00)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_LOCK(r3, 0xb) shmat(r1, &(0x7f0000ba2000/0x2000)=nil, 0x2000) shmat(r0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) [ 383.275960][ T37] audit: type=1800 audit(1620416855.336:204): pid=15381 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=278 res=0 errno=0 19:47:35 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:35 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:35 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, 0x0) 19:47:35 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) 19:47:35 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xe0, 0x1, 0x3f, 0x3f, 0x0, 0x2fd, 0x10004, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x1, 0x3, 0xbae, 0x1, 0x1000, 0x3, 0x8001, 0x0, 0x401, 0x0, 0x7f}, 0x0, 0x10, r1, 0xa) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 19:47:35 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x1, 0x10001, 0x4}) [ 383.664569][ T37] audit: type=1800 audit(1620416855.726:205): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=281 res=0 errno=0 19:47:35 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000000c0)={0x3}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xff, 0x4, 0x80, 0x7, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x1, @perf_config_ext={0x80, 0x81}, 0x560, 0xb73, 0x9, 0x1, 0x2, 0x5, 0x5, 0x0, 0x4, 0x0, 0x6}, r1, 0xa, r4, 0xa) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(0x0, &(0x7f0000002000/0x4000)=nil, 0x6000) 19:47:35 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x10001, 0x4}) [ 383.885401][T15457] binder: 15455:15457 unknown command 0 [ 383.912047][T15457] binder: 15455:15457 ioctl c0306201 20000200 returned -22 19:47:36 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) [ 383.953487][T15459] binder: 15455:15459 unknown command 0 [ 383.974061][T15459] binder: 15455:15459 ioctl c0306201 20000200 returned -22 19:47:36 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x82, 0x9, 0x8, 0x2, 0x0, 0x1a, 0x441c0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3f, 0x4, @perf_bp={&(0x7f0000000140), 0x4}, 0x4000, 0x1, 0x7, 0x9, 0x80, 0x6, 0x7, 0x0, 0x8, 0x0, 0xffff}, r2, 0x9, r1, 0x2) perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x1, 0x2, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x183, 0xd640, 0x7, 0x9, 0x4, 0x0, 0x7, 0x0, 0xb499, 0x0, 0xa71}, r0, 0x10, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000100)) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(0x0, &(0x7f0000002000/0x4000)=nil, 0x6000) 19:47:36 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4}) 19:47:36 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) 19:47:37 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:37 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x0, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:37 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) 19:47:37 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x400, &(0x7f0000400000/0xc00000)=nil) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r2, 0x0) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r1, &(0x7f0000407000/0x1000)=nil, 0x5000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x3000, 0x78000000, &(0x7f00004d5000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r3 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r3, &(0x7f00007f1000/0x3000)=nil, 0x4000) 19:47:37 executing program 0: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x7) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x6000) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x29cc00, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000080)={0x5, 0x407, 0x54, 0x7fff, 0x401}) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f00000000c0)=""/56) 19:47:37 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x12f}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) shmctl$IPC_RMID(r0, 0x0) 19:47:37 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)) 19:47:37 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x24, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) [ 385.787013][ T37] audit: type=1800 audit(1620416857.846:206): pid=15498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=283 res=0 errno=0 19:47:37 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c0, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x44acdd5eb694b635}, {0xc, 0x8f, 0xf43}, {0xc, 0x90, 0x20}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0xf2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x3}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r2 = dup(r0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000005c0)={0x81, 0x1, 0xf7, 0x6, 0x3f}, 0xc) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a4, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ed}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd1a3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x101}}}}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf6fb}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8cb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeeb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40005}, 0x1) 19:47:38 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630034ebe824784f8adfee73000f630c400000"], 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x3}) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r5 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = dup2(r5, r4) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000002000/0x1000)=nil, 0x1000}, &(0x7f00000000c0)=0x10) 19:47:38 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x12f}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) shmctl$IPC_RMID(r0, 0x0) [ 386.022486][ T37] audit: type=1800 audit(1620416858.086:207): pid=15514 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=285 res=0 errno=0 19:47:38 executing program 1: ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000000)={0x0, 0x9, 0x9, 0x1}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000400)={r0, 0x3, 0xfffffffffffffffb, 0x1}) shmctl$SHM_UNLOCK(0x0, 0xc) [ 386.103945][ T37] audit: type=1800 audit(1620416858.116:208): pid=15515 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=98 res=0 errno=0 19:47:39 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:39 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c0, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x44acdd5eb694b635}, {0xc, 0x8f, 0xf43}, {0xc, 0x90, 0x20}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x5}, {0xc, 0x90, 0x1ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x200}, {0xc, 0x90, 0x7fff}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3ff}, {0xc, 0x90, 0xf2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x3}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r2 = dup(r0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000005c0)={0x81, 0x1, 0xf7, 0x6, 0x3f}, 0xc) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1a4, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ed}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5f}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd1a3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x101}}}}]}, @TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf6fb}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8cb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeeb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40005}, 0x1) 19:47:39 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) 19:47:39 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:39 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmget(0x3, 0x3000, 0x4, &(0x7f0000a3a000/0x3000)=nil) shmctl$SHM_UNLOCK(0x0, 0xc) 19:47:39 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x12f}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) shmctl$IPC_RMID(r0, 0x0) 19:47:39 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x12f}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) shmctl$IPC_RMID(r0, 0x0) [ 387.679475][ T37] audit: type=1800 audit(1620416859.746:209): pid=15548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=289 res=0 errno=0 19:47:39 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x12f}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) shmctl$IPC_RMID(r0, 0x0) 19:47:39 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x12f}], 0x4, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x5) tkill(r2, 0x34) ptrace$cont(0x18, r2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) exit_group(0x0) shmctl$IPC_RMID(r0, 0x0) [ 387.768599][ T37] audit: type=1800 audit(1620416859.756:210): pid=15549 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=99 res=0 errno=0 [ 387.877767][ T37] audit: type=1800 audit(1620416859.936:211): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=290 res=0 errno=0 19:47:40 executing program 0: perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x44004, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) 19:47:40 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0xff, 0x5, 0xfc, 0x0, 0x1000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x80000000, 0x4, @perf_config_ext={0x1, 0x558}, 0x1041a, 0x1, 0x4, 0xe, 0xa9, 0xcc, 0x7fff, 0x0, 0x800, 0x0, 0x100}, 0x0, 0xa, 0xffffffffffffffff, 0x9) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x3000) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) [ 387.997629][ T37] audit: type=1800 audit(1620416859.996:212): pid=15558 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=100 res=0 errno=0 [ 388.063312][ T37] audit: type=1800 audit(1620416860.126:213): pid=15562 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=291 res=0 errno=0 19:47:40 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x10001, 0x4}) [ 388.182921][ T37] audit: type=1800 audit(1620416860.246:214): pid=15565 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=101 res=0 errno=0 19:47:40 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:40 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x10001, 0x4}) 19:47:40 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) dup2(r1, r5) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:40 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:40 executing program 1: r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000e3b000/0x3000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000e3e000/0x4000)=nil, 0x4000) r2 = shmget(0x0, 0x4000, 0x54000000, &(0x7f0000889000/0x4000)=nil) shmat(r2, &(0x7f0000dc7000/0x2000)=nil, 0x2000) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) r3 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r3, &(0x7f0000c7a000/0x1000)=nil, 0x5000) shmctl$SHM_UNLOCK(r1, 0xc) [ 388.812259][T15579] binder: 15575:15579 ioctl d000943e 200006c0 returned -22 19:47:41 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) dup2(r1, r5) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 388.885421][T15579] binder: 15575:15579 unknown command 0 [ 388.915933][T15579] binder: 15575:15579 ioctl c0306201 20000200 returned -22 [ 388.936797][T15586] binder: 15575:15586 unknown command 1644978959 [ 388.966991][T15586] binder: 15575:15586 ioctl c0306201 200001c0 returned -22 [ 389.063186][T15591] binder: 15589:15591 ioctl d000943e 200006c0 returned -22 19:47:41 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) dup2(r1, r5) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 389.116397][T15591] binder: 15589:15591 unknown command 0 [ 389.164488][T15591] binder: 15589:15591 ioctl c0306201 20000200 returned -22 [ 389.174750][T15594] binder: 15589:15594 unknown command 1644978959 [ 389.190689][T15594] binder: 15589:15594 ioctl c0306201 200001c0 returned -22 19:47:41 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) dup2(r1, r5) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 389.232763][T15596] binder: 15595:15596 ioctl d000943e 200006c0 returned -22 [ 389.272858][T15596] binder: 15595:15596 unknown command 0 [ 389.294679][T15596] binder: 15595:15596 ioctl c0306201 20000200 returned -22 [ 389.322764][T15596] binder: 15595:15596 unknown command 1644978959 [ 389.339680][T15596] binder: 15595:15596 ioctl c0306201 200001c0 returned -22 19:47:41 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "51bc5f5f8759d6a25739fe9740fd04c9de4fcdbbf0be6b27f4c1ea95bb5fce5882081dd692b2fcb8c5d9b51112249308bdf23255ca90940472d6b0d719e94db884df6cab655534c3e5911cfff93187e2e52afcfdf82252d931bfa7e6954f3e2195299b3e33a9732528e5a0c517d8ffa48b273e59b4dd811b04672b5c9c16f3cfa0d41c3fedbf0aa85fcf4ed10e5f1b8f7a48767feae1a19d62137fc1a8285ba9dc528066cb64c5f833cb76510e5ced93644f3a648c83d39fcf7a76abe342fcf2ae94503808f7ea469c0faf7e188f3ce363392fe8ba158bc3de2b6133fc3ba1c90851e6e2265e270b2479d06f38db4bd6941002169ed6bdbb2ca68de34c4f927c", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) dup2(r1, r5) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 389.414249][T15598] binder: 15597:15598 ioctl d000943e 200006c0 returned -22 [ 389.463622][T15598] binder: 15597:15598 unknown command 0 [ 389.485413][T15598] binder: 15597:15598 ioctl c0306201 20000200 returned -22 [ 389.515127][T15598] binder: 15597:15598 unknown command 1644978959 [ 389.537298][T15602] binder: 15601:15602 ioctl d000943e 200006c0 returned -22 [ 389.547070][T15598] binder: 15597:15598 ioctl c0306201 200001c0 returned -22 19:47:41 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) dup2(r1, r5) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 389.586044][T15602] binder: 15601:15602 unknown command 0 [ 389.607089][T15602] binder: 15601:15602 ioctl c0306201 20000200 returned -22 19:47:41 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) [ 389.635978][T15604] binder: 15601:15604 unknown command 1644978959 [ 389.675930][T15604] binder: 15601:15604 ioctl c0306201 200001c0 returned -22 [ 389.774332][T15608] binder: 15606:15608 ioctl d000943e 200006c0 returned -22 19:47:41 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) dup2(r1, r5) [ 389.816401][T15608] binder: 15606:15608 unknown command 0 [ 389.856644][T15608] binder: 15606:15608 ioctl c0306201 20000200 returned -22 [ 389.879170][T15611] binder: 15606:15611 unknown command 1644978959 [ 389.904415][T15611] binder: 15606:15611 ioctl c0306201 200001c0 returned -22 [ 389.937088][T15613] binder: 15612:15613 ioctl d000943e 200006c0 returned -22 [ 389.975502][T15613] binder: 15612:15613 unknown command 0 [ 389.997064][T15613] binder: 15612:15613 ioctl c0306201 20000200 returned -22 [ 390.045034][T15613] binder: 15612:15613 unknown command 1644978959 [ 390.063966][T15613] binder: 15612:15613 ioctl c0306201 200001c0 returned -22 19:47:42 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:42 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "0fb3c6bc11a66b381fbc55b87db5525956186e5829d5822a734185c3877e37e7f7a0d0a25c30b8b86239754a2f692c7a4453c4066b75bf7ff0b22bfdc59b46ab0cacaf2f28524a3bf726f020e721184f6e56a17f0e2397a776d86974837fb0377aaf922bd4e96b3254d62b397dc9fca613f3f727f90e05233a5adf04c15172162bb41eca4113ebcb6dbdc9571254fb80343eec54ba342e13f4a0f8737507c1b2cba95cbfe70b14ade10cbdba4ba8c166ad006bc4d7b086401acc63ee19a421f4b3940d5e31fd63554ffdd00dfb59c44d55fb6516d79a991c5cae1a5bc4a803ba6923198e92491a833fa52cf2190db3cefeb57492af4de309e9bfdd14f26c8ad0a533ceea2e8d9784796a6d8df75b77c8980c13899e83d6965da0008044f47d034041dc8e864c8f8d671dfb335086f43acde3af9f527e127664c38958cb1ae86d0b035257372b8366bf7bf46130044dcd55730d8f73cbecad294c8fcb72a48178d7c82c44d747222fe774dd3253d34c6b27391ab92095d400edb4a483bb85e6d238c6efafedd2c316365eede7c2b483c7e1bb49223d17c3c3e4560a81dbf2c0a6e58a73af3a4b512d0c2527da58a004beaaedfc35f0a6b3fa43314bde4f7544ff9a577391edbd514b58f2cb077a40e27ba9911528629829bff265f0a0aed076033a14050e76a7e96a2bbccaa9d60c1e82a44bc4b7f0a6c9dc2c6701d6cf6b8e1a99627b6dc57bc3341845ac717942a6ef5d29066ebaa9044367bb675f3b8bacafd08ff75925ae3354afecdde3e37d2466bd55cca06db2adc28aa2bfc53ca26dd6612b0abac3cb4f81af400f5feddb1dfe0ce2c10e84deb866b30e0e70b0838e5c811b2f1e36df040b697e050d81c4fed89045205619597195706c3864b18aba430cf8dc77ead84e373a63ffd4ede7ff2a25fdcc5b24ac52b4c9625cb3820860907390eb71758753bbead477f2a3f4422ffc870a81d3d1f2c806769aab5908d77e6e3c19d01f5bd808d06e6ac8a84b1b58f3917e6c9ff2e18ca638f68d59ec570d2fc75c573c4e63967dbcbd03f4a950ab422769bf43a4badd0a23303fb197bee92c010aabc30453abe9e9214d7f90d23c1a0527531e4cbbdd017b34c6159b365a836a87376b1dff534038c962b8ffd902aa35a6cff4bfcb8f02c948a18be6388d89d6e35fea8736ed68b795d9d3f0706b8cd5beba07a6d539418d5502cb77acc232dbccef9c1b6232d0209b05cc274b266994a5cea20c7661ac69fe4902ffc73f196dd4a7a2a8e7d9b36ca088eba5c58726bb972ff6fc4eb3fac3bbcaefd5550a2e78540387a713112fbec38cb8d0d6b50380205f3d61357c077aa0e997246c19f729cbe1c9f501da3de3a8ed7ea574ffb889f63a66f35cc6bc75f2264e8e1e541ee2416c3f630918eb931fb941dcb338c979ea996e001148ed883d99f5b5503635b5d7a30b94d2c70332fe88e0b55668d72837fb5276fe96dc34c871c2c3906d938e971410709814cfcd83ae07f816e0eb9993e9cf94ddf2b930d978322e031416b0441d76dd29f64ccc731eaeaa69dcd84d8ed405b4636355698e6444610a0ace07428435cbdbed7feefece44716609ec38498799a15ecaed377fd79079d61bb660eecb7dd561254e8a4de2c726658494e60d415a506b727b7231dc2a587c26b330755afa467efef30a22a9a60cd462ecef87d9e13f0ec71f3d2f730f462c57d1339f563f426d9ffb0d8721ad95fcfd5e187fe43b3b8a714675485a7838e980f89500e012b42a972abb49df0e4db94351ea3d65199117d37a4747a2c2a26d27c8b5eb5f21c1bbfc1c647ae08d37e44dbd4037aa75fe5cd83d9ddd5891b733c4a5f1f956572b7ece0547fd70bcde1c83ff12fb3607f1fc3e4cc65adc9a5e0546a748f0cf37332b5aae7733cd2283d9453b807087c130bb331a7c0c24b66c9495dde3f951d8595f4c4c77b60df5179d250ff55a61d0f1a8dc69b3b4136a7bccea747370b5a598f59e03b79a38d7697b81515d2fe38a486564ef962bd9c9ffb4ee5b7845f8c9913dd329114b04cc9ac409fc71ea7d01d07fbf8b490ced2052cf063eb9de23f44471dfe7bb42fb9a5a6d96ec77024163b5a31a09fa57892175d4166a33c0228d23143ddee6fe33ff3dc00f3c8fc4f6dd6167255ae68638b56458e7bca6eec40d2ca246913dd4ff73985770a8e91429c1573ec376bc4d1105fa50dc778822009f76d899bce68b5bfe06b7ec4e9b2b5f4ab3f23b43f86d4cfeda323a65407e3b991009e8d26c809cb94e97cfbf91e25fd0497b18e2eb10298373ba0ffb12247b1c94f8be661805ecd90cd56cbe14de4bc7d6f03c8114e879d1858531b4a6096bd1690578a9ec62bb0b805bb784075c404a828aaecfdc30cd67db7d9231957aa5c0b33fb13162b5d98333dc8d3ce94d4bac2cf4933cb7769066d7a492113ff62048dcbdfeae8918515f875cbb3f874178c4520e5f176793d375717624f6da427f17c4dbf2a456dd1eb086fa69fc78741a72f89590b00fc3288c7c647440b1eabf3c5b5f5b307c8f2c458ac745d6437fd0041bf3c283c0b1e446a0ef29a3473f546b2ef63ad0fedefba702f7aff4f76d5e3c2ae81f0f04400494e787af824e7c3e14754b1cf78dd87c9ab71e8324a3a697ccb1e38430190f423e26755f84aaf103218b46977d5dcc9e6067c0774f32bc997a796c355c437197a40dd17a5eb86b357646a5f6837f84a557ed098443afdd115ccda7523f04c9fc1a11c6030075d7947375dd392502aa52514120b912a21d3cd67be7592e3e866b4618c8ba70353b25a50b79400af3c56ba804fcb4886ca0c711f1b927b2629d82cd2b72d02faf3ce610b9f11117b1a06a3cf0f2c88125bdccc77c28ca88d02fa71e647556e241703dacb0cbbfa2fc1490c3518660e52b2eec8fbc1beba43c6ab07e159105ffb567731476fadb7ec6bc4c3fb336dca0a589a3090e49ff352787ff717b1861e3b419fa815168c6060d37404255f6c33f46455a9f7b9aa5027dc68ee0f29fdb291268b3c46ff775c2041982da96971d4999d3b25b5f4ebd54ca6fd298b143370071335c105313281ce89f6f9e5cf91f168a18b5e96982e9eef1cb837f8a276fc4c1ea772166b679bfc0a1824ab1e18695e2d5a8deee8ec025362b2dc50b501ccc361e39d0ce3a4d72342b5f781b8487cf4e8102fc9648fb55f26d96f12d35b05b92d77130176a6313141ea90328e3f7d88bf087699b68c0ee487f0845ba82245efccb7e80062e5a2c3eaab3dafaf1b1402f8d1c6aa0440876188c7b6768e3979fdc4b77c94dbbc975bd8ec938dad0d08c402d2cc623d61143119931bdb5d82cb7e224a068e501ed56124637866be415da57cf8cf217e118d6c935c4bda6c937752a0682b5ffd7cb2291a90b18a738751ea9e36dcfb8327b3673e95f22cac03a6589ed3fe151991fbb33c616d49061382e6dcf6f86f872222c5dec3456250c7c6e92c82c2b34857a76c76d653a9e0d4c136a59b72805ebe692cf02dfa9c011653086e6f63425860b1ef1d48c958682a04e88d098b33d049691e3ccd06c4a96e23f3a84f749a18ccb7ada97c484fab1786038a3343ed76aaa68dd1138bbc92ce36db02063fc47d48ec3989ad049667495c67b39a2fa67605c98b3aaf0cba3b461e77b543228e4e14efb3c83357f631c6c033fa35c6982746d2c123f5bf5aaabff80c9273ee5b835eec3e47bd622b07e5a5275afec1d90b089be85ba649cfcc2c6564a957b3dbdd68314ea59f9154306af62a416953ed1eb7c078c412820a9ac372a861cf7e4c993b041f2bf281359a660e0ee2cf74e2a51ce4643333791edf244ec486751c0eebf7930649d2e894de94bc3b3ed68a8c6d988f73c554d58d979375f7b1e1d261f7aadebac51dd7640dd5aff0439415583e2dbd68dc46d3ed9be831281e4e0ebc666217e30526a2c666aac6c57f06d61cc8a7bbc465d174eac69763a4ab0c49bf450296a095f5cea9c4fc1c64258ff528a07f9c4efc560db9a8240cbe4b50a7035b5d291c312220c4f2a84b0687e50c871e0364068d37462b41478fedbb0d373d3e688824abc4283d9a2838b705090d94e78233642ecc191a5d4dc561ef32ff34bebdcc86839945f8dad02f6e467001b81c54d9ca165c161f9daa68bad1bdfe2f99b603995567903f179397857b2e31bbbdbd7c1db247ddeeb865d43058f94dc4f18a7e18c7bbaa37602cc9cbbd45969a107954365285bd452845e75c936a2687f91fc19a1486df4904f98e042e9edd5589bb120d40b74a7367b42e3ec431a93efa29d0f9da399fd9f11ecf0e2f06bd95ee8927e6b64a99038e3d83f35841ba2e64601432aac98b65cf87ce19301d8ca86dbe3f96ce9081cfb028047ac388c24d99625eb987c5be75e3ad0c99b7d684775cc46b65d937f6da2326abe3460c7f1553c5b10d82d576f142c74b1a10fefaadd7e4e659483770cb0bd0f33acd34dd7aedc3cbcd1133527053a9b5890c0ee9753a783907259043714ee957d4a1690e4fdcfc18a1fd6e5257e65dee62e0a84625767c77379f14c24aef1fa039f95989b50a99fbb3db1472d5c45d8d2f3f2ac258cd9d72d9bf117b6653d59173136121740251c809c5f3d9edb01e7028c5e747453fc98885bca6917a1c8791efd3acdb76909dda4e0fc1fcd4e975b3110e39245e4bee9e142d53586f0e4fe355834b05998d818f71c99eef77984a68c2c9d2ce17c6e3d3e987704722f9458f8ffb128f84533c68f4b495f48fa55018581ed8e0f07b46cb2af05ba34a5e14d52ad7c692fad974a7709c8c0e6d74f9fc1afa2c1937cd1f9a16eef7c03d98a67bf6166aae4fb07e857c4f16d145c7183528cac26d8dfa8a02b8132eecfa94606800d9a31234d263947a395665462989ffdfb9bdf01c433102a5d94389939f664b997027e5848dfea122fbc7425c7317d6a532f6fe61474e0e1a7fe43ec02389cf7c622e5f71069a13f673050a46467333d7e315293dd8ec1bde65ec03679828c951d6b416e10b3352edfd5cd5a91da40d1d1e055899341cbb8c85eda0a53acdb61c0a4c0e15e8c9f755cfc78ac89bd80b90ab29d52612e1b7e20776e407cd7fa6fc2cf05ac727888df86066c95c1c8759ae1ec868193f6549a9bbff196c33d39edc99c807db2a5c3095648035a4592d12f421955c7174015b6dcb358f8c9af8ed446ca44a8d97d14244d06a5d8fc556bfac13a3131bfdf005541cd0e6816dcb92f8a19d0ff6e049439a7dd194d0a7a0fa2fd76e2a7ef94dd96da22020887cc56d45ec38d343e1f44e858b4034dc6aea806c886ad5cd697457f95a7c824e3d765293ea1071ec25030b2f4dc2648279e902db8b5ba399f94f913996b676493f9e57e540e164f639f18e193cb833f9c5768"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) dup2(r1, r5) 19:47:42 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) 19:47:42 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x1000, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) r1 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000d30000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffd000/0x2000)=nil) r2 = shmget(0x3, 0x4000, 0x2, &(0x7f0000636000/0x4000)=nil) shmat(r2, &(0x7f0000a65000/0x3000)=nil, 0x5000) shmat(r0, &(0x7f00005f2000/0x3000)=nil, 0x2000) 19:47:42 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) [ 390.829208][T15634] binder: 15625:15634 ioctl d000943e 200006c0 returned -22 [ 390.832825][T15633] binder: 15627:15633 ioctl d000943e 200006c0 returned -22 [ 390.873338][T15634] binder: 15625:15634 unknown command 0 [ 390.892538][T15634] binder: 15625:15634 ioctl c0306201 20000200 returned -22 [ 390.893484][T15633] binder: 15627:15633 unknown command 0 [ 390.915641][T15634] binder: 15625:15634 unknown command 1644978959 [ 390.936450][T15633] binder: 15627:15633 ioctl c0306201 20000200 returned -22 [ 390.952617][T15634] binder: 15625:15634 ioctl c0306201 200001c0 returned -22 [ 390.956539][T15637] binder: 15627:15637 unknown command 1644978959 19:47:43 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) [ 390.980424][T15637] binder: 15627:15637 ioctl c0306201 200001c0 returned -22 19:47:43 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, r3) 19:47:43 executing program 1: shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x2000) r1 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ca4000/0x2000)=nil) shmat(r1, &(0x7f0000998000/0x3000)=nil, 0x2000) [ 391.153399][T15642] binder: 15641:15642 ioctl d000943e 200006c0 returned -22 [ 391.206298][T15645] binder: 15643:15645 ioctl d000943e 200006c0 returned -22 [ 391.216124][T15642] binder: 15641:15642 unknown command 0 [ 391.240590][T15642] binder: 15641:15642 ioctl c0306201 20000200 returned -22 [ 391.276342][T15645] binder: 15643:15645 unknown command 0 [ 391.290354][T15642] binder: 15641:15642 unknown command 1644978959 [ 391.298464][T15645] binder: 15643:15645 ioctl c0306201 20000200 returned -22 [ 391.310655][T15642] binder: 15641:15642 ioctl c0306201 200001c0 returned -22 19:47:43 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:43 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r4, r3) [ 391.501671][T15654] binder: 15652:15654 ioctl d000943e 200006c0 returned -22 [ 391.529398][T15655] binder: 15653:15655 ioctl d000943e 200006c0 returned -22 [ 391.532534][T15654] binder: 15652:15654 unknown command 0 [ 391.556372][T15654] binder: 15652:15654 ioctl c0306201 20000200 returned -22 [ 391.586336][T15655] binder: 15653:15655 unknown command 0 19:47:43 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 391.612914][T15655] binder: 15653:15655 ioctl c0306201 20000200 returned -22 19:47:43 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) [ 391.769959][T15659] binder: 15658:15659 ioctl d000943e 200006c0 returned -22 [ 391.802748][T15659] binder: 15658:15659 unknown command 0 [ 391.814845][T15659] binder: 15658:15659 ioctl c0306201 20000200 returned -22 19:47:44 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:44 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:44 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) [ 392.112165][T15669] binder: 15666:15669 ioctl d000943e 200006c0 returned -22 [ 392.138205][T15671] binder: 15667:15671 ioctl d000943e 200006c0 returned -22 19:47:44 