0305068597cea0d6746006e61e064a5fae3e7eb3084632412f3e11faad9fb94000f269bf1c059f5ea7"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) [ 869.225575][T11044] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 869.233008][T11044] ath9k_htc: Failed to initialize the device 00:14:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 869.301544][ T3562] usb 5-1: ath9k_htc: USB layer deinitialized [ 869.350113][T16656] binder: 16648:16656 ioctl c0306201 20001480 returned -14 00:14:29 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002300)={0xa0, 0x0, r1}, 0xa0) write$FUSE_ATTR(r0, &(0x7f00000020c0)={0x78, 0x0, r1, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x78) 00:14:29 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 869.563167][T16661] binder: 16659:16661 ioctl c0306201 20001480 returned -14 00:14:29 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) lseek(r0, 0x0, 0x4) 00:14:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 869.740379][T16662] loop4: detected capacity change from 0 to 2688 [ 869.890907][T16666] binder: 16665:16666 ioctl c0306201 20001480 returned -14 [ 869.932918][T16666] binder_alloc: 16665: binder_alloc_buf, no vma 00:14:29 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000c600)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f000000c500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 870.096091][T16669] binder: 16667:16669 ioctl c0306201 20001480 returned -14 00:14:29 executing program 4: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) ftruncate(r0, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff002) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x200000, 0x0, 0x0, 0x100010, &(0x7f00000000c0)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_mount_image$udf(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000000880)="0042454130310100008058d0ca3bd8a1c7e380f2125efd7ddcf79a8a18ab1be3dfe74204541762e55db7f6211e89c62269d82f9aa24930516c2bbc7b8e1bef977d0b43187e252bd32819395cc0585c4bd7ca8251", 0x54}, {&(0x7f0000000780)="004e53523033010000000000000000000000000000000000000000007400", 0x1e, 0x8804}, {0x0, 0x0, 0xc000}, {0x0, 0x0, 0xc0c0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00OSTA Compressed Unicode\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bLinuxUDF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\bCopyrig', 0x78, 0xa80e0}], 0x9b56c74fc0e9fb5c, &(0x7f0000000b40)=ANY=[@ANYBLOB='longad,rootdir=00000000000000000084,se00000000000000000004,undelete,func=CREDS_CHECK,defcontext=system_u,fowner<\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYBLOB="c5fadba9c2979e560a8ab4303cf19d5d725ce0bb14dec3142e0ecb1638d11096b8165aca2a75792b3da044d19476ea89ec7018a9200fa0542e6c03afa96439ad88f839d4ac314e942213f61b6b1d6854f3937690d8509771f4d4", @ANYBLOB=',fowner>', @ANYRESDEC=0x0]) 00:14:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1c1401, 0x0) fallocate(r2, 0x3, 0x0, 0x5) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r0, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r4, r3) syz_mount_image$vfat(0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0) r5 = fcntl$getown(r2, 0x9) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x9e, 0x0, 0x20, 0x0, 0x0, 0x1ff, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3f, 0x0, @perf_bp={&(0x7f0000000080), 0x5}, 0x100, 0x9, 0x7, 0x0, 0x0, 0xea88, 0x401, 0x0, 0x1}, r5, 0x0, 0xffffffffffffffff, 0x1) 00:14:30 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:30 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000) 00:14:30 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{}]}]}}, &(0x7f00000001c0)=""/138, 0x32, 0x8a, 0x1}, 0x20) [ 870.497960][T16675] binder: 16673:16675 ioctl c0306201 20001480 returned -14 [ 870.519673][T16675] binder_alloc: 16673: binder_alloc_buf, no vma 00:14:30 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 870.748314][T16677] loop4: detected capacity change from 0 to 2688 [ 870.776138][T16683] binder: 16680:16683 ioctl c0306201 20001480 returned -14 00:14:30 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000) 00:14:30 executing program 3: r0 = syz_io_uring_setup(0x1047, &(0x7f0000000580), &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000640), &(0x7f00000004c0)) io_uring_setup(0x33d7, &(0x7f0000000080)={0x0, 0x5e61, 0x3a, 0x0, 0x0, 0x0, r0}) 00:14:30 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) 00:14:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 871.203880][T16692] binder: 16689:16692 ioctl c0306201 20001480 returned -14 00:14:31 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000) 00:14:31 executing program 4: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) ftruncate(r0, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff002) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x200000, 0x0, 0x0, 0x100010, &(0x7f00000000c0)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_mount_image$udf(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000000880)="0042454130310100008058d0ca3bd8a1c7e380f2125efd7ddcf79a8a18ab1be3dfe74204541762e55db7f6211e89c62269d82f9aa24930516c2bbc7b8e1bef977d0b43187e252bd32819395cc0585c4bd7ca8251", 0x54}, {&(0x7f0000000780)="004e53523033010000000000000000000000000000000000000000007400", 0x1e, 0x8804}, {0x0, 0x0, 0xc000}, {0x0, 0x0, 0xc0c0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00OSTA Compressed Unicode\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bLinuxUDF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\bCopyrig', 0x78, 0xa80e0}], 0x9b56c74fc0e9fb5c, &(0x7f0000000b40)=ANY=[@ANYBLOB='longad,rootdir=00000000000000000084,se00000000000000000004,undelete,func=CREDS_CHECK,defcontext=system_u,fowner<\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYBLOB="c5fadba9c2979e560a8ab4303cf19d5d725ce0bb14dec3142e0ecb1638d11096b8165aca2a75792b3da044d19476ea89ec7018a9200fa0542e6c03afa96439ad88f839d4ac314e942213f61b6b1d6854f3937690d8509771f4d4", @ANYBLOB=',fowner>', @ANYRESDEC=0x0]) 00:14:31 executing program 3: syz_io_uring_setup(0xd62, &(0x7f0000000680), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) select(0x40, &(0x7f00000017c0), &(0x7f0000001800)={0x8}, 0x0, 0x0) 00:14:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) 00:14:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:31 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@datasec={0x0, 0x3, 0x0, 0x4, 0x2, [], "5cda"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], '\x00\x00\x00'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "a0d3f2"}]}}, &(0x7f0000000180)=""/191, 0x46, 0xbf, 0x1}, 0x20) 00:14:31 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8000) [ 871.809081][T16707] binder: 16703:16707 ioctl c0306201 20001480 returned -14 00:14:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:31 executing program 3: write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30132, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r0, 0x1000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101202, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x700, 0x8, 0x2, 0x7fff, {{0x8, 0x4, 0x3, 0x27, 0x20, 0x66, 0x0, 0xa8, 0x29, 0x0, @empty, @broadcast, {[@timestamp_prespec={0x44, 0xc, 0x9b, 0x3, 0x4, [{@multicast1, 0x2}]}]}}}}}) sendfile(r1, r0, 0x0, 0xeefffdef) 00:14:31 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x85616466, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)}}], 0x0, 0x0, 0x0}) [ 872.013677][T16702] loop4: detected capacity change from 0 to 2688 00:14:31 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000180)={0x0, 0x0, 0x9}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) open(0x0, 0x123000, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4188aec6, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x100000, 0x0, 0x30f, 0x0, 0x0, [{0x0, 0x8, 0x9, '\x00', 0x8}, {0x40}, {0x3f, 0x0, 0x0, '\x00', 0x81}, {0x0, 0x3f}, {0x0, 0x6, 0x8}, {0xd8, 0x64, 0x0, '\x00', 0x7}, {0x5, 0x1f, 0x40}, {0x0, 0x40, 0x81}, {0x0, 0x0, 0x1, '\x00', 0xd7}, {}, {0x7, 0x5}, {0x1, 0x81, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x6c}, {}, {0x1c, 