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "51bc5f5f8759d6a25739fe9740fd04c9de4fcdbbf0be6b27f4c1ea95bb5fce5882081dd692b2fcb8c5d9b51112249308bdf23255ca90940472d6b0d719e94db884df6cab655534c3e5911cfff93187e2e52afcfdf82252d931bfa7e6954f3e2195299b3e33a9732528e5a0c517d8ffa48b273e59b4dd811b04672b5c9c16f3cfa0d41c3fedbf0aa85fcf4ed10e5f1b8f7a48767feae1a19d62137fc1a8285ba9dc528066cb64c5f833cb76510e5ced93644f3a648c83d39fcf7a76abe342fcf2ae94503808f7ea469c0faf7e188f3ce363392fe8ba158bc3de2b6133fc3ba1c90851e6e2265e270b2479d06f38db4bd6941002169ed6bdbb2ca68de34c4f927c", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:44 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "0fb3c6bc11a66b381fbc55b87db5525956186e5829d5822a734185c3877e37e7f7a0d0a25c30b8b86239754a2f692c7a4453c4066b75bf7ff0b22bfdc59b46ab0cacaf2f28524a3bf726f020e721184f6e56a17f0e2397a776d86974837fb0377aaf922bd4e96b3254d62b397dc9fca613f3f727f90e05233a5adf04c15172162bb41eca4113ebcb6dbdc9571254fb80343eec54ba342e13f4a0f8737507c1b2cba95cbfe70b14ade10cbdba4ba8c166ad006bc4d7b086401acc63ee19a421f4b3940d5e31fd63554ffdd00dfb59c44d55fb6516d79a991c5cae1a5bc4a803ba6923198e92491a833fa52cf2190db3cefeb57492af4de309e9bfdd14f26c8ad0a533ceea2e8d9784796a6d8df75b77c8980c13899e83d6965da0008044f47d034041dc8e864c8f8d671dfb335086f43acde3af9f527e127664c38958cb1ae86d0b035257372b8366bf7bf46130044dcd55730d8f73cbecad294c8fcb72a48178d7c82c44d747222fe774dd3253d34c6b27391ab92095d400edb4a483bb85e6d238c6efafedd2c316365eede7c2b483c7e1bb49223d17c3c3e4560a81dbf2c0a6e58a73af3a4b512d0c2527da58a004beaaedfc35f0a6b3fa43314bde4f7544ff9a577391edbd514b58f2cb077a40e27ba9911528629829bff265f0a0aed076033a14050e76a7e96a2bbccaa9d60c1e82a44bc4b7f0a6c9dc2c6701d6cf6b8e1a99627b6dc57bc3341845ac717942a6ef5d29066ebaa9044367bb675f3b8bacafd08ff75925ae3354afecdde3e37d2466bd55cca06db2adc28aa2bfc53ca26dd6612b0abac3cb4f81af400f5feddb1dfe0ce2c10e84deb866b30e0e70b0838e5c811b2f1e36df040b697e050d81c4fed89045205619597195706c3864b18aba430cf8dc77ead84e373a63ffd4ede7ff2a25fdcc5b24ac52b4c9625cb3820860907390eb71758753bbead477f2a3f4422ffc870a81d3d1f2c806769aab5908d77e6e3c19d01f5bd808d06e6ac8a84b1b58f3917e6c9ff2e18ca638f68d59ec570d2fc75c573c4e63967dbcbd03f4a950ab422769bf43a4badd0a23303fb197bee92c010aabc30453abe9e9214d7f90d23c1a0527531e4cbbdd017b34c6159b365a836a87376b1dff534038c962b8ffd902aa35a6cff4bfcb8f02c948a18be6388d89d6e35fea8736ed68b795d9d3f0706b8cd5beba07a6d539418d5502cb77acc232dbccef9c1b6232d0209b05cc274b266994a5cea20c7661ac69fe4902ffc73f196dd4a7a2a8e7d9b36ca088eba5c58726bb972ff6fc4eb3fac3bbcaefd5550a2e78540387a713112fbec38cb8d0d6b50380205f3d61357c077aa0e997246c19f729cbe1c9f501da3de3a8ed7ea574ffb889f63a66f35cc6bc75f2264e8e1e541ee2416c3f630918eb931fb941dcb338c979ea996e001148ed883d99f5b5503635b5d7a30b94d2c70332fe88e0b55668d72837fb5276fe96dc34c871c2c3906d938e971410709814cfcd83ae07f816e0eb9993e9cf94ddf2b930d978322e031416b0441d76dd29f64ccc731eaeaa69dcd84d8ed405b4636355698e6444610a0ace07428435cbdbed7feefece44716609ec38498799a15ecaed377fd79079d61bb660eecb7dd561254e8a4de2c726658494e60d415a506b727b7231dc2a587c26b330755afa467efef30a22a9a60cd462ecef87d9e13f0ec71f3d2f730f462c57d1339f563f426d9ffb0d8721ad95fcfd5e187fe43b3b8a714675485a7838e980f89500e012b42a972abb49df0e4db94351ea3d65199117d37a4747a2c2a26d27c8b5eb5f21c1bbfc1c647ae08d37e44dbd4037aa75fe5cd83d9ddd5891b733c4a5f1f956572b7ece0547fd70bcde1c83ff12fb3607f1fc3e4cc65adc9a5e0546a748f0cf37332b5aae7733cd2283d9453b807087c130bb331a7c0c24b66c9495dde3f951d8595f4c4c77b60df5179d250ff55a61d0f1a8dc69b3b4136a7bccea747370b5a598f59e03b79a38d7697b81515d2fe38a486564ef962bd9c9ffb4ee5b7845f8c9913dd329114b04cc9ac409fc71ea7d01d07fbf8b490ced2052cf063eb9de23f44471dfe7bb42fb9a5a6d96ec77024163b5a31a09fa57892175d4166a33c0228d23143ddee6fe33ff3dc00f3c8fc4f6dd6167255ae68638b56458e7bca6eec40d2ca246913dd4ff73985770a8e91429c1573ec376bc4d1105fa50dc778822009f76d899bce68b5bfe06b7ec4e9b2b5f4ab3f23b43f86d4cfeda323a65407e3b991009e8d26c809cb94e97cfbf91e25fd0497b18e2eb10298373ba0ffb12247b1c94f8be661805ecd90cd56cbe14de4bc7d6f03c8114e879d1858531b4a6096bd1690578a9ec62bb0b805bb784075c404a828aaecfdc30cd67db7d9231957aa5c0b33fb13162b5d98333dc8d3ce94d4bac2cf4933cb7769066d7a492113ff62048dcbdfeae8918515f875cbb3f874178c4520e5f176793d375717624f6da427f17c4dbf2a456dd1eb086fa69fc78741a72f89590b00fc3288c7c647440b1eabf3c5b5f5b307c8f2c458ac745d6437fd0041bf3c283c0b1e446a0ef29a3473f546b2ef63ad0fedefba702f7aff4f76d5e3c2ae81f0f04400494e787af824e7c3e14754b1cf78dd87c9ab71e8324a3a697ccb1e38430190f423e26755f84aaf103218b46977d5dcc9e6067c0774f32bc997a796c355c437197a40dd17a5eb86b357646a5f6837f84a557ed098443afdd115ccda7523f04c9fc1a11c6030075d7947375dd392502aa52514120b912a21d3cd67be7592e3e866b4618c8ba70353b25a50b79400af3c56ba804fcb4886ca0c711f1b927b2629d82cd2b72d02faf3ce610b9f11117b1a06a3cf0f2c88125bdccc77c28ca88d02fa71e647556e241703dacb0cbbfa2fc1490c3518660e52b2eec8fbc1beba43c6ab07e159105ffb567731476fadb7ec6bc4c3fb336dca0a589a3090e49ff352787ff717b1861e3b419fa815168c6060d37404255f6c33f46455a9f7b9aa5027dc68ee0f29fdb291268b3c46ff775c2041982da96971d4999d3b25b5f4ebd54ca6fd298b143370071335c105313281ce89f6f9e5cf91f168a18b5e96982e9eef1cb837f8a276fc4c1ea772166b679bfc0a1824ab1e18695e2d5a8deee8ec025362b2dc50b501ccc361e39d0ce3a4d72342b5f781b8487cf4e8102fc9648fb55f26d96f12d35b05b92d77130176a6313141ea90328e3f7d88bf087699b68c0ee487f0845ba82245efccb7e80062e5a2c3eaab3dafaf1b1402f8d1c6aa0440876188c7b6768e3979fdc4b77c94dbbc975bd8ec938dad0d08c402d2cc623d61143119931bdb5d82cb7e224a068e501ed56124637866be415da57cf8cf217e118d6c935c4bda6c937752a0682b5ffd7cb2291a90b18a738751ea9e36dcfb8327b3673e95f22cac03a6589ed3fe151991fbb33c616d49061382e6dcf6f86f872222c5dec3456250c7c6e92c82c2b34857a76c76d653a9e0d4c136a59b72805ebe692cf02dfa9c011653086e6f63425860b1ef1d48c958682a04e88d098b33d049691e3ccd06c4a96e23f3a84f749a18ccb7ada97c484fab1786038a3343ed76aaa68dd1138bbc92ce36db02063fc47d48ec3989ad049667495c67b39a2fa67605c98b3aaf0cba3b461e77b543228e4e14efb3c83357f631c6c033fa35c6982746d2c123f5bf5aaabff80c9273ee5b835eec3e47bd622b07e5a5275afec1d90b089be85ba649cfcc2c6564a957b3dbdd68314ea59f9154306af62a416953ed1eb7c078c412820a9ac372a861cf7e4c993b041f2bf281359a660e0ee2cf74e2a51ce4643333791edf244ec486751c0eebf7930649d2e894de94bc3b3ed68a8c6d988f73c554d58d979375f7b1e1d261f7aadebac51dd7640dd5aff0439415583e2dbd68dc46d3ed9be831281e4e0ebc666217e30526a2c666aac6c57f06d61cc8a7bbc465d174eac69763a4ab0c49bf450296a095f5cea9c4fc1c64258ff528a07f9c4efc560db9a8240cbe4b50a7035b5d291c312220c4f2a84b0687e50c871e0364068d37462b41478fedbb0d373d3e688824abc4283d9a2838b705090d94e78233642ecc191a5d4dc561ef32ff34bebdcc86839945f8dad02f6e467001b81c54d9ca165c161f9daa68bad1bdfe2f99b603995567903f179397857b2e31bbbdbd7c1db247ddeeb865d43058f94dc4f18a7e18c7bbaa37602cc9cbbd45969a107954365285bd452845e75c936a2687f91fc19a1486df4904f98e042e9edd5589bb120d40b74a7367b42e3ec431a93efa29d0f9da399fd9f11ecf0e2f06bd95ee8927e6b64a99038e3d83f35841ba2e64601432aac98b65cf87ce19301d8ca86dbe3f96ce9081cfb028047ac388c24d99625eb987c5be75e3ad0c99b7d684775cc46b65d937f6da2326abe3460c7f1553c5b10d82d576f142c74b1a10fefaadd7e4e659483770cb0bd0f33acd34dd7aedc3cbcd1133527053a9b5890c0ee9753a783907259043714ee957d4a1690e4fdcfc18a1fd6e5257e65dee62e0a84625767c77379f14c24aef1fa039f95989b50a99fbb3db1472d5c45d8d2f3f2ac258cd9d72d9bf117b6653d59173136121740251c809c5f3d9edb01e7028c5e747453fc98885bca6917a1c8791efd3acdb76909dda4e0fc1fcd4e975b3110e39245e4bee9e142d53586f0e4fe355834b05998d818f71c99eef77984a68c2c9d2ce17c6e3d3e987704722f9458f8ffb128f84533c68f4b495f48fa55018581ed8e0f07b46cb2af05ba34a5e14d52ad7c692fad974a7709c8c0e6d74f9fc1afa2c1937cd1f9a16eef7c03d98a67bf6166aae4fb07e857c4f16d145c7183528cac26d8dfa8a02b8132eecfa94606800d9a31234d263947a395665462989ffdfb9bdf01c433102a5d94389939f664b997027e5848dfea122fbc7425c7317d6a532f6fe61474e0e1a7fe43ec02389cf7c622e5f71069a13f673050a46467333d7e315293dd8ec1bde65ec03679828c951d6b416e10b3352edfd5cd5a91da40d1d1e055899341cbb8c85eda0a53acdb61c0a4c0e15e8c9f755cfc78ac89bd80b90ab29d52612e1b7e20776e407cd7fa6fc2cf05ac727888df86066c95c1c8759ae1ec868193f6549a9bbff196c33d39edc99c807db2a5c3095648035a4592d12f421955c7174015b6dcb358f8c9af8ed446ca44a8d97d14244d06a5d8fc556bfac13a3131bfdf005541cd0e6816dcb92f8a19d0ff6e049439a7dd194d0a7a0fa2fd76e2a7ef94dd96da22020887cc56d45ec38d343e1f44e858b4034dc6aea806c886ad5cd697457f95a7c824e3d765293ea1071ec25030b2f4dc2648279e902db8b5ba399f94f913996b676493f9e57e540e164f639f18e193cb833f9c5768"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) [ 392.320386][T15674] binder: 15672:15674 ioctl d000943e 200006c0 returned -22 [ 392.333053][T15675] binder: 15673:15675 ioctl d000943e 200006c0 returned -22 19:47:44 executing program 4: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) 19:47:44 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 392.513364][T15680] binder: 15678:15680 ioctl d000943e 200006c0 returned -22 [ 392.522301][T15679] binder: 15677:15679 ioctl d000943e 200006c0 returned -22 19:47:44 executing program 0: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "0fb3c6bc11a66b381fbc55b87db5525956186e5829d5822a734185c3877e37e7f7a0d0a25c30b8b86239754a2f692c7a4453c4066b75bf7ff0b22bfdc59b46ab0cacaf2f28524a3bf726f020e721184f6e56a17f0e2397a776d86974837fb0377aaf922bd4e96b3254d62b397dc9fca613f3f727f90e05233a5adf04c15172162bb41eca4113ebcb6dbdc9571254fb80343eec54ba342e13f4a0f8737507c1b2cba95cbfe70b14ade10cbdba4ba8c166ad006bc4d7b086401acc63ee19a421f4b3940d5e31fd63554ffdd00dfb59c44d55fb6516d79a991c5cae1a5bc4a803ba6923198e92491a833fa52cf2190db3cefeb57492af4de309e9bfdd14f26c8ad0a533ceea2e8d9784796a6d8df75b77c8980c13899e83d6965da0008044f47d034041dc8e864c8f8d671dfb335086f43acde3af9f527e127664c38958cb1ae86d0b035257372b8366bf7bf46130044dcd55730d8f73cbecad294c8fcb72a48178d7c82c44d747222fe774dd3253d34c6b27391ab92095d400edb4a483bb85e6d238c6efafedd2c316365eede7c2b483c7e1bb49223d17c3c3e4560a81dbf2c0a6e58a73af3a4b512d0c2527da58a004beaaedfc35f0a6b3fa43314bde4f7544ff9a577391edbd514b58f2cb077a40e27ba9911528629829bff265f0a0aed076033a14050e76a7e96a2bbccaa9d60c1e82a44bc4b7f0a6c9dc2c6701d6cf6b8e1a99627b6dc57bc3341845ac717942a6ef5d29066ebaa9044367bb675f3b8bacafd08ff75925ae3354afecdde3e37d2466bd55cca06db2adc28aa2bfc53ca26dd6612b0abac3cb4f81af400f5feddb1dfe0ce2c10e84deb866b30e0e70b0838e5c811b2f1e36df040b697e050d81c4fed89045205619597195706c3864b18aba430cf8dc77ead84e373a63ffd4ede7ff2a25fdcc5b24ac52b4c9625cb3820860907390eb71758753bbead477f2a3f4422ffc870a81d3d1f2c806769aab5908d77e6e3c19d01f5bd808d06e6ac8a84b1b58f3917e6c9ff2e18ca638f68d59ec570d2fc75c573c4e63967dbcbd03f4a950ab422769bf43a4badd0a23303fb197bee92c010aabc30453abe9e9214d7f90d23c1a0527531e4cbbdd017b34c6159b365a836a87376b1dff534038c962b8ffd902aa35a6cff4bfcb8f02c948a18be6388d89d6e35fea8736ed68b795d9d3f0706b8cd5beba07a6d539418d5502cb77acc232dbccef9c1b6232d0209b05cc274b266994a5cea20c7661ac69fe4902ffc73f196dd4a7a2a8e7d9b36ca088eba5c58726bb972ff6fc4eb3fac3bbcaefd5550a2e78540387a713112fbec38cb8d0d6b50380205f3d61357c077aa0e997246c19f729cbe1c9f501da3de3a8ed7ea574ffb889f63a66f35cc6bc75f2264e8e1e541ee2416c3f630918eb931fb941dcb338c979ea996e001148ed883d99f5b5503635b5d7a30b94d2c70332fe88e0b55668d72837fb5276fe96dc34c871c2c3906d938e971410709814cfcd83ae07f816e0eb9993e9cf94ddf2b930d978322e031416b0441d76dd29f64ccc731eaeaa69dcd84d8ed405b4636355698e6444610a0ace07428435cbdbed7feefece44716609ec38498799a15ecaed377fd79079d61bb660eecb7dd561254e8a4de2c726658494e60d415a506b727b7231dc2a587c26b330755afa467efef30a22a9a60cd462ecef87d9e13f0ec71f3d2f730f462c57d1339f563f426d9ffb0d8721ad95fcfd5e187fe43b3b8a714675485a7838e980f89500e012b42a972abb49df0e4db94351ea3d65199117d37a4747a2c2a26d27c8b5eb5f21c1bbfc1c647ae08d37e44dbd4037aa75fe5cd83d9ddd5891b733c4a5f1f956572b7ece0547fd70bcde1c83ff12fb3607f1fc3e4cc65adc9a5e0546a748f0cf37332b5aae7733cd2283d9453b807087c130bb331a7c0c24b66c9495dde3f951d8595f4c4c77b60df5179d250ff55a61d0f1a8dc69b3b4136a7bccea747370b5a598f59e03b79a38d7697b81515d2fe38a486564ef962bd9c9ffb4ee5b7845f8c9913dd329114b04cc9ac409fc71ea7d01d07fbf8b490ced2052cf063eb9de23f44471dfe7bb42fb9a5a6d96ec77024163b5a31a09fa57892175d4166a33c0228d23143ddee6fe33ff3dc00f3c8fc4f6dd6167255ae68638b56458e7bca6eec40d2ca246913dd4ff73985770a8e91429c1573ec376bc4d1105fa50dc778822009f76d899bce68b5bfe06b7ec4e9b2b5f4ab3f23b43f86d4cfeda323a65407e3b991009e8d26c809cb94e97cfbf91e25fd0497b18e2eb10298373ba0ffb12247b1c94f8be661805ecd90cd56cbe14de4bc7d6f03c8114e879d1858531b4a6096bd1690578a9ec62bb0b805bb784075c404a828aaecfdc30cd67db7d9231957aa5c0b33fb13162b5d98333dc8d3ce94d4bac2cf4933cb7769066d7a492113ff62048dcbdfeae8918515f875cbb3f874178c4520e5f176793d375717624f6da427f17c4dbf2a456dd1eb086fa69fc78741a72f89590b00fc3288c7c647440b1eabf3c5b5f5b307c8f2c458ac745d6437fd0041bf3c283c0b1e446a0ef29a3473f546b2ef63ad0fedefba702f7aff4f76d5e3c2ae81f0f04400494e787af824e7c3e14754b1cf78dd87c9ab71e8324a3a697ccb1e38430190f423e26755f84aaf103218b46977d5dcc9e6067c0774f32bc997a796c355c437197a40dd17a5eb86b357646a5f6837f84a557ed098443afdd115ccda7523f04c9fc1a11c6030075d7947375dd392502aa52514120b912a21d3cd67be7592e3e866b4618c8ba70353b25a50b79400af3c56ba804fcb4886ca0c711f1b927b2629d82cd2b72d02faf3ce610b9f11117b1a06a3cf0f2c88125bdccc77c28ca88d02fa71e647556e241703dacb0cbbfa2fc1490c3518660e52b2eec8fbc1beba43c6ab07e159105ffb567731476fadb7ec6bc4c3fb336dca0a589a3090e49ff352787ff717b1861e3b419fa815168c6060d37404255f6c33f46455a9f7b9aa5027dc68ee0f29fdb291268b3c46ff775c2041982da96971d4999d3b25b5f4ebd54ca6fd298b143370071335c105313281ce89f6f9e5cf91f168a18b5e96982e9eef1cb837f8a276fc4c1ea772166b679bfc0a1824ab1e18695e2d5a8deee8ec025362b2dc50b501ccc361e39d0ce3a4d72342b5f781b8487cf4e8102fc9648fb55f26d96f12d35b05b92d77130176a6313141ea90328e3f7d88bf087699b68c0ee487f0845ba82245efccb7e80062e5a2c3eaab3dafaf1b1402f8d1c6aa0440876188c7b6768e3979fdc4b77c94dbbc975bd8ec938dad0d08c402d2cc623d61143119931bdb5d82cb7e224a068e501ed56124637866be415da57cf8cf217e118d6c935c4bda6c937752a0682b5ffd7cb2291a90b18a738751ea9e36dcfb8327b3673e95f22cac03a6589ed3fe151991fbb33c616d49061382e6dcf6f86f872222c5dec3456250c7c6e92c82c2b34857a76c76d653a9e0d4c136a59b72805ebe692cf02dfa9c011653086e6f63425860b1ef1d48c958682a04e88d098b33d049691e3ccd06c4a96e23f3a84f749a18ccb7ada97c484fab1786038a3343ed76aaa68dd1138bbc92ce36db02063fc47d48ec3989ad049667495c67b39a2fa67605c98b3aaf0cba3b461e77b543228e4e14efb3c83357f631c6c033fa35c6982746d2c123f5bf5aaabff80c9273ee5b835eec3e47bd622b07e5a5275afec1d90b089be85ba649cfcc2c6564a957b3dbdd68314ea59f9154306af62a416953ed1eb7c078c412820a9ac372a861cf7e4c993b041f2bf281359a660e0ee2cf74e2a51ce4643333791edf244ec486751c0eebf7930649d2e894de94bc3b3ed68a8c6d988f73c554d58d979375f7b1e1d261f7aadebac51dd7640dd5aff0439415583e2dbd68dc46d3ed9be831281e4e0ebc666217e30526a2c666aac6c57f06d61cc8a7bbc465d174eac69763a4ab0c49bf450296a095f5cea9c4fc1c64258ff528a07f9c4efc560db9a8240cbe4b50a7035b5d291c312220c4f2a84b0687e50c871e0364068d37462b41478fedbb0d373d3e688824abc4283d9a2838b705090d94e78233642ecc191a5d4dc561ef32ff34bebdcc86839945f8dad02f6e467001b81c54d9ca165c161f9daa68bad1bdfe2f99b603995567903f179397857b2e31bbbdbd7c1db247ddeeb865d43058f94dc4f18a7e18c7bbaa37602cc9cbbd45969a107954365285bd452845e75c936a2687f91fc19a1486df4904f98e042e9edd5589bb120d40b74a7367b42e3ec431a93efa29d0f9da399fd9f11ecf0e2f06bd95ee8927e6b64a99038e3d83f35841ba2e64601432aac98b65cf87ce19301d8ca86dbe3f96ce9081cfb028047ac388c24d99625eb987c5be75e3ad0c99b7d684775cc46b65d937f6da2326abe3460c7f1553c5b10d82d576f142c74b1a10fefaadd7e4e659483770cb0bd0f33acd34dd7aedc3cbcd1133527053a9b5890c0ee9753a783907259043714ee957d4a1690e4fdcfc18a1fd6e5257e65dee62e0a84625767c77379f14c24aef1fa039f95989b50a99fbb3db1472d5c45d8d2f3f2ac258cd9d72d9bf117b6653d59173136121740251c809c5f3d9edb01e7028c5e747453fc98885bca6917a1c8791efd3acdb76909dda4e0fc1fcd4e975b3110e39245e4bee9e142d53586f0e4fe355834b05998d818f71c99eef77984a68c2c9d2ce17c6e3d3e987704722f9458f8ffb128f84533c68f4b495f48fa55018581ed8e0f07b46cb2af05ba34a5e14d52ad7c692fad974a7709c8c0e6d74f9fc1afa2c1937cd1f9a16eef7c03d98a67bf6166aae4fb07e857c4f16d145c7183528cac26d8dfa8a02b8132eecfa94606800d9a31234d263947a395665462989ffdfb9bdf01c433102a5d94389939f664b997027e5848dfea122fbc7425c7317d6a532f6fe61474e0e1a7fe43ec02389cf7c622e5f71069a13f673050a46467333d7e315293dd8ec1bde65ec03679828c951d6b416e10b3352edfd5cd5a91da40d1d1e055899341cbb8c85eda0a53acdb61c0a4c0e15e8c9f755cfc78ac89bd80b90ab29d52612e1b7e20776e407cd7fa6fc2cf05ac727888df86066c95c1c8759ae1ec868193f6549a9bbff196c33d39edc99c807db2a5c3095648035a4592d12f421955c7174015b6dcb358f8c9af8ed446ca44a8d97d14244d06a5d8fc556bfac13a3131bfdf005541cd0e6816dcb92f8a19d0ff6e049439a7dd194d0a7a0fa2fd76e2a7ef94dd96da22020887cc56d45ec38d343e1f44e858b4034dc6aea806c886ad5cd697457f95a7c824e3d765293ea1071ec25030b2f4dc2648279e902db8b5ba399f94f913996b676493f9e57e540e164f639f18e193cb833f9c5768"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:44 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "51bc5f5f8759d6a25739fe9740fd04c9de4fcdbbf0be6b27f4c1ea95bb5fce5882081dd692b2fcb8c5d9b51112249308bdf23255ca90940472d6b0d719e94db884df6cab655534c3e5911cfff93187e2e52afcfdf82252d931bfa7e6954f3e2195299b3e33a9732528e5a0c517d8ffa48b273e59b4dd811b04672b5c9c16f3cfa0d41c3fedbf0aa85fcf4ed10e5f1b8f7a48767feae1a19d62137fc1a8285ba9dc528066cb64c5f833cb76510e5ced93644f3a648c83d39fcf7a76abe342fcf2ae94503808f7ea469c0faf7e188f3ce363392fe8ba158bc3de2b6133fc3ba1c90851e6e2265e270b2479d06f38db4bd6941002169ed6bdbb2ca68de34c4f927c", "0fb3c6bc11a66b381fbc55b87db5525956186e5829d5822a734185c3877e37e7f7a0d0a25c30b8b86239754a2f692c7a4453c4066b75bf7ff0b22bfdc59b46ab0cacaf2f28524a3bf726f020e721184f6e56a17f0e2397a776d86974837fb0377aaf922bd4e96b3254d62b397dc9fca613f3f727f90e05233a5adf04c15172162bb41eca4113ebcb6dbdc9571254fb80343eec54ba342e13f4a0f8737507c1b2cba95cbfe70b14ade10cbdba4ba8c166ad006bc4d7b086401acc63ee19a421f4b3940d5e31fd63554ffdd00dfb59c44d55fb6516d79a991c5cae1a5bc4a803ba6923198e92491a833fa52cf2190db3cefeb57492af4de309e9bfdd14f26c8ad0a533ceea2e8d9784796a6d8df75b77c8980c13899e83d6965da0008044f47d034041dc8e864c8f8d671dfb335086f43acde3af9f527e127664c38958cb1ae86d0b035257372b8366bf7bf46130044dcd55730d8f73cbecad294c8fcb72a48178d7c82c44d747222fe774dd3253d34c6b27391ab92095d400edb4a483bb85e6d238c6efafedd2c316365eede7c2b483c7e1bb49223d17c3c3e4560a81dbf2c0a6e58a73af3a4b512d0c2527da58a004beaaedfc35f0a6b3fa43314bde4f7544ff9a577391edbd514b58f2cb077a40e27ba9911528629829bff265f0a0aed076033a14050e76a7e96a2bbccaa9d60c1e82a44bc4b7f0a6c9dc2c6701d6cf6b8e1a99627b6dc57bc3341845ac717942a6ef5d29066ebaa9044367bb675f3b8bacafd08ff75925ae3354afecdde3e37d2466bd55cca06db2adc28aa2bfc53ca26dd6612b0abac3cb4f81af400f5feddb1dfe0ce2c10e84deb866b30e0e70b0838e5c811b2f1e36df040b697e050d81c4fed89045205619597195706c3864b18aba430cf8dc77ead84e373a63ffd4ede7ff2a25fdcc5b24ac52b4c9625cb3820860907390eb71758753bbead477f2a3f4422ffc870a81d3d1f2c806769aab5908d77e6e3c19d01f5bd808d06e6ac8a84b1b58f3917e6c9ff2e18ca638f68d59ec570d2fc75c573c4e63967dbcbd03f4a950ab422769bf43a4badd0a23303fb197bee92c010aabc30453abe9e9214d7f90d23c1a0527531e4cbbdd017b34c6159b365a836a87376b1dff534038c962b8ffd902aa35a6cff4bfcb8f02c948a18be6388d89d6e35fea8736ed68b795d9d3f0706b8cd5beba07a6d539418d5502cb77acc232dbccef9c1b6232d0209b05cc274b266994a5cea20c7661ac69fe4902ffc73f196dd4a7a2a8e7d9b36ca088eba5c58726bb972ff6fc4eb3fac3bbcaefd5550a2e78540387a713112fbec38cb8d0d6b50380205f3d61357c077aa0e997246c19f729cbe1c9f501da3de3a8ed7ea574ffb889f63a66f35cc6bc75f2264e8e1e541ee2416c3f630918eb931fb941dcb338c979ea996e001148ed883d99f5b5503635b5d7a30b94d2c70332fe88e0b55668d72837fb5276fe96dc34c871c2c3906d938e971410709814cfcd83ae07f816e0eb9993e9cf94ddf2b930d978322e031416b0441d76dd29f64ccc731eaeaa69dcd84d8ed405b4636355698e6444610a0ace07428435cbdbed7feefece44716609ec38498799a15ecaed377fd79079d61bb660eecb7dd561254e8a4de2c726658494e60d415a506b727b7231dc2a587c26b330755afa467efef30a22a9a60cd462ecef87d9e13f0ec71f3d2f730f462c57d1339f563f426d9ffb0d8721ad95fcfd5e187fe43b3b8a714675485a7838e980f89500e012b42a972abb49df0e4db94351ea3d65199117d37a4747a2c2a26d27c8b5eb5f21c1bbfc1c647ae08d37e44dbd4037aa75fe5cd83d9ddd5891b733c4a5f1f956572b7ece0547fd70bcde1c83ff12fb3607f1fc3e4cc65adc9a5e0546a748f0cf37332b5aae7733cd2283d9453b807087c130bb331a7c0c24b66c9495dde3f951d8595f4c4c77b60df5179d250ff55a61d0f1a8dc69b3b4136a7bccea747370b5a598f59e03b79a38d7697b81515d2fe38a486564ef962bd9c9ffb4ee5b7845f8c9913dd329114b04cc9ac409fc71ea7d01d07fbf8b490ced2052cf063eb9de23f44471dfe7bb42fb9a5a6d96ec77024163b5a31a09fa57892175d4166a33c0228d23143ddee6fe33ff3dc00f3c8fc4f6dd6167255ae68638b56458e7bca6eec40d2ca246913dd4ff73985770a8e91429c1573ec376bc4d1105fa50dc778822009f76d899bce68b5bfe06b7ec4e9b2b5f4ab3f23b43f86d4cfeda323a65407e3b991009e8d26c809cb94e97cfbf91e25fd0497b18e2eb10298373ba0ffb12247b1c94f8be661805ecd90cd56cbe14de4bc7d6f03c8114e879d1858531b4a6096bd1690578a9ec62bb0b805bb784075c404a828aaecfdc30cd67db7d9231957aa5c0b33fb13162b5d98333dc8d3ce94d4bac2cf4933cb7769066d7a492113ff62048dcbdfeae8918515f875cbb3f874178c4520e5f176793d375717624f6da427f17c4dbf2a456dd1eb086fa69fc78741a72f89590b00fc3288c7c647440b1eabf3c5b5f5b307c8f2c458ac745d6437fd0041bf3c283c0b1e446a0ef29a3473f546b2ef63ad0fedefba702f7aff4f76d5e3c2ae81f0f04400494e787af824e7c3e14754b1cf78dd87c9ab71e8324a3a697ccb1e38430190f423e26755f84aaf103218b46977d5dcc9e6067c0774f32bc997a796c355c437197a40dd17a5eb86b357646a5f6837f84a557ed098443afdd115ccda7523f04c9fc1a11c6030075d7947375dd392502aa52514120b912a21d3cd67be7592e3e866b4618c8ba70353b25a50b79400af3c56ba804fcb4886ca0c711f1b927b2629d82cd2b72d02faf3ce610b9f11117b1a06a3cf0f2c88125bdccc77c28ca88d02fa71e647556e241703dacb0cbbfa2fc1490c3518660e52b2eec8fbc1beba43c6ab07e159105ffb567731476fadb7ec6bc4c3fb336dca0a589a3090e49ff352787ff717b1861e3b419fa815168c6060d37404255f6c33f46455a9f7b9aa5027dc68ee0f29fdb291268b3c46ff775c2041982da96971d4999d3b25b5f4ebd54ca6fd298b143370071335c105313281ce89f6f9e5cf91f168a18b5e96982e9eef1cb837f8a276fc4c1ea772166b679bfc0a1824ab1e18695e2d5a8deee8ec025362b2dc50b501ccc361e39d0ce3a4d72342b5f781b8487cf4e8102fc9648fb55f26d96f12d35b05b92d77130176a6313141ea90328e3f7d88bf087699b68c0ee487f0845ba82245efccb7e80062e5a2c3eaab3dafaf1b1402f8d1c6aa0440876188c7b6768e3979fdc4b77c94dbbc975bd8ec938dad0d08c402d2cc623d61143119931bdb5d82cb7e224a068e501ed56124637866be415da57cf8cf217e118d6c935c4bda6c937752a0682b5ffd7cb2291a90b18a738751ea9e36dcfb8327b3673e95f22cac03a6589ed3fe151991fbb33c616d49061382e6dcf6f86f872222c5dec3456250c7c6e92c82c2b34857a76c76d653a9e0d4c136a59b72805ebe692cf02dfa9c011653086e6f63425860b1ef1d48c958682a04e88d098b33d049691e3ccd06c4a96e23f3a84f749a18ccb7ada97c484fab1786038a3343ed76aaa68dd1138bbc92ce36db02063fc47d48ec3989ad049667495c67b39a2fa67605c98b3aaf0cba3b461e77b543228e4e14efb3c83357f631c6c033fa35c6982746d2c123f5bf5aaabff80c9273ee5b835eec3e47bd622b07e5a5275afec1d90b089be85ba649cfcc2c6564a957b3dbdd68314ea59f9154306af62a416953ed1eb7c078c412820a9ac372a861cf7e4c993b041f2bf281359a660e0ee2cf74e2a51ce4643333791edf244ec486751c0eebf7930649d2e894de94bc3b3ed68a8c6d988f73c554d58d979375f7b1e1d261f7aadebac51dd7640dd5aff0439415583e2dbd68dc46d3ed9be831281e4e0ebc666217e30526a2c666aac6c57f06d61cc8a7bbc465d174eac69763a4ab0c49bf450296a095f5cea9c4fc1c64258ff528a07f9c4efc560db9a8240cbe4b50a7035b5d291c312220c4f2a84b0687e50c871e0364068d37462b41478fedbb0d373d3e688824abc4283d9a2838b705090d94e78233642ecc191a5d4dc561ef32ff34bebdcc86839945f8dad02f6e467001b81c54d9ca165c161f9daa68bad1bdfe2f99b603995567903f179397857b2e31bbbdbd7c1db247ddeeb865d43058f94dc4f18a7e18c7bbaa37602cc9cbbd45969a107954365285bd452845e75c936a2687f91fc19a1486df4904f98e042e9edd5589bb120d40b74a7367b42e3ec431a93efa29d0f9da399fd9f11ecf0e2f06bd95ee8927e6b64a99038e3d83f35841ba2e64601432aac98b65cf87ce19301d8ca86dbe3f96ce9081cfb028047ac388c24d99625eb987c5be75e3ad0c99b7d684775cc46b65d937f6da2326abe3460c7f1553c5b10d82d576f142c74b1a10fefaadd7e4e659483770cb0bd0f33acd34dd7aedc3cbcd1133527053a9b5890c0ee9753a783907259043714ee957d4a1690e4fdcfc18a1fd6e5257e65dee62e0a84625767c77379f14c24aef1fa039f95989b50a99fbb3db1472d5c45d8d2f3f2ac258cd9d72d9bf117b6653d59173136121740251c809c5f3d9edb01e7028c5e747453fc98885bca6917a1c8791efd3acdb76909dda4e0fc1fcd4e975b3110e39245e4bee9e142d53586f0e4fe355834b05998d818f71c99eef77984a68c2c9d2ce17c6e3d3e987704722f9458f8ffb128f84533c68f4b495f48fa55018581ed8e0f07b46cb2af05ba34a5e14d52ad7c692fad974a7709c8c0e6d74f9fc1afa2c1937cd1f9a16eef7c03d98a67bf6166aae4fb07e857c4f16d145c7183528cac26d8dfa8a02b8132eecfa94606800d9a31234d263947a395665462989ffdfb9bdf01c433102a5d94389939f664b997027e5848dfea122fbc7425c7317d6a532f6fe61474e0e1a7fe43ec02389cf7c622e5f71069a13f673050a46467333d7e315293dd8ec1bde65ec03679828c951d6b416e10b3352edfd5cd5a91da40d1d1e055899341cbb8c85eda0a53acdb61c0a4c0e15e8c9f755cfc78ac89bd80b90ab29d52612e1b7e20776e407cd7fa6fc2cf05ac727888df86066c95c1c8759ae1ec868193f6549a9bbff196c33d39edc99c807db2a5c3095648035a4592d12f421955c7174015b6dcb358f8c9af8ed446ca44a8d97d14244d06a5d8fc556bfac13a3131bfdf005541cd0e6816dcb92f8a19d0ff6e049439a7dd194d0a7a0fa2fd76e2a7ef94dd96da22020887cc56d45ec38d343e1f44e858b4034dc6aea806c886ad5cd697457f95a7c824e3d765293ea1071ec25030b2f4dc2648279e902db8b5ba399f94f913996b676493f9e57e540e164f639f18e193cb833f9c5768"}) 19:47:44 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) [ 392.721980][T15684] binder: 15682:15684 ioctl d000943e 200006c0 returned -22 [ 392.752910][T15684] binder: 15682:15684 unknown command 0 [ 392.765923][T15685] binder: 15683:15685 ioctl d000943e 200006c0 returned -22 [ 392.773483][T15684] binder: 15682:15684 ioctl c0306201 20000200 returned -22 19:47:44 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "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"}) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:45 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 392.983235][T15691] binder: 15689:15691 ioctl d000943e 200006c0 returned -22 [ 393.023825][T15691] binder: 15689:15691 unknown command 0 [ 393.045334][T15691] binder: 15689:15691 ioctl c0306201 20000200 returned -22 19:47:45 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:45 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 19:47:45 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:45 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005a640)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fdc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r3}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}], 0x0, "97c0d0f7406803"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000005a840)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6e, "e14e7bb6e4839f"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005b840)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000005ba40)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fdc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r10}], 