0x0, 0x81}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x5f}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0xfe, 0x20, '\x00', 0x3}, {0xfb, 0x3}, {0x0, 0x0, 0x4}, {0x20, 0x5}, {0x9, 0x2, 0x1f}, {0x0, 0x7f, 0x3f, '\x00', 0x8}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:14:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x188, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000eeb000/0x3000)=nil, &(0x7f0000000540), &(0x7f0000000100)) 00:14:32 executing program 4: r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) ftruncate(r0, 0x3) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x317d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) sendfile(r3, r2, 0x0, 0x7ffff002) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', 0x0, 0x200000, 0x0, 0x0, 0x100010, &(0x7f00000000c0)=ANY=[]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_mount_image$udf(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=[{&(0x7f0000000880)="0042454130310100008058d0ca3bd8a1c7e380f2125efd7ddcf79a8a18ab1be3dfe74204541762e55db7f6211e89c62269d82f9aa24930516c2bbc7b8e1bef977d0b43187e252bd32819395cc0585c4bd7ca8251", 0x54}, {&(0x7f0000000780)="004e53523033010000000000000000000000000000000000000000007400", 0x1e, 0x8804}, {0x0, 0x0, 0xc000}, {0x0, 0x0, 0xc0c0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00OSTA Compressed Unicode\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\bLinuxUDF\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\bCopyrig', 0x78, 0xa80e0}], 0x9b56c74fc0e9fb5c, &(0x7f0000000b40)=ANY=[@ANYBLOB='longad,rootdir=00000000000000000084,se00000000000000000004,undelete,func=CREDS_CHECK,defcontext=system_u,fowner<\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',uid>', @ANYBLOB="c5fadba9c2979e560a8ab4303cf19d5d725ce0bb14dec3142e0ecb1638d11096b8165aca2a75792b3da044d19476ea89ec7018a9200fa0542e6c03afa96439ad88f839d4ac314e942213f61b6b1d6854f3937690d8509771f4d4", @ANYBLOB=',fowner>', @ANYRESDEC=0x0]) 00:14:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 872.438821][T16719] binder: 16717:16719 ioctl c0306201 20001480 returned -14 00:14:32 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) [ 872.856321][T16729] binder: 16725:16729 ioctl c0306201 0 returned -14 00:14:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:33 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x9) [ 873.388777][T16733] loop4: detected capacity change from 0 to 2688 00:14:33 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, 0x0, 0x32600) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000200)={0x2, 0x80, 0x5, 0xaf, 0x4, 0x1, 0x0, 0xc000, 0x80800, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x1b}, 0x42440, 0x8, 0xfffffffc, 0x0, 0x3ff, 0x80, 0x401, 0x0, 0x7, 0x0, 0xff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x1) ioctl$TCXONC(r1, 0x540a, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0, 0x0) r3 = signalfd4(r2, &(0x7f0000000000)={[0x100]}, 0x8, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}}, 0x8800) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x0, 0x9) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 873.440267][T16734] binder: 16732:16734 ioctl c0306201 20001480 returned -14 00:14:33 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000180)={0x0, 0x0, 0x9}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) open(0x0, 0x123000, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4188aec6, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x100000, 0x0, 0x30f, 0x0, 0x0, [{0x0, 0x8, 0x9, '\x00', 0x8}, {0x40}, {0x3f, 0x0, 0x0, '\x00', 0x81}, {0x0, 0x3f}, {0x0, 0x6, 0x8}, {0xd8, 0x64, 0x0, '\x00', 0x7}, {0x5, 0x1f, 0x40}, {0x0, 0x40, 0x81}, {0x0, 0x0, 0x1, '\x00', 0xd7}, {}, {0x7, 0x5}, {0x1, 0x81, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x6c}, {}, {0x1c, 0x0, 0x81}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x5f}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0xfe, 0x20, '\x00', 0x3}, {0xfb, 0x3}, {0x0, 0x0, 0x4}, {0x20, 0x5}, {0x9, 0x2, 0x1f}, {0x0, 0x7f, 0x3f, '\x00', 0x8}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 873.516290][T16734] binder: 16732:16734 ioctl c0306201 0 returned -14 [ 873.620268][T16739] binder: 16735:16739 ioctl c0306201 0 returned -14 00:14:33 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2}]}, {0x0, [0x0, 0x61]}}, &(0x7f0000000080)=""/201, 0x28, 0xc9, 0x1}, 0x20) 00:14:33 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 00:14:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:33 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x81, &(0x7f0000000480)=0x0) write$FUSE_ATTR(r0, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 874.180191][T16750] binder: 16746:16750 ioctl c0306201 20001480 returned -14 00:14:34 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x90, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0) [ 874.221638][T16750] binder: 16746:16750 ioctl c0306201 0 returned -14 [ 874.256202][T16753] binder: 16751:16753 ioctl c0306201 0 returned -14 00:14:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 00:14:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xa4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r0, &(0x7f0000000000)) 00:14:34 executing program 1: pipe(0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000180)={0x0, 0x0, 0x9}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) open(0x0, 0x123000, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4188aec6, &(0x7f0000000a00)={0x0, 0x0, @ioapic={0x100000, 0x0, 0x30f, 0x0, 0x0, [{0x0, 0x8, 0x9, '\x00', 0x8}, {0x40}, {0x3f, 0x0, 0x0, '\x00', 0x81}, {0x0, 0x3f}, {0x0, 0x6, 0x8}, {0xd8, 0x64, 0x0, '\x00', 0x7}, {0x5, 0x1f, 0x40}, {0x0, 0x40, 0x81}, {0x0, 0x0, 0x1, '\x00', 0xd7}, {}, {0x7, 0x5}, {0x1, 0x81, 0x0, '\x00', 0x6}, {0x0, 0x0, 0x0, '\x00', 0x6c}, {}, {0x1c, 0x0, 0x81}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x5f}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x0, 0xfe, 0x20, '\x00', 0x3}, {0xfb, 0x3}, {0x0, 0x0, 0x4}, {0x20, 0x5}, {0x9, 0x2, 0x1f}, {0x0, 0x7f, 0x3f, '\x00', 0x8}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 00:14:34 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8}, 0xe) [ 874.939197][T16761] binder: 16757:16761 ioctl c0306201 20001480 returned -14 [ 874.970759][T16761] binder: 16757:16761 ioctl c0306201 0 returned -14 00:14:34 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:14:34 executing program 4: r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x6, 0x0, 0x0, 0xffffffffffffffff) 00:14:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 00:14:35 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCXONC(r0, 0x540a, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socket$packet(0x11, 0x2, 0x300) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:14:35 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000002c0)=""/245, 0x1a, 0xf5, 0x1}, 0x20) [ 875.445819][T16771] binder: 16770:16771 ioctl c0306201 20001480 returned -14 00:14:35 executing program 4: r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) tgkill(0x0, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="1000000040000000020000002b00000005000000010000000000000000000000002000000020000010000000000000009f09c75f0000ffff53ef", 0x3a, 0x400}, {&(0x7f0000010100)="000000000000000000000000000000000000000000000000000000005178aedb030000001300000023", 0x29, 0x7e0}, {&(0x7f0000010ce0)="00000000000000000000000000000000000000000000000000000000c99b0000ed410000000400009f09c75f9f09c75f9f09c75f00000000000003000200000000000800000000000af30100040000000000000000000000010000000400", 0x5e, 0x8c60}], 0x0, &(0x7f0000000080)={[{@test_dummy_encryption}]}) r2 = dup2(r1, r0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) io_submit(0x0, 0x5, &(0x7f0000001940)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)="c0601269375e4301a10b7ff5af60f3bff43bc07df23af128f7b149fc293c977f4c9258a09a9dfbb7eb73023cb6fcd7b1fec15b49b93a713cf0f251102c57dac7ea9b79e24bba740e11d64a", 0x4b, 0x0, 0x0, 