0x0, "97c0d0f7406803"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000005bc40)={{0x0, 0x700000000, 0x97bb, 0x8, 0x3, 0x7, 0x7b, 0x2, 0x2e7d, 0x1000, 0x3, 0x101, 0x5, 0x1, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fdc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}], 0x0, "97c0d0f7406803"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fdc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r17}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}], 0x0, "97c0d0f7406803"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f000005bd00)={{0x0, 0x3c, 0x800, 0x1, 0x1, 0xbb00000000000000, 0x8, 0x9, 0x4, 0x6, 0x7, 0x3, 0x5, 0xffa, 0x40}, 0x50, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000004db80)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004fdc0)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {0x0, r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r22}], 0x0, "97c0d0f7406803"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005bdc0)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r1}, {r2, r5}, {}, {r6}, {r7}, {r8, r11}, {r13, r16}, {r17}, {r20}, {0x0, r23}], 0x3f, "9e093c90b9def1"}) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 393.640282][T15701] binder: 15699:15701 unknown command 0 19:47:45 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:45 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 393.682506][T15701] binder: 15699:15701 ioctl c0306201 20000200 returned -22 19:47:45 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:46 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 19:47:46 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000440)=0x3ff) r2 = shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/211, 0xd3}, {&(0x7f0000000100)=""/241, 0xf1}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/188, 0xbc}, {&(0x7f00000002c0)=""/238, 0xee}], 0x5, 0xff, 0x1000) shmctl$SHM_LOCK(r2, 0xb) [ 393.963799][T15714] binder: 15711:15714 unknown command 0 [ 393.985637][T15714] binder: 15711:15714 ioctl c0306201 20000200 returned -22 19:47:46 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:46 executing program 1: shmget$private(0x0, 0x4000, 0x800, &(0x7f00008cc000/0x4000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmat(0x0, &(0x7f00008cb000/0x4000)=nil, 0x6000) r3 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f00008cb000/0x4000)=nil, 0x6000) r4 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000c3b000/0x3000)=nil) r5 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000bcf000/0x2000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000000)=""/248) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r4, 0xc) [ 394.164188][T15723] binder: 15720:15723 unknown command 0 [ 394.175929][T15723] binder: 15720:15723 ioctl c0306201 20000200 returned -22 19:47:47 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:47 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:47 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmget$private(0x0, 0x4000, 0x400, &(0x7f00005a3000/0x4000)=nil) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) r2 = shmget(0x3, 0x4000, 0x54000000, &(0x7f0000c68000/0x4000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) 19:47:47 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:47 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f000000ba00)=0x0) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, 0x0) setuid(r8) getresgid(&(0x7f000000ba40), &(0x7f000000ba80)=0x0, &(0x7f000000bac0)) r10 = getpid() sched_setscheduler(r10, 0x5, &(0x7f0000000380)) r11 = getegid() sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bc40)=[{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000500)="5c96c4e131a1ef882605c427cae7e51d9a5b2d7d011d7c071ba92e0a4fdfdbb62f9b6d71513983be49e78097b4ddd88f2eb9c7fbf2a9f893866e6b785b86157473747869ff1fdd8e739a72cbab902f755061b0a65a7c24494b793d909a1f325d47e2c39135fb3162e7aaf27d212428e84f69447d26b885409cba4e43fcb099cd121d38af0ee076dd44a17278cf9cb4d30403b30b69fec4f486d2783c663e554e5f9afa1976c5e754aec4473c641632", 0xaf}, {&(0x7f00000005c0)="a488", 0x2}, {&(0x7f0000000600)="b9ab6c56278057", 0x7}, {&(0x7f00000006c0)="738bd4516e49953211416ebb777719f71d2dc487f0e6a00b379747416ef447ae2004751d657d03bc487743a82b840b01d1e0da08ab1c9f5da818c7a2546f94025723e96b664bfe796a1bcfb6260903617b9e3dfc390bdbd16cf2ffcd4fa162108bcb", 0x62}, {&(0x7f0000000740)="501e6191ad22518b957ac91467f1ecb654043cec4efb60925a9b937cc08a1f19688de845f551f53e137e510780b31591bbabd0f0b97ba04b00b50362db384032b45bdfcd70807d5bf183e9e1dfe8c4ff893892f9b1dba559e2926878f23c3dfe7bd10be299d275098ca3b6653b2586911a174e1b2d630d6f00de94083e215b41aacedb491565c42531624855b8eec2b4ef146c1780e841bffb7c442c3626b11be50df4e1614cd5452bc8b99f3bda355c466999c5e5ec1f6d561b31de6ce4ebb0a6a14afa83523f73fe936ef9e3e99de1", 0xd0}, {&(0x7f0000000840)="1e276367def8f2891ff04db14a128c785dcad1ea15b41d2fd862b9c395ec78b740bbf9eb4119c1d1d1f381744565a09de7738e074e8cf8ef42a7fe14d46383", 0x3f}, {&(0x7f0000000880)="f249b35c00fe91358024c0a05a01eabfe9e53fd9aefaa854522ab521b5a53aa0a11887ee6f1415e8b154051ae2b09518836286689b1131e0dc56bc3acf040dd8c0605812201f5652302147bed21f129065b87ee9104c3073e5e53691023f765bf5588b7dff172ece3b44641f8eb2c1e7d8f43de4513f45ae999d7f8bf64718daaf84f68278450ce7eeeaf316d6be5e95a20c69", 0x93}, {&(0x7f0000000940)="89aa5dde375c82c843245dfc6f133de6f14e49bbab3a8a0b0b3db589d4405b1ee5e9d6e3b0a52d74c336ea9195c25d2e69135aae84368d9f865b8c799ae571f52ea79bd8b804bdf8ce844a295a8a1790bbadb4280d2a1e8af8ae7770625a11defe967a725be671d8342eb5fcfb953a19f4b7c46492d71fcc84833b1dcebe5ed2de6b3d2c4160fd0319b2613d55d3db061e92bfb975b39a20c10956c8218a50ebb353e4eb60e0eb4ea294e5d204e97827dc36faaca7da9b61b12f294bf6d3dc3487483fe7764bfbbe6d0ef1f813197c8d0cba92fe4dc3794734c851336b09ce0797e1e4cd000f", 0xe6}, {&(0x7f0000000a40)="3c8824f5f2e7b31a7deecb51db6ac4b799580b767a6c5a24f5abee732ba8cf703a3afceefb11c3d8c5e75b5a08676561159a668812c9a32117d5dad6c288a6386f4b2489b2d4635d0645188e7f80778928fa10c2f80ab3e757d50e9d98a2a4206e9d4b7517299e2b5559b7", 0x6b}], 0x9, &(0x7f00000058c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, r1, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x110, 0x40}, {&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="df692099b0fa6e6ac16978dde1a6815eded9d7aafc69a1208f7d10a5c0157c3164780fbbdd398f17e7e5", 0x2a}, {&(0x7f0000001ec0)="bdb0e91adb9d560d9080e12b7a03058ebd9dd82eab612a5dd363e7910bae091555724085d4ce2da4edf5072095cecf7aea916e4d8bec85622e05ddfcd5dedc9161bcadccf988471b7cd66a8972866d6580d659bca4f25b", 0x57}, {&(0x7f0000001f40)="47ea0a6b54a91b44b55f1126e307d2363705798739cd48527e947c2cade1f0d74ace3dde2ffb6f62e02f8857101056a5d2b1be8473", 0x35}, {&(0x7f0000001f80)}], 0x5, &(0x7f0000002080)=[@cred={{0x1c, 0x1, 0x2, {r0, r1}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x10}, {&(0x7f0000002100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004540)=[{&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="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", 0xff}, {&(0x7f0000003280)="110c21bb7aa596b5d50638b98b85a5841a7cdb13fbb7749a81d705232e12138a25a3c46fc4ad55117a6ab5c4259fda4da08283396b53139d8ed82dee634cf7d5cbda00ddd642800fae49245566499ea2ab995c9d4462a0b55252611551c5376e61149cf4088503b0a4ff238d067b96a7c6eaa1a855100195672b1b29b62aef27399792fec5173dadfe01c74b05cb13a9bc9bb691905780e2ceab3a60ac0c803cf0ea23aa361accb3cae65487e50185b2a7c8c12f1b033d03768732865f3e48", 0xbf}, {&(0x7f0000003340)="303f5d51a3e09be18044260d3d7b914e5dad2926c1cb67a26cd32c846c597249ce299ae0da6f3b5e9bdf605449e24e12b45db2e34553ee6ad7355d0d368cfd6a72e09cded98b0921744188781a89154d1395", 0x52}, {&(0x7f00000033c0)="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", 0x1000}, {&(0x7f00000043c0)="e1bb510fb5f32aeb3c5ca8cfdcaa952fb8c62f3a9cfee52270adb6c1202979779466634f1b84b0db6c778c2f2a0f558e53d68fac1a2017e25263c135e1c242ed0f76fd44fea1b256baa10328d9fcf3019369eeabad6806760138f7cccbf84961e06ad26a61d478457639f9e4edcb28fd558ad38ed3ad1f38418da72444688e8dbe4e73e5f87f56f33683bf70f6a0caaa1aeb6f9da7187856ee26019496bc88d2c10d4632f3dbb75a01d6955369591ce8f038ad1480ca35333b1f18ca3a30606c4ea0cc81c57dccf473442e0a742863ceeb34649a88133a5a3a2b4ae1457923c3e5b58c8ec2db5da286178016209bf9f09c84674bd0ff", 0xf6}, {&(0x7f00000044c0)="bc848a4ca513a90f86a72006f794ed789e2a418cb41ed507eeaa936d42ecb1270f0920da5bd25a3673d014f731af472416aca47aa4e53b5fe883ec1e42faab7a2c344850f9474f6e54d530865e9d987764eef4", 0x53}], 0x7, &(0x7f00000045c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x2000c090}, {&(0x7f0000004600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005880)=[{&(0x7f0000004680)="b3866fa3b88e4aef280a7d19d32804ef8f80e24f1a260efa1c43e97afa440e418d307af0b4afecee8585d975081a88d0a208acd505c71bd6dd6c70be77715ce9fab6d42b9a02a0c92329e4b891c3510452817c56a73746ef81c94522b4ec3f37fb42610ec477f9e745ff53ab10a25c2afd82e94caaccd0e2c7a8b3a6f714c05ee0de3828cde9f70a618bb7989b6c4655679720f9373347d3cc9202e3f5271b0285e0be185abcccc3a6773146cbd41517d2a2ac58d2a987d8292911a896a2fd2ed221262769667fa866a2151001ce3fc017ee773e30914ff3291ebe45845e51b90f4a37d80e5b3435a7", 0xe9}, {&(0x7f0000004780)="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", 0x1000}, {&(0x7f0000005780)="00c83b1c65e2ced7a53655298d9034e2fb17b3b7ae286416978d0fe66646c595fa7a89275062a69ae20c57fdef9f6306a6cf8886", 0x34}, {&(0x7f00000057c0)="5c41308f89cbf1c0ed92fc04b6e0ab617a6aa12200a94ace353ddc891802cd71756434ac0a725a4318881f7b2fcc402741a20e709136accff12468a6c13f7946531313e7242db88ad9c3f244eff95312f436127d9c4797ef3b53f707be42970454e83997642eca27e49f2c86f1ff336397aa0379112ec1448cfc7d7efc06af013265b1a8", 0x84}], 0x4, &(0x7f0000007b00)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, r3}}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0xd0, 0x200448d0}, {&(0x7f0000007c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007d80)=[{&(0x7f0000007c80)="1e4ae430e640700c0dea70ad0d23f3f0c7beabed33e37de45cb53999e296919a74be92abd0b091a8ee14043cfa03b9448084d10d434b5f0b1d3898c6f3dc37a5887016e9b23540252f9f003c769ed6c354134091e425a9f0c9017ab9920145f1a04336159f694c7849a849e1863ac1776f20519587f5fe58", 0x78}, {&(0x7f0000007d00)="2ea977770f549f7e1734d8f7ea22db9f0591ac61b19f6a2208ab9aad52f674fb87b6143cbf4c621ade", 0x29}, {&(0x7f0000007d40)="7b3b2ccd1ad2ecb2042338a782", 0xd}], 0x3, &(0x7f000000a100)=[@cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r1}}}], 0x138, 0x4004}, {&(0x7f000000a240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000a340)=[{&(0x7f000000a2c0)="501fb004356625e35f89cde85c41161cc2bf69952762aefde266d0a1d789ae5ac7999d6ec9549f1dad1f60aa76be1e91372b0ee97ae22ca0f6426e7ae64eaf58c68861041f9890b369954007a6a69833354c1133d73005147858dbea69db", 0x5e}], 0x1, &(0x7f000000a380)=[@cred={{0x1c}}], 0x20, 0x24008094}, {&(0x7f000000a3c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000a600)=[{&(0x7f000000a440)="5004e3dab16bbc052fda", 0xa}, {&(0x7f000000a480)="320b241bf57eb2ceeeeb982c34dbaa84dbeb411877f6aa6cd0cc1ff0c484502c6585541d3e4a26c437a16dd2af4b62c96321a36b00831919a36afb0b4801434d51b9e5eb6884df97b0d2b2ea0e8689bf1a1257b91f05236b8c35d0f0b0d1fe1e85", 0x61}, {&(0x7f000000a500)="bb327f922e3f720d7b0eb221fb5c515d8e9b02c8fa9cb096cec2878f1c1bd96b895431efa1fe4773d0c240b58401ee7c6c4eecf9686d48ca5b305a7b9df6007048b2be716ab1ed8f6189feffb64e94c21eecc7790a9ef417f9597542b8477e6a4d7156e17e02430034ec", 0x6a}, {&(0x7f000000a580)="734f2b00d363738eac586a885a5493fa56c6f55eaefcffc4e6f010fcd0d478fe4ded982b9d965c55889e0549a622351f673dd354c4249388e9e54e5811d41cac088755", 0x43}], 0x4, 0x0, 0x0, 0x1}, {&(0x7f000000a640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000b900)=[{&(0x7f000000a6c0)="3b54b860ee8aef9961e53fd45a15f98b34793e245c7c2dd59595d65f8b0fdbbc24f7d73fe53bd33d25ca01b0352c1d21054250bf5308add30f4f65181cef8f13178980f384b97f8d9ac0f4a5cbf41dc84d6079d520097b036625246a8f8928de8fc79367f2f727be720fb8074bce20f5c626624a1628894c0ca6dd6aa9491edc91661c5912b700"/145, 0x91}, {&(0x7f000000a780)="2ce69aed3d976e0a5a991512bd5b6cf3c8af11553dccff3ab28037f8072843f574f75be1ef2222014aab8c1e52bac618909c2900346c", 