0x1}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f00000003c0)="8030044f1c51e5c70baba77c94e8e9b6038ba5441a882debe53e8b23728d6347f6ac27bf4a4748a15ee4d32f028a3347ad23d16a8217d27288476c64347b338be02fe55a3f7e32354893cf68b0c344726f780af5e078d5e7d7d73b8b33ea", 0x5e, 0x0, 0x0, 0x3, r2}, 0x0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x8, 0x7, 0xffffffffffffffff, &(0x7f0000000800)="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", 0x1000, 0x7ff, 0x0, 0x2}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0, r2}]) socket(0x10, 0x3, 0x0) creat(0x0, 0x0) 00:14:35 executing program 1: r0 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r0, 0x1000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x101202, 0x0) sendfile(r1, r0, 0x0, 0xeefffdef) 00:14:35 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:14:35 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0xa, [@var={0x7, 0x0, 0x0, 0xe, 0x5}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0xc}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x61]}}, &(0x7f00000002c0)=""/245, 0x4a, 0xf5, 0x1}, 0x20) 00:14:35 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 00:14:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 876.008914][T16783] loop4: detected capacity change from 0 to 140 [ 876.162097][T16789] binder: 16785:16789 ioctl c0306201 20001480 returned -14 00:14:36 executing program 2: preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000/0x4000)=nil}) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 00:14:36 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:14:36 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f00000000000004008000000000000800050000000af301000400000000000000000000000900000010", 0x3d, 0x4400}], 0x0, &(0x7f00000000c0)=ANY=[]) creat(&(0x7f0000000400)='./file0/file1\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)) getdents(r0, 0x0, 0x0) 00:14:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000007c0)={0x44, 0x0, &(0x7f0000000600)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffe2, &(0x7f0000000000)={@fda={0x77682a85}, @flat=@handle, @fda={0x77622a85}}, &(0x7f0000000240)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) [ 876.607285][T16783] ===================================================== [ 876.614431][T16783] BUG: KMSAN: uninit-value in hex_string+0x92b/0xa40 [ 876.621160][T16783] hex_string+0x92b/0xa40 [ 876.625528][T16783] pointer+0x3ae/0x2060 [ 876.629719][T16783] vsnprintf+0x1a9b/0x3650 [ 876.634168][T16783] sprintf+0x214/0x260 [ 876.638267][T16783] add_master_key+0x193b/0x2090 [ 876.643221][T16783] fscrypt_add_test_dummy_key+0x136/0x2c0 [ 876.648989][T16783] fscrypt_set_test_dummy_encryption+0x355/0x890 [ 876.655416][T16783] ext4_set_test_dummy_encryption+0x15b/0x400 [ 876.661588][T16783] parse_options+0x206a/0x5160 [ 876.666396][T16783] ext4_fill_super+0x407c/0x113a0 [ 876.671472][T16783] mount_bdev+0x626/0x920 [ 876.675887][T16783] ext4_mount+0xc9/0xe0 [ 876.680092][T16783] legacy_get_tree+0x163/0x2e0 [ 876.684947][T16783] vfs_get_tree+0xd8/0x5d0 [ 876.689412][T16783] do_new_mount+0x7b5/0x16f0 [ 876.694069][T16783] path_mount+0x1021/0x28b0 [ 876.698616][T16783] __se_sys_mount+0x8a8/0x9d0 [ 876.703335][T16783] __ia32_sys_mount+0x157/0x1b0 [ 876.708230][T16783] __do_fast_syscall_32+0x96/0xf0 [ 876.713298][T16783] do_fast_syscall_32+0x34/0x70 [ 876.718238][T16783] do_SYSENTER_32+0x1b/0x20 [ 876.722779][T16783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.729597][T16783] [ 876.731929][T16783] Uninit was stored to memory at: [ 876.737022][T16783] add_master_key+0x16ea/0x2090 [ 876.741913][T16783] fscrypt_add_test_dummy_key+0x136/0x2c0 [ 876.747684][T16783] fscrypt_set_test_dummy_encryption+0x355/0x890 [ 876.754054][T16783] ext4_set_test_dummy_encryption+0x15b/0x400 [ 876.760179][T16783] parse_options+0x206a/0x5160 [ 876.764988][T16783] ext4_fill_super+0x407c/0x113a0 [ 876.770055][T16783] mount_bdev+0x626/0x920 [ 876.774455][T16783] ext4_mount+0xc9/0xe0 [ 876.778650][T16783] legacy_get_tree+0x163/0x2e0 [ 876.783456][T16783] vfs_get_tree+0xd8/0x5d0 [ 