0x36}, {&(0x7f000000a7c0)="4756a747bff8653065eecaf9ae33c40ff43269acc20e6a753c3fb8e64d45ae480a717f99109481aa6c1d9bbd85f18436c0996a8ec23bd7083d325fcb7c34ba4aa863c997caca6ac339b6957b67da01ef67dbd79ad60b898569eb5e302fad8110b046019364bbeaef0c8529e263003152f0f4b8fb22626769b6868b206e3699fbedbd8f1f289d97939f917ea244ac5161b0442b2527513ce523be08ed9889c8d17993788b04864b686972bb486e144613a72a17c5a911ccf99977215e26da15cc49cdd74bf97afddea5fcf00e3a8897c4e5af88522a678545de08954a8ef5fca55c610faf72c03ab6503e2d70173788acbe6fd8f74e18663ec1ade0e3de9f8f5037a5f48c9a852248eb17c73134dc8d4661b8c058344f59ee2e65a5198d7051b0d66d3d07a1da08c4ea7ef8ff65b7921f9febef82dc10c86df33f600e0cb1f25899342817e72dc4315dd02cb59271926847a728af88dbc73b98b1b4e369ff059e85c4306038dc542fa89f0bc66d0201453543cfea78b313fbc32831316ab8815a01788c8f9b76ef32f19408d05bc9fc95457ef8e4d8888c228338f364e11807675b3b1be309592b715f61e3656ac65e5d6650f2039adf43706040b1a08442526bdeb7b44df8371dcea9cfa43f7f2b1c668b9cd6851e09c963f6c1ec7f21511218b8696807dfc42879eaaafdb312dc56767a7d6b8ab3d8e65f20dfc8564ea6ff1b13b16700b6c1281f450d7c00d9a4c5f29a4dcd7ed8a72b00b39560e50ec642aa9f746f1a626a7b3f891ca23d8798cbeac5e92f677495a3b7d53fbcc4febc44125698f294195891c0c8d52f83310efc9de4b787e3ddffbe605a980598fa2515d9bfefeee7a7ed0b2c2a62ab63162d0ef9d1ef71f36ea351916f6085580b1b4b0bb7b5dddf7ff95e7f195fe6b723efee41f46b074fcb727f2d64506085041614a4f80f16c3af434bc5d819b45a3ee2086f4232d5f2ee93df945dbd921212ebd60fa467e457bf85ce4ff68a2314a0b694435f96b2d7b05fa1d35435ef127518270a231bbcff23b59d68f57564302c73b3c25de38f90581caa4b37f397963cdaadcf09f3086f11ff414fd1db28366b95baa6462a77111283bac297676ba2dbee700fc07298c7f8d686d0fda3a39b6da68b285927c69a81e7b059481f663132843e274cd498a128af4bf3f602b0d3fb876803822f9041ad8096526da8b80d23c05e3342d94422680048aa7822c93a74886b76918047223600dc3a92cf7c39d467dde5670ff612cd77673c0f675fea0f9e3bebf7a637b9f0476751bf7a6ef269154788751d83ef7c8fa3dcfd9005f2f6977f5b4c20bf9e9e767ee3778dfc1d5a44818e3373920ece43c287346884001514310c5374525d0bd280927828bb8dcc211095bbec254d4d9f9193675d054bdb72ae6d881c009487afd820a1e8d9454933da0efd79c798ea848d09ad1b58015c9b381320fbf7a24f546fa190837bad78bd00985efb776f492f5164913ba6ebcef755fcac96f7b7d0c1397d92e923c4ed7fbe4391c22fa55fa9609b0346d2790e89fbb9a4b75f4b7a0f0f6bd3be58ff7afba37cb4ea2f4602d69fdc5fe9a992b2e9b2f98010571dc99400fc3fd907d800b7320beb019ba98db2406557350c04d19f52a3cf97776ba7712e3c7bcc2c5ea754b19184e93b511281083027effe9f0065b22c40fc0160ef3beffe74032900170b713e4a3b08668caaa3a84622f0124a693e527da46701b21fd431e8b9c0901c6020e8c13053d15769529af15ee0df7dbb620501c33bf1c0cccdf5e3c7e20a61ef16a67c9fdfafd7d375b0395642182852a21d41d36bb52cc919eac73f2d6bec33abdd7b0453b6271da4662bb3971b630d00602e10d327ceea03a599814d1b03f502781868951a6d6d2a2ef2f61a4f38a0421c27205287c209f5988e9adc0f53bb5904acac26704abc5ee046fcf5c39434a1e9a62bfb42cabd983643cb8c848123f8726b19d850f34f64fda0e274757e8cdf8c33b19c1c903e0b8984be663f8910c69e7767389f1bf364253f2c9f28e5105833c1142be8d1a9d475d9dffd215f5f99f505841e696038e567213e3d9d89838203bf925e3e6768e43677c25cc57a284fa66174b73578195be49948a3d02e574b178ff8ea4319bebb12145f5149f4c444d82284b2b88064a8ca86e9bad9a1e04b63c73c3d7d2555b7ec3e35739d5ca9e0d691d3e23af9ee514d534b3f427f1e40fe51cd625e89a8b01d8ee741643d73a2bc4c545e20c7607d6b029fcc298db2638b9518fd1dc9458dcc16cb3c648212af4095eeb93c0c4f13a2b3e69c39ab8ccf79ffa34f75c5ba5def64c2a96d8195cdffe51e9b44721b212972eab65a7cd620a50963d1a8122cccf7e6c3a661f53dcf714e6257fbc6f1d90fcf573774c884c96b55d7b3b3af2a5f38e3972b1a23888c0d1ef15b2dbe7186345f8372af0b125919065da1e8fe6134244028163d55bc8f6e045a3cebf0a8ce3c6b84c72e64cccb1e3dd9df5fa6a756d7b0c5a64a25dfe8cf01ca49fdc521eee20112ff51aea7f084d524e5a1f370631dcdafead2e5121f969ecfa2ca28c9fefd0f2f48be069bfc5d7bf8d59459cd20390613db5ca3a006012ea59eb9c7db43a27c6ec7be20a079a47f88461fed94566133e4a92d19a458e02a74c7d4f03ef6c62259e464b62530f01301a4e505253adae2e152896d56694a7e535a7793692089a2fbde0c7b81f5fc10b8456a2f75c0bbaac006ba507f4f380d9f7d3e153d5bbfed0112de023759f792a1ea1a05bc8a67aaac678a30218876187c48fe6f0e0ba534d85bc04fc57232391a3325ea56a7c9ffeb08f3d30485c433deae9438635ed406b59e95ca3448c220a177cd29fc3153fad2c4503e2b6a43867678fa520acc950450ed8c5b7d13a9e42cb21ba79996c8c2fe345fb1479df508f48e46dad9d8845b0a4d74556815de29fc0e0a320dff75c06cf4c2e755415ed1322d4eaeb5b2b981aae40ab3efb796fa19e8b77783ed5701cdb8bb8264789c293241c683965fdc4bedbe4b0e6407201c68f2ed2aa72b34fc96f7410e96fcc1c4f63b9dd457728d262223d2a7ad54bb18e0b1e3204487af71e3601b801d3e41516ed90dcaade1c35a77e9936cb40ae4500abc4684a309728b296595f1b177efe54cddf669185f3d4e46e61217ff9b881967f20db8cdfd6f68dd46dc551cc45851d45ea5400c801ab3b54685c9f3a98f270487c0c1055a4598ad1793d299a69724789c3ebf030c00aa31478dd40796c01b39292825b142b02d306a1015e78a319b405a718c2dcef64b34ae3f710a61a453a9dd8ca70efd19ad7148a230e5d61a3965e8ffb201496bfa889a588eb3737e37b192d3f5048d637e28f509e99cbeb9604416aed96665ee6a011f676373e84ec00ed43537e6b32d8c36bfa35e2efaa6f0bf321ab729a53b634455fddc0af477b9998a956bf49079a1027ec772aeaf8360b69979be63e6031e38a280bbf9c2beca978ec6a1200e14a804a40238c594345817dfad857a6a2ccc6f8e1cbb21a18bf08a32e31ba4f2411fa0cf5468804a1adb74df8576d9579f6b46eac15e4a19d510963e8e1b01c72bdab9709704182bb62fa5439cfe1cc44746aa8c19ca2c9138380e92a1fa496ab6ac11bc78af5d7daf3c633899363057778888f0bad5871ac34bce6545c834f6cde253278143f7cf9583013e15ef05e304ce4b0613d779a7f6bbb03312fce354443dbed8d884f9f6faf5b0ace4dec29a91b46cb45087fd45a3e5125fbd48702e27ed9f60d0ae0069f0434e54ae0e106b0e38d9aa150b730c23a2ffc96528b69f66a757063c521d69c6aae7e7384a1ead1224850c31b62a44a99c496e11fcacbbe8d0d6f425e43496ebf00b5e115d01fd5a02664fb36740e5b09c4b050a55b1ae66c2c3b09db3b7e365812b27063a8e31196443727701bd3c62fa8c57ffc9fd89c883cb616adf9c8c6a44e9a4083bfcc422a2c34ddc4c0efc7cc1ececc740078f5071ac407ecb421b76841505fbb95987b8fc9324d4774ae597162e70f16633a0c054cf6446d69ae06b98aa74a651484eaa8329d8f075ed86f79a0ac2ff1b494a7bb2e6ded9ac7e10cc6e58eff21508e4ff76854bade01bb911331ed8d1962173c7c21e7cc937122fe1e34084ecea16667a5c9bded1db10a5bc9a20dafbbd0c291880807cdbfae18e46898bff7c66712199ee41b095efc69ca0773cbbdd3dd8812c3a198ff6cd75e3a4edb2f74778619a26e9f03d5798cd8256f9c54095f8112e8a90c209ade162e7d670cf66bc33fbec11ab17c08da8a72f9cff0bc093fbcb07d21be30ae525b1419c1994061663b001a801254b1c64a15a5602d2b0462949116d2647c686a1e0435594a0997141aa345bbf00c9fba06ccd0b00b6f9209fac9ba659cce78c54c264c10cf5b4e7cbbdd20b063e91c290ef70f002d6388fa818742864f3c0dc09a0a3b69cdda7c01ce09191263fffa9053eb649db00fae93c7fbf911033fdfa0a5ecaf6756cb80e02ee98fb4fb3d9525152d57aaf49854c20e1e348cd831d22c9aaa628bed836c901a010f86386935454a2d84af6bd9dfb60bab55f58c61a358ee6c09150232199a0d7693598ee6a17f31318c8b74d703fb8a68988c549c1ec5802bec5a54e734fa5631f66633bd71421ee8689d539348e73d2619469b15413aa116dd984e6440bb1a9dd2c582714c00f695adde588a602c21e98d27ff54a3050fa8c4b6160e40e4727a413d376fb2dc78791e0a199aaef23f010f61f709e7db283d24e3728bd34afd1c500e9cc43e94a91255f4e64f57ee5548656d668a9705f1d5ab4daa6df738c6d3a17ecb2cf0ceb061c64a288a5e7c8ab30033e66bdcaeb20b43b5fe0fcb443c338bb2434077545f0f6e124e55d1e41a2aeedcbb4f9afed31bd6d2523f0d6946e8c6771a674920f50a1403380d852134b1cc3de426040d2656e47a3e5afb20444b92ce4a473fb5048f8f4b028f5b7ba139e2c5415b8a22922f4fc093b395a561e20e623a41b9cfdfdbf59e68049305bcf7ca0e7e016d2f6b0340f15d4b69a00956c4fd6194744da47b1e5153fc481e332d51745e71ee235f20e4890ddd01e645d4481c2bd4de3fdd3518610a2f6dc1f75b135d5dd24dc8fae5d01af0756ddea1002bb0edffd4624e120d15af7bcb8ffb7a3e0e3f3b1689a8b2d3ef4547b582ee6fd887c21840d12b9735c878bec09bd9dda615fb23971ed2e5cb0053bfae791fc07f00408625d37b82cb5f158019c61df6a92880bc15c37aab102d6d9cc28dc14adb52c5c768a9f5d22bf445eb398ee0997f15a32827d33b3063d1edb40f432a4dd4302deeb657e89ae49479dcfeb32c3d6ca5fe29f7e591b3e6d616836f7a6530feedf2d670af4ff9da4468e87593c3a67ee6a40c6e447a3267d311c4a4ad16cc7e0267b356b74cefa2bccb2d01655b5f4c416f04ed52a9bd9020937d865584d686e06b0ff11f64ebbc595001d88c5eee60aca84a9a5e6bc98f6d483f19c403edc1570adf245cb1538323be395c9b04ba46b6d63f3a85792bba4b89e026d61dce3fb08f8b4c1d2f56912c79a563e76c7b87c7ec751d5089f04d5bc6b99333062b0aed75ae000f87f0efd4aaf2b1dd7a2f32660a28514e1090763deae8cb06e26df535eccf40ced5d0aff67cc58b17d636a831dd5cdd5a7fa11fc6623d23f06292083a32a3f6d835018a8c5c3c2089f63a81caabfa9d78633c40d29445213af6b7ffaff6657e46e50fc6352be87789a5541daa2d8dd543bb26cc2", 0x1000}, {&(0x7f000000b7c0)="1cc8c8a1d994ded3d634e8e359fe096f5d96ed2fa62287bc07d0e3159e117c65d45b0fe2d9688aeb9f1d2290892afeef9378f779bc83be522834eb4ac401cf5b73a7e5d409aee520a7a3a5157f761eb44d6bbddec3f6867fe8f6ff254d07f17e955e1c9b", 0x64}, {&(0x7f000000b840)="a7cef00978d0e37d1fe6a036f429e326dae9b3e13df9f097b9bb9cbb487b39ccab4fa859251478b348b8a9e197868bfb3770ae5681bd04a08d152dd95e02065ee8aaf601db615b9a678b671107c24710358f971a9cfe53e22487987aebe7a5a2e3df8f1b569887522c8fdce08a8036dc9c2d9ce0001de4bfaa5405a653ac240c1de18fb3e9b6652ae1b3f219fd0706c1c28f8f1f52d33c1fe7638c470a6d3719637cb15e71b1217ccf53255fb9fb0b175c06893a", 0xb4}], 0x5, &(0x7f000000bb00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r2, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r2, r11}}}], 0x128, 0x40000}], 0x8, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2d8, 0x41, 0x28, 0x70bd29, 0x25dfdbfe, {0x1}, [@nested={0xc, 0x54, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @fd}]}, @nested={0x2b5, 0x4f, 0x0, 0x1, [@generic="407b5d406e88e0865a9f6c2028934a14a49482b475268bdeff6ec35fc7895b2178cc18b28115", @generic="968641856d2ac4023329fbeb9efe1b72f0cc4f3914c30799cf6beca95133461dceb7b1df090445e656e82567f95dd9c449afecc942f27bad527702087626584e23ddec54283f788d54e50369b7ab7f3d7d1ce2d3cb25b96a26ec607c9f946a50b88a5c556a755c5be1663d06d72ece263d472b9c9744053ec99bca3d5c6a146dd763f6c25aa3f20fd095fed25edc2fceb50dbc289c8fdbc2f9322e92897898", @generic="6dac2ef1c679969232e1f494bcd70290afcd2d0c73a34ba3ffee55", @generic="8c68dc940b3aac919cce427c1e08d59f70868e127a8899d738379581f743ecc1d1518c99fc2432c98d072f1206e92737be69802889f7c0d7c34bca46de83310cdc09e8531eedd7823aa170d78bf1959f6429c1033b6d50d7ac09e6c242ec88bef30dfaf61ef3a83d292d1768bca0045ae44a3db4348129705a063a36f4f5aec5d358433cc84e600bd8200392d3abb1b1dea418e64fb72629b5baaaee4cbbf8318f9f274bc3e428c4795d3b62dfec2436cd6d7e1d1e6cd742666fd8ff21b8237260ae9bd60b96d92a852cb9c751dd1b8af2b8ce7077e237492b95c216079c08813d568c", @typed={0x8, 0x42, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x37, 0x0, 0x0, @uid=r2}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="eb38efa31f0ed4729f6f56cd5733a99e54d4c99b17088824bd7ddb146583238d6b1f07c9f2365bd041b4140d08baeb083fc4f472469115d26c816ee5fcf00321265e9b251a469ecbd117ce4d1a825c1ccffbd3ceb2e0be9034660bda852a0ed1ab94266a8c1d307744fc7d285e9f4c0202c4f0fe46d76f6bace487a76a9a5b8f05655f540f0daf57e0a2d4303ad2ecc671c9784201326e4929148765a6e65da830675c12e692e9ca74a21b19cfb985b5bc03c3d493d4ab68711d037c5b794371b11f07781a0869eb4846ed3aa584b97df2f16fd79ccf"]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x1}, 0x24000004) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:47 executing program 1: ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)=0x6) shmctl$SHM_UNLOCK(0x0, 0xc) [ 395.487599][T15739] binder: 15736:15739 unknown command 0 [ 395.500710][T15739] binder: 15736:15739 ioctl c0306201 20000200 returned -22 19:47:47 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 395.690784][T15751] binder: 15750:15751 unknown command 0 [ 395.706517][T15751] binder: 15750:15751 ioctl c0306201 20000200 returned -22 19:47:47 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:47 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:48 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 395.925606][T15759] binder: 15758:15759 unknown command 0 [ 395.946623][T15759] binder: 15758:15759 ioctl c0306201 20000200 returned -22 19:47:48 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:48 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:48 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:48 executing program 1: shmget(0x1, 0xa000, 0x10, &(0x7f0000d23000/0xa000)=nil) shmget$private(0x0, 0x4000, 0x2, &(0x7f00009bb000/0x4000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmctl$IPC_RMID(r1, 0x0) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_LOCK(r1, 0xb) r2 = shmget$private(0x0, 0xc00000, 0x10, &(0x7f0000400000/0xc00000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r2, 0x0) 19:47:48 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:48 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) signalfd4(r1, &(0x7f0000000400)={[0x7fffffff]}, 0x8, 0xc0800) 19:47:48 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 396.538001][T15774] binder: 15768:15774 unknown command 0 [ 396.576490][T15774] binder: 15768:15774 ioctl c0306201 20000200 returned -22 19:47:48 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{}, 0x4, 0x0, 0x3}) 19:47:48 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 396.611452][T15780] binder: 15778:15780 unknown command 0 [ 396.643806][T15780] binder: 15778:15780 ioctl c0306201 20000200 returned -22 19:47:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:48 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 396.694583][T15780] binder: 15778:15780 unknown command 0 [ 396.718350][T15780] binder: 15778:15780 ioctl c0306201 20000200 returned -22 19:47:48 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 396.844202][T15792] binder: 15790:15792 unknown command 0 [ 396.859262][T15792] binder: 15790:15792 ioctl c0306201 20000200 returned -22 19:47:49 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:49 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) shmget(0x3, 0x1000, 0x1, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) shmget$private(0x0, 0x3000, 0x78001a01, &(0x7f0000ffd000/0x3000)=nil) 19:47:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:49 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) socket(0x9, 0x1, 0x6) [ 397.266137][T15807] binder: 15800:15807 unknown command 0 [ 397.293878][T15807] binder: 15800:15807 ioctl c0306201 20000200 returned -22 19:47:49 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:49 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:49 executing program 1: ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000000)={0x0, 0x58, 0x7, 0x1}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000400)={0x1, 0x3ff, @start={r0, 0x0, "dd3aff98ed8351205bac3fff66cdc8b91f874f866fe740dd53208b3ba76c406f65a75c08349b15dee36a7c540025d5fa859151a21cf2aa329ff816d65e44ceb9cbd4072789bbd93be407d5c17a857571874a238db9ed74e50370ddac4cca16a94b9e63bb56abfbb078574096a48e0c4422908e396484ef355be441094f93a764dbbc1c9827c87125e9999521769105ff1bf4c547035153e5a64398a6a236b75abad02db0fd4db11b0f785f19f57cc02f996d51011260c0b67dd5d250bfde490cc595281530ad148752f4ae878dcd94480bf4963686f59c5e89edbf6caae27518acff7f618cc31da6fadcf5d565f404e881caaad9436529ec5bdb86c9b5c6d6baba103d96cd6f618093ad6c23ce3f98337170be2d75b29dfb2e4894940ecb52963f022c2574cb3c41f6ef94b72f181f5649678f45663a573975100faea191d6b2ea26d53c033146709a4cd23eabcfec8838b644b636da66b8c70b24ecbb4cdf2f409d651b0fa9f9cf3cf13519c0816b73aec47f36914db305b44b72c456b14397e38ce3292dbebc1ea5634bef0ecdb16a60ae33f7c255e2fd8bce1a64f913729c08d66f4617e07334a85b220dfabccf51dcde2c3192be79ddca3bbd97e7cfca1088898154a8c767b9ef22deb0e0d95fc297b83a2d8d5a4082f610ccea230abae01a8bfb21e5108fbbdc5c97f0d2d5034eefa2be3b9e6d2b5b8dcb67d4e15f33a983b53598eb5fc17608fa30c129cb7f5e83758fd2a960083a4a0e4fdbfa60bca2423cb0ae684326a8284c788fa1cb07a284a18369d8df1eba98178ac24c492e8e69bfb7377271da4f72fa59260f89aca658bd11795dc62a544ac0d61d75ec25c9c2384f313988fac164070a8bba8306feb69023d5034f874cefc72ddd8501f0d11a0bccb3d1a72c967031a073ea2bacc929352e001bd8f15c17bc39aa34dd867d3e68d5bcb39c90c704619095ea6f84fae72b6329338cc677a586086ed711661aef3f9a83dc8d6ff1350ad16126f413eda116c2e5d997fdc39d302b2d43883d3b7eb45161f6fe7f291b8c32437c2909d5d5dfd3fe7339f636fe750339268a30bd1f1d52bb8850893ad3ece55d51a28fcd16d5b648f8ac163e4bda4aef9f72d745f4ab8ac080bee85a2ff995dda98fa9c896d87237a405a1b095e8b9227116e3b4a20303102cf68519978eedf0b75131af591399fa9c9b5e352bf9c40fece54466b69653dfe9bf47be01b6e4a55c0d1f97398166c5e4d7842809f89b19570d1a4501e3b598a13f917d3c837e5cf5a5583a39a95033ee29e1a1a780df4104c0de96f0ff71323261488ba9e9fbe5792065bf34831e0c96195458d2294d4be2c99ec5974c4773d32d5b0269da9fc9f0428414de6f752cd09093243ca8cf28136a8cf7798540f0a496b6a326e8203afaf5f29ee9b2ab14b7d9fc0af836f12c56efc611ab", "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"}, [0x5, 0x3, 0x5, 0x800, 0x9, 0x800, 0xbf, 0xfff, 0xfffffffffffffffa, 0x2, 0x0, 0x1, 0x8, 0x5, 0x40, 0x400, 0x2c5, 0xfffffffffffffffe, 0xffffffff, 0x100000000, 0x7, 0x7, 0x5d, 0x2, 0x7fffffff0000000, 0x1, 0x0, 0x1, 0xc2d, 0x2, 0x0, 0x6, 0x8, 0x8, 0x3f, 0x8, 0x8, 0x0, 0x1000, 0x2, 0xfff, 0xfffffffffffffff9, 0x6, 0x7ff, 0x4, 0x200, 0x1, 0x8000, 0x81, 0xffffffff, 0xca, 0x1, 0x8, 0x2, 0x1, 0x100000000, 0x9, 0x1, 0x80, 0x1000, 0x88, 0x1, 0x8000, 0x5]}) shmctl$SHM_UNLOCK(0x0, 0xc) 19:47:49 executing program 2: connect$can_bcm(0xffffffffffffffff, &(0x7f0000000300), 0x10) preadv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000240)=""/46, 0x2e}, {&(0x7f0000000040)=""/82, 0x52}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f00000001c0)=""/91, 0x5b}, {&(0x7f0000000340)=""/22, 0x16}], 0x6, 0x4, 0x0) 19:47:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:49 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 397.524483][T15820] binder: 15813:15820 unknown command 0 [ 397.539749][T15820] binder: 15813:15820 ioctl c0306201 20000200 returned -22 19:47:49 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000700)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="a0", 0x1}], 0x1}], 0x1, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={r5, 0x9, 0x10, 0x10000, 0xfff}, &(0x7f0000000040)=0x18) r6 = shmget(0x1, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) shmat(r6, &(0x7f0000ffb000/0x3000)=nil, 0xb9dde409aedd6366) shmctl$SHM_UNLOCK(r6, 0xc) [ 397.704579][T15828] binder: 15826:15828 unknown command 0 [ 397.732223][T15828] binder: 15826:15828 ioctl c0306201 20000200 returned -22 [ 397.755827][T15830] binder: 15827:15830 unknown command 0 [ 397.779297][T15830] binder: 15827:15830 ioctl c0306201 20000200 returned -22 19:47:49 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:49 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:49 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc1}) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) 19:47:49 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000002c0), 0x6, 0x81) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000040)=""/40, 0x28}) shmctl$SHM_UNLOCK(0x0, 0xc) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x100000001, 0x10000000ff, 0x5, 0x20, 0x1, 0x7, 0x3ff}, &(0x7f0000000180)={0x1f, 0x7, 0x743b, 0x800, 0x65e3, 0x6, 0x402, 0x2}, &(0x7f00000001c0)={0x1, 0x2, 0x5, 0x401, 0x1000000006, 0x7ff7fe, 0x6, 0x4}, &(0x7f0000000200)={0x77359400}, &(0x7f0000000280)={&(0x7f0000000240)={[0x9]}, 0x8}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000300)=0xfffffffe) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x2, 0x3, 0xfffffff9}, {{r1, r2/1000+60000}, 0x0, 0x7ff, 0x1}], 0x30) 19:47:50 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0x1000) 19:47:50 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:50 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:50 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:50 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x14, r4, 0x303}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x880) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:47:50 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) [ 398.517282][T15857] binder: 15854:15857 unknown command 0 [ 398.525735][T15858] binder: 15850:15858 unknown command 0 [ 398.540687][T15857] binder: 15854:15857 ioctl c0306201 20000200 returned -22 [ 398.552972][T15858] binder: 15850:15858 ioctl c0306201 20000200 returned -22 19:47:50 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:50 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:50 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:47:50 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 398.750816][T15871] binder: 15868:15871 unknown command 0 [ 398.784780][T15871] binder: 15868:15871 ioctl c0306201 20000200 returned -22 19:47:50 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:50 executing program 2: ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0xb0000) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:51 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 398.980537][T15879] binder: 15876:15879 unknown command 0 [ 398.994476][T15879] binder: 15876:15879 ioctl c0306201 20000200 returned -22 19:47:51 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r0, 0x7453f000) 19:47:51 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:51 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 399.242462][T15889] binder: 15886:15889 unknown command 0 [ 399.261725][T15889] binder: 15886:15889 ioctl c0306201 20000200 returned -22 19:47:51 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:51 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:51 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r1, &(0x7f0000aa6000/0x2000)=nil, 0x0) shmat(r1, &(0x7f0000af6000/0x1000)=nil, 0x1000) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r2, &(0x7f0000a6a000/0x1000)=nil, 0xd000) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/74) 19:47:51 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:51 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:51 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) 19:47:51 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 399.623410][T15901] binder: 15896:15901 unknown command 0 [ 399.650054][T15901] binder: 15896:15901 ioctl c0306201 20000200 returned -22 19:47:51 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x70, 0x8, 0x3f, 0x0, 0x0, 0x1, 0x4900, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp, 0x800, 0x4, 0xe6, 0x5, 0x6, 0x6, 0x3, 0x0, 0xab, 0x0, 0x5}, 0xffffffffffffffff, 0x9, r0, 0x0) shmget(0x2, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0xb5f62f3caa03e326, 0x80, 0x2, 0x7f, 0x8, 0x3f, 0x0, 0x7, 0x8803d, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4040, 0x8, 0x1000, 0x9, 0x401, 0x20, 0x1, 0x0, 0xd871aea, 0x0, 0x8}, r2, 0xc, r1, 0x2) 19:47:51 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:51 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 399.902502][T15915] binder: 15913:15915 unknown command 0 [ 399.925346][T15915] binder: 15913:15915 ioctl c0306201 20000200 returned -22 19:47:52 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80480, 0x0) dup(r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:52 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 400.127753][T15924] binder: 15921:15924 unknown command 0 [ 400.153466][T15924] binder: 15921:15924 ioctl c0306201 20000200 returned -22 19:47:52 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:52 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:52 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 19:47:52 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x80000, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r7, r6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:47:52 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r4 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000a1b000/0x1000)=nil) shmget(0x2, 0x1000, 0x54000000, &(0x7f00005a6000/0x1000)=nil) shmat(r4, &(0x7f0000b15000/0x3000)=nil, 0x4000) shmat(r3, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r3, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) [ 400.922792][T15938] binder: 15936:15938 unknown command 0 [ 400.922818][T15937] binder: 15933:15937 unknown command 0 [ 400.938026][T15939] binder: 15934:15939 unknown command 0 [ 400.946272][T15937] binder: 15933:15937 ioctl c0306201 20000200 returned -22 [ 400.951420][T15938] binder: 15936:15938 ioctl c0306201 20000200 returned -22 [ 400.957694][T15939] binder: 15934:15939 ioctl c0306201 20000200 returned -22 19:47:53 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) [ 400.982580][T15943] binder: 15933:15943 unknown command 0 [ 400.994605][T15943] binder: 15933:15943 ioctl c0306201 20000200 returned -22 19:47:53 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 401.026086][T15943] binder: 15933:15943 unknown command 0 [ 401.040970][T15943] binder: 15933:15943 ioctl c0306201 20000200 returned -22 [ 401.074849][T15943] binder: 15933:15943 unknown command 0 [ 401.091660][T15943] binder: 15933:15943 ioctl c0306201 20000200 returned -22 19:47:53 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 401.146214][T15950] binder: 15948:15950 unknown command 0 [ 401.161069][T15950] binder: 15948:15950 ioctl c0306201 20000200 returned -22 19:47:53 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:53 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 19:47:53 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:53 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) [ 401.378481][T15956] binder: 15954:15956 unknown command 0 [ 401.400646][T15956] binder: 15954:15956 ioctl c0306201 20000200 returned -22 19:47:53 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:53 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) 19:47:53 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 19:47:53 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:53 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x40, 0x0, 0x5, 0x0, 0x64, 0x8006, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000000), 0x289e7beb3fe9ab72}, 0x40401, 0x81, 0x2, 0x3, 0x0, 0x401, 0x3, 0x0, 0x8, 0x0, 0x9}, 0xffffffffffffffff, 0x9, r0, 0x2) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:53 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 401.689112][T15973] binder: 15966:15973 unknown command 0 [ 401.720642][T15973] binder: 15966:15973 ioctl c0306201 20000200 returned -22 19:47:53 executing program 1: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="4775749543f2fcb769f7f646596da444593bf4cafb2de992352557a3bd80679a167430ac3a6e86adf7fe79a5b91a5f3f850bd3d40436d555e612757af7e3147a0b46d49089e8b2a4a27c42ba836a20ca1a1e820bfc55ac13cb0e832ffa2a66c5603b567b3f", 0x65}], 0x2, &(0x7f0000001140)=[{0x48, 0x118, 0x3, "5a3d14ac0c67374daa2e9a05eb11c28e382b5a72f9f8a658d2924736da6a57a4e6b350478486bb28360fbc0d2984d427bb81b1eb3b"}], 0x48}, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r0}, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000001200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 19:47:53 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 401.866948][T15980] binder: 15978:15980 unknown command 0 [ 401.884257][T15980] binder: 15978:15980 ioctl c0306201 20000200 returned -22 19:47:54 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) 19:47:54 executing program 4: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r1, &(0x7f0000ffa000/0x3000)=nil, 0x0) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x3000) [ 401.975179][T15985] binder: 15983:15985 unknown command 0 [ 401.999022][T15985] binder: 15983:15985 ioctl c0306201 20000200 returned -22 19:47:54 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 402.258772][T15994] binder: 15993:15994 unknown command 0 [ 402.272965][T15994] binder: 15993:15994 