876.787914][T16783] do_new_mount+0x7b5/0x16f0 [ 876.792544][T16783] path_mount+0x1021/0x28b0 [ 876.797085][T16783] __se_sys_mount+0x8a8/0x9d0 [ 876.801799][T16783] __ia32_sys_mount+0x157/0x1b0 [ 876.806689][T16783] __do_fast_syscall_32+0x96/0xf0 [ 876.811757][T16783] do_fast_syscall_32+0x34/0x70 [ 876.816651][T16783] do_SYSENTER_32+0x1b/0x20 [ 876.821195][T16783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.827577][T16783] [ 876.829898][T16783] Uninit was stored to memory at: [ 876.834993][T16783] fscrypt_hkdf_expand+0x75d/0xc70 [ 876.840159][T16783] add_master_key+0x1230/0x2090 [ 876.845052][T16783] fscrypt_add_test_dummy_key+0x136/0x2c0 [ 876.850820][T16783] fscrypt_set_test_dummy_encryption+0x355/0x890 [ 876.857183][T16783] ext4_set_test_dummy_encryption+0x15b/0x400 [ 876.863304][T16783] parse_options+0x206a/0x5160 [ 876.868136][T16783] ext4_fill_super+0x407c/0x113a0 [ 876.873205][T16783] mount_bdev+0x626/0x920 [ 876.877576][T16783] ext4_mount+0xc9/0xe0 [ 876.881772][T16783] legacy_get_tree+0x163/0x2e0 [ 876.886585][T16783] vfs_get_tree+0xd8/0x5d0 [ 876.891047][T16783] do_new_mount+0x7b5/0x16f0 [ 876.895772][T16783] path_mount+0x1021/0x28b0 [ 876.900315][T16783] __se_sys_mount+0x8a8/0x9d0 [ 876.905035][T16783] __ia32_sys_mount+0x157/0x1b0 [ 876.909925][T16783] __do_fast_syscall_32+0x96/0xf0 [ 876.915002][T16783] do_fast_syscall_32+0x34/0x70 [ 876.919905][T16783] do_SYSENTER_32+0x1b/0x20 [ 876.924445][T16783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 876.930816][T16783] [ 876.933139][T16783] Uninit was stored to memory at: [ 876.938282][T16783] sha512_final+0x45a/0x5c0 [ 876.942822][T16783] crypto_sha512_finup+0x31d/0x680 [ 876.947980][T16783] crypto_shash_finup+0x315/0x770 [ 876.953042][T16783] hmac_finup+0x4da/0x510 [ 876.957401][T16783] crypto_shash_finup+0x315/0x770 [ 876.962463][T16783] fscrypt_hkdf_expand+0x6a6/0xc70 [ 876.967620][T16783] add_master_key+0x1230/0x2090 [ 876.972512][T16783] fscrypt_add_test_dummy_key+0x136/0x2c0 [ 876.978285][T16783] fscrypt_set_test_dummy_encryption+0x355/0x890 [ 876.984652][T16783] ext4_set_test_dummy_encryption+0x15b/0x400 [ 876.990773][T16783] parse_options+0x206a/0x5160 [ 876.995577][T16783] ext4_fill_super+0x407c/0x113a0 [ 877.000646][T16783] mount_bdev+0x626/0x920 [ 877.005018][T16783] ext4_mount+0xc9/0xe0 [ 877.009209][T16783] legacy_get_tree+0x163/0x2e0 [ 877.014013][T16783] vfs_get_tree+0xd8/0x5d0 [ 877.018470][T16783] do_new_mount+0x7b5/0x16f0 [ 877.023095][T16783] path_mount+0x1021/0x28b0 [ 877.027634][T16783] __se_sys_mount+0x8a8/0x9d0 [ 877.032381][T16783] __ia32_sys_mount+0x157/0x1b0 [ 877.037269][T16783] __do_fast_syscall_32+0x96/0xf0 [ 877.042380][T16783] do_fast_syscall_32+0x34/0x70 [ 877.047267][T16783] do_SYSENTER_32+0x1b/0x20 [ 877.051807][T16783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.058178][T16783] [ 877.060502][T16783] Uninit was stored to memory at: [ 877.065582][T16783] sha512_generic_block_fn+0x2a1c/0x2c40 [ 877.071251][T16783] sha512_final+0x31c/0x5c0 [ 877.075780][T16783] crypto_sha512_finup+0x31d/0x680 [ 877.080923][T16783] crypto_shash_finup+0x315/0x770 [ 877.085980][T16783] hmac_finup+0x4da/0x510 [ 877.090336][T16783] crypto_shash_finup+0x315/0x770 [ 877.095498][T16783] fscrypt_hkdf_expand+0x6a6/0xc70 [ 877.100651][T16783] add_master_key+0x1230/0x2090 [ 877.105543][T16783] fscrypt_add_test_dummy_key+0x136/0x2c0 [ 877.111308][T16783] fscrypt_set_test_dummy_encryption+0x355/0x890 [ 877.117674][T16783] ext4_set_test_dummy_encryption+0x15b/0x400 [ 877.123798][T16783] parse_options+0x206a/0x5160 [ 877.128602][T16783] ext4_fill_super+0x407c/0x113a0 [ 877.133668][T16783] mount_bdev+0x626/0x920 [ 877.138036][T16783] ext4_mount+0xc9/0xe0 [ 877.142230][T16783] legacy_get_tree+0x163/0x2e0 [ 877.147041][T16783] vfs_get_tree+0xd8/0x5d0 [ 877.151494][T16783] do_new_mount+0x7b5/0x16f0 [ 877.156126][T16783] path_mount+0x1021/0x28b0 [ 877.160666][T16783] __se_sys_mount+0x8a8/0x9d0 [ 877.165376][T16783] __ia32_sys_mount+0x157/0x1b0 [ 877.170261][T16783] __do_fast_syscall_32+0x96/0xf0 [ 877.175326][T16783] do_fast_syscall_32+0x34/0x70 [ 877.180217][T16783] do_SYSENTER_32+0x1b/0x20 [ 877.184753][T16783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.191123][T16783] [ 877.193448][T16783] Uninit was stored to memory at: [ 877.198540][T16783] shash_default_import+0xb6/0x100 [ 877.203691][T16783] hmac_finup+0x3bc/0x510 [ 877.208048][T16783] crypto_shash_finup+0x315/0x770 [ 877.213107][T16783] fscrypt_hkdf_expand+0x6a6/0xc70 [ 877.218261][T16783] add_master_key+0x1230/0x2090 [ 877.223156][T16783] fscrypt_add_test_dummy_key+0x136/0x2c0 [ 877.228920][T16783] fscrypt_set_test_dummy_encryption+0x355/0x890 [ 877.235281][T16783] ext4_set_test_dummy_encryption+0x15b/0x400 [ 877.241403][T16783] parse_options+0x206a/0x5160 [ 877.246205][T16783] ext4_fill_super+0x407c/0x113a0 [ 877.251268][T16783] mount_bdev+0x626/0x920 [ 877.255644][T16783] ext4_mount+0xc9/0xe0 [ 877.259836][T16783] legacy_get_tree+0x163/0x2e0 [ 877.264639][T16783] vfs_get_tree+0xd8/0x5d0 [ 877.269097][T16783] do_new_mount+0x7b5/0x16f0 [ 877.273728][T16783] path_mount+0x1021/0x28b0 [ 877.278263][T16783] __se_sys_mount+0x8a8/0x9d0 [ 877.282976][T16783] __ia32_sys_mount+0x157/0x1b0 [ 877.287868][T16783] __do_fast_syscall_32+0x96/0xf0 [ 877.292943][T16783] do_fast_syscall_32+0x34/0x70 [ 877.297841][T16783] do_SYSENTER_32+0x1b/0x20 [ 877.302392][T16783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.308768][T16783] [ 877.311097][T16783] Uninit was stored to memory at: [ 877.316195][T16783] shash_default_export+0xb6/0x100 [ 877.321342][T16783] hmac_setkey+0x10ee/0x1130 [ 877.325955][T16783] crypto_shash_setkey+0x340/0x670 [ 877.331103][T16783] fscrypt_init_hkdf+0x435/0x5b0 [ 877.336080][T16783] add_master_key+0x15b/0x2090 [ 877.340884][T16783] fscrypt_add_test_dummy_key+0x136/0x2c0 [ 877.346650][T16783] fscrypt_set_test_dummy_encryption+0x355/0x890 [ 877.353014][T16783] ext4_set_test_dummy_encryption+0x15b/0x400 [ 877.359132][T16783] parse_options+0x206a/0x5160 [ 877.363943][T16783] ext4_fill_super+0x407c/0x113a0 [ 877.369008][T16783] mount_bdev+0x626/0x920 [ 877.373382][T16783] ext4_mount+0xc9/0xe0 [ 877.377572][T16783] legacy_get_tree+0x163/0x2e0 [ 877.382373][T16783] vfs_get_tree+0xd8/0x5d0 [ 877.386829][T16783] do_new_mount+0x7b5/0x16f0 [ 877.391452][T16783] path_mount+0x1021/0x28b0 [ 877.395989][T16783] __se_sys_mount+0x8a8/0x9d0 [ 877.400703][T16783] __ia32_sys_mount+0x157/0x1b0 [ 877.405585][T16783] __do_fast_syscall_32+0x96/0xf0 [ 877.410648][T16783] do_fast_syscall_32+0x34/0x70 [ 877.415539][T16783] do_SYSENTER_32+0x1b/0x20 [ 877.420081][T16783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.426448][T16783] [ 877.428771][T16783] Local variable __shash_desc created at: [ 877.434487][T16783] hmac_setkey+0x21b/0x1130 [ 877.439016][T16783] crypto_shash_setkey+0x340/0x670 [ 877.444160][T16783] [ 877.446484][T16783] CPU: 1 PID: 16783 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 [ 877.455276][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.465349][T16783] ===================================================== [ 877.472280][T16783] Disabling lock debugging due to kernel taint [ 877.486529][T16783] Kernel panic - not syncing: kmsan.panic set ... [ 877.493157][T16783] CPU: 1 PID: 16783 Comm: syz-executor.4 Tainted: G B 5.16.0-rc5-syzkaller #0 [ 877.503417][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 877.513496][T16783] Call Trace: [ 877.516786][T16783] [ 877.519726][T16783] dump_stack_lvl+0x1ff/0x28e [ 877.524454][T16783] dump_stack+0x25/0x28 [ 877.528643][T16783] panic+0x487/0xe1f [ 877.532576][T16783] ? add_taint+0x181/0x210 [ 877.537082][T16783] ? _raw_spin_unlock_irqrestore+0x78/0xb0 [ 877.542925][T16783] kmsan_report+0x2e6/0x2f0 [ 877.547475][T16783] ? kmsan_get_metadata+0x33/0x220 [ 877.552629][T16783] ? __msan_warning+0xb8/0x130 [ 877.557430][T16783] ? hex_string+0x92b/0xa40 [ 877.561970][T16783] ? pointer+0x3ae/0x2060 [ 877.566330][T16783] ? vsnprintf+0x1a9b/0x3650 [ 877.570951][T16783] ? sprintf+0x214/0x260 [ 877.575224][T16783] ? add_master_key+0x193b/0x2090 [ 877.580298][T16783] ? fscrypt_add_test_dummy_key+0x136/0x2c0 [ 877.586243][T16783] ? fscrypt_set_test_dummy_encryption+0x355/0x890 [ 877.592788][T16783] ? ext4_set_test_dummy_encryption+0x15b/0x400 [ 877.599080][T16783] ? parse_options+0x206a/0x5160 [ 877.604059][T16783] ? ext4_fill_super+0x407c/0x113a0 [ 877.609303][T16783] ? mount_bdev+0x626/0x920 [ 877.613848][T16783] ? ext4_mount+0xc9/0xe0 [ 877.618214][T16783] ? legacy_get_tree+0x163/0x2e0 [ 877.623195][T16783] ? vfs_get_tree+0xd8/0x5d0 [ 877.627826][T16783] ? do_new_mount+0x7b5/0x16f0 [ 877.632631][T16783] ? path_mount+0x1021/0x28b0 [ 877.637365][T16783] ? __se_sys_mount+0x8a8/0x9d0 [ 877.642260][T16783] ? __ia32_sys_mount+0x157/0x1b0 [ 877.647331][T16783] ? __do_fast_syscall_32+0x96/0xf0 [ 877.652571][T16783] ? do_fast_syscall_32+0x34/0x70 [ 877.657641][T16783] ? do_SYSENTER_32+0x1b/0x20 [ 877.662355][T16783] ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.668901][T16783] ? preempt_count_sub+0xf8/0x330 [ 877.674061][T16783] ? is_module_text_address+0x275/0x300 [ 877.679690][T16783] ? kernel_text_address+0x1f1/0x2b0 [ 877.685020][T16783] ? __kernel_text_address+0x32/0xf0 [ 877.690342][T16783] ? kmsan_get_metadata+0x33/0x220 [ 877.695494][T16783] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 877.701345][T16783] __msan_warning+0xb8/0x130 [ 877.705971][T16783] hex_string+0x92b/0xa40 [ 877.710338][T16783] ? kmsan_internal_set_shadow_origin+0x5e/0xc0 [ 877.716623][T16783] ? hex_string+0x4d1/0xa40 [ 877.721166][T16783] pointer+0x3ae/0x2060 [ 877.725363][T16783] ? kmsan_get_metadata+0x33/0x220 [ 877.730511][T16783] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 877.736362][T16783] vsnprintf+0x1a9b/0x3650 [ 877.740834][T16783] sprintf+0x214/0x260 [ 877.744957][T16783] ? fscrypt_add_test_dummy_key+0x136/0x2c0 [ 877.750906][T16783] add_master_key+0x193b/0x2090 [ 877.755817][T16783] ? kmsan_internal_memmove_metadata+0x96/0x2e0 [ 877.762106][T16783] fscrypt_add_test_dummy_key+0x136/0x2c0 [ 877.767893][T16783] fscrypt_set_test_dummy_encryption+0x355/0x890 [ 877.774278][T16783] ext4_set_test_dummy_encryption+0x15b/0x400 [ 877.780419][T16783] parse_options+0x206a/0x5160 [ 877.785246][T16783] ? make_kgid+0x5c1/0xc20 [ 877.789776][T16783] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 877.795632][T16783] ext4_fill_super+0x407c/0x113a0 [ 877.800704][T16783] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 877.806918][T16783] ? kmsan_get_shadow_origin_ptr+0x9b/0xf0 [ 877.812785][T16783] mount_bdev+0x626/0x920 [ 877.817156][T16783] ? ext4_mount+0xe0/0xe0 [ 877.821540][T16783] ext4_mount+0xc9/0xe0 [ 877.825745][T16783] legacy_get_tree+0x163/0x2e0 [ 877.830553][T16783] ? ext4_errno_to_code+0x180/0x180 [ 877.835803][T16783] ? legacy_parse_monolithic+0x320/0x320 [ 877.841480][T16783] vfs_get_tree+0xd8/0x5d0 [ 877.845948][T16783] do_new_mount+0x7b5/0x16f0 [ 877.850598][T16783] path_mount+0x1021/0x28b0 [ 877.855159][T16783] __se_sys_mount+0x8a8/0x9d0 [ 877.859900][T16783] __ia32_sys_mount+0x157/0x1b0 [ 877.864800][T16783] __do_fast_syscall_32+0x96/0xf0 [ 877.869869][T16783] do_fast_syscall_32+0x34/0x70 [ 877.874760][T16783] do_SYSENTER_32+0x1b/0x20 [ 877.879300][T16783] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 877.885768][T16783] RIP: 0023:0xf6ee5549 [ 877.889851][T16783] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 877.909496][T16783] RSP: 002b:00000000f58df410 EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 877.918033][T16783] RAX: ffffffffffffffda RBX: 00000000f58df480 RCX: 0000000020000100 [ 877.926025][T16783] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 00000000f58df4c0 [ 877.934018][T16783] RBP: 00000000f58df4c0 R08: 0000000000000000 R09: 0000000000000000 [ 877.942006][T16783] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 877.949994][T16783] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 877.957995][T16783] [ 877.961284][T16783] Kernel Offset: disabled [ 877.965614][T16783] Rebooting in 86400 seconds..