ioctl c0306201 20000200 returned -22 19:47:54 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:47:54 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:54 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) 19:47:54 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0x4000, 0x78000142, &(0x7f0000ffb000/0x4000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/233) shmctl$IPC_RMID(r0, 0x0) 19:47:54 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:54 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, r6, r7, 0x1ff}) [ 402.525650][T16003] binder: 15999:16003 unknown command 0 [ 402.549226][T16003] binder: 15999:16003 ioctl c0306201 20000200 returned -22 19:47:54 executing program 1: close(0xffffffffffffffff) shmctl$SHM_UNLOCK(0x0, 0xc) 19:47:54 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) 19:47:54 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:54 executing program 1: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101400, 0x181) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000040)={{r2}, {@val, @max}}) shmctl$SHM_UNLOCK(0x0, 0xc) [ 402.755122][T16017] binder: 16014:16017 unknown command 0 [ 402.776172][T16017] binder: 16014:16017 ioctl c0306201 20000200 returned -22 19:47:54 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) 19:47:54 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 402.927857][T16020] binder: 16019:16020 unknown command 0 [ 402.955753][T16020] binder: 16019:16020 ioctl c0306201 20000200 returned -22 [ 402.969904][T16024] binder: 16021:16024 unknown command 0 [ 402.982365][T16024] binder: 16021:16024 ioctl c0306201 20000200 returned -22 [ 402.993358][T16020] binder: 16019:16020 unknown command 0 [ 403.026407][T16020] binder: 16019:16020 ioctl c0306201 20000200 returned -22 19:47:55 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x19403, 0x0) 19:47:55 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:47:55 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:55 executing program 1: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000), 0x2) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) 19:47:55 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x0, 0x122, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x40028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff7ffffb}, 0x0, 0x6, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:55 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:55 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 19:47:55 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) [ 403.403332][T16036] binder: 16031:16036 unknown command 0 [ 403.434983][T16036] binder: 16031:16036 ioctl c0306201 20000200 returned -22 19:47:55 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x125400, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:55 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:55 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1f, 0x670280) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000040)=0x84) [ 403.743365][T16058] binder: 16056:16058 unknown command 0 [ 403.767143][T16058] binder: 16056:16058 ioctl c0306201 20000200 returned -22 19:47:56 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x19403, 0x0) 19:47:56 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) 19:47:56 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x3, 0x202c2) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0x8004510b, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000000c0)={0x5d9d, 0x0, &(0x7f0000000080)=[r1, r4, r5]}, 0x3) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:56 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f0000000380)) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:56 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 19:47:56 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:56 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 404.403078][T16071] binder: 16066:16071 unknown command 0 [ 404.439981][T16071] binder: 16066:16071 ioctl c0306201 20000200 returned -22 19:47:56 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 404.468030][T16078] binder: 16066:16078 ioctl 8004510b 20000180 returned -22 19:47:56 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) [ 404.571564][T16071] binder: 16066:16071 unknown command 0 [ 404.578536][T16078] binder: 16066:16078 ioctl 8004510b 20000180 returned -22 [ 404.592146][T16071] binder: 16066:16071 ioctl c0306201 20000200 returned -22 19:47:56 executing program 2: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) syncfs(r0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:47:56 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:56 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:57 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x19403, 0x0) 19:47:57 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:47:57 executing program 1: gettid() r0 = shmget$private(0x0, 0xc00000, 0x400, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(0xffffffffffffffff, &(0x7f0000e29000/0x3000)=nil, 0x2000) mmap$dsp(&(0x7f000083c000/0x4000)=nil, 0x4000, 0x8, 0x100010, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(r0, 0xc) 19:47:57 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:57 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:57 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0xe0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7, 0x100000001}, 0x44c80, 0x7, 0x80000000, 0x4, 0x1, 0x4, 0x8, 0x0, 0x462, 0x0, 0x8}) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:47:57 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget(0x2, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) r1 = shmget(0x1, 0xc000, 0x0, &(0x7f0000ff4000/0xc000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmctl$SHM_LOCK(r0, 0xb) [ 405.394092][T16114] binder: 16110:16114 unknown command 0 [ 405.418285][T16114] binder: 16110:16114 ioctl c0306201 20000200 returned -22 19:47:57 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 405.445845][T16114] binder: 16110:16114 ioctl 4008240b 20000100 returned -22 19:47:57 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:57 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) [ 405.503902][T16114] binder: 16110:16114 unknown command 0 [ 405.530271][T16122] binder: 16110:16122 ioctl 4008240b 20000100 returned -22 [ 405.559973][T16114] binder: 16110:16114 ioctl c0306201 20000200 returned -22 19:47:57 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) prlimit64(0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="734dfc633bb5b0ac033604ce96a9646d182e3fabae8b89944246a404b147ceb196"], 0x11) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x281, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) shmctl$IPC_RMID(r1, 0x0) r4 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='/dev/vcsa\x00') shmat(r4, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r4, 0x0) 19:47:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000019040)=""/4096) shmctl$SHM_UNLOCK(0x0, 0xc) r3 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r3, &(0x7f000024d000/0x1000)=nil, 0x4000) shmat(r3, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmget(0x3, 0x800000, 0x2, &(0x7f00000c7000/0x800000)=nil) r4 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r4, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_INFO(r4, 0x3, &(0x7f0000000040)=""/102400) shmat(0x0, &(0x7f000073b000/0x1000)=nil, 0x1000) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) [ 405.966368][T16141] binder: 16140:16141 unknown command 0 [ 405.972852][T16141] binder: 16140:16141 ioctl c0306201 20000200 returned -22 [ 405.985211][T16141] binder: 16140:16141 ioctl 4b4a 20019040 returned -22 [ 406.002353][T16142] binder: 16140:16142 unknown command 0 [ 406.008535][T16142] binder: 16140:16142 ioctl c0306201 20000200 returned -22 [ 406.018948][T16141] binder: 16140:16141 ioctl 4b4a 20019040 returned -22 19:47:58 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x19403, 0x0) 19:47:58 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:47:58 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:47:58 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x43aa, &(0x7f0000000040)={0x0, 0x9493, 0x8, 0x0, 0x278}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x1, 0x101, 0x8}) 19:47:58 executing program 1: shmget$private(0x0, 0x13000, 0x200, &(0x7f0000fed000/0x13000)=nil) r0 = shmget(0x0, 0x1000, 0x2, &(0x7f0000ff1000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r1, 0xc) shmat(r1, &(0x7f0000f52000/0x1000)=nil, 0x0) 19:47:58 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:47:58 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 19:47:58 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:47:58 executing program 2: shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 406.927181][T16166] binder: 16162:16166 ioctl c0306201 0 returned -14 19:47:59 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:47:59 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6208, 0x0, 0x80000, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x6, 0xdb, 0x2, 0xf5, 0x0, 0x3ff, 0x2008, 0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x1d}, 0x10004, 0x7fffffff, 0x7, 0x5, 0x6, 0x7f, 0x19f, 0x0, 0x80, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x2, 0x1b, 0x40, 0x0, 0x1000, 0x40000, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xb1, 0x1}, 0x18600, 0x56, 0x7, 0x0, 0x1, 0x800, 0x1, 0x0, 0x5, 0x0, 0x4000000000000000}, 0x0, 0xc, r0, 0x3) r1 = shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0x0) shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000080)) 19:47:59 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:47:59 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x19403, 0x0) 19:47:59 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f850c40200000000000c163f1830000"], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x8, 0x2, 0x80, 0x0, 0x20, 0x7000, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x8000, 0x9, 0x3f, 0xc, 0x0, 0x6, 0x8001, 0x0, 0x2, 0x0, 0x9}, r0, 0xffffffffffffffff, r3, 0x9) 19:47:59 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 19:47:59 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:47:59 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r0, 0xc) [ 407.440808][T16184] binder: 16181:16184 ioctl c0306201 0 returned -14 19:47:59 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:47:59 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 19:47:59 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) 19:47:59 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 407.721458][T16194] binder: 16193:16194 ioctl c0306201 0 returned -14 [ 407.926655][T16183] binder: 16179:16183 unknown command 0 [ 407.932363][T16183] binder: 16179:16183 ioctl c0306201 20000200 returned -22 [ 407.963862][T16183] binder: 16179:16183 unknown command 1074562319 [ 407.970960][T16183] binder: 16179:16183 ioctl c0306201 200001c0 returned -22 [ 408.016510][T16183] binder: 16179:16183 unknown command 0 [ 408.022132][T16183] binder: 16179:16183 ioctl c0306201 20000200 returned -22 [ 408.035227][T16183] binder: 16179:16183 unknown command 1074562319 [ 408.042260][T16183] binder: 16179:16183 ioctl c0306201 200001c0 returned -22 19:48:00 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) dup2(r1, r0) 19:48:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x138, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x138}, 0x1, 0x0, 0x0, 0x1}, 0x80040) shmctl$SHM_UNLOCK(0x0, 0xc) 19:48:00 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:48:00 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x19403, 0x0) 19:48:00 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:00 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) 19:48:00 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:48:00 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) dup2(r1, r0) [ 408.245829][T16207] binder: 16203:16207 unknown command 0 [ 408.277336][T16207] binder: 16203:16207 ioctl c0306201 20000200 returned -22 [ 408.332726][T16209] binder: 16203:16209 unknown command 0 [ 408.353123][T16209] binder: 16203:16209 ioctl c0306201 20000200 returned -22 [ 408.384257][T16215] binder: 16211:16215 unknown command 0 19:48:00 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 408.426944][T16215] binder: 16211:16215 ioctl c0306201 20000200 returned -22 [ 408.464006][T16221] binder: 16211:16221 unknown command 0 19:48:00 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 408.481492][T16221] binder: 16211:16221 ioctl c0306201 20000200 returned -22 19:48:00 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x0, 0x0, 0x1a, 0x0, 0x8, 0xe023, 0x7, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x10b05, 0x2, 0x0, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0xad, 0x0, 0x5cc}, 0xffffffffffffffff, 0x0, r3, 0x8) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xff, 0xc7, 0x50, 0x1f, 0x0, 0x4, 0x2, 0xc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc617, 0x2, @perf_bp={&(0x7f0000000000), 0xb}, 0x41422, 0x2, 0x2, 0x2, 0xf, 0x2, 0x193, 0x0, 0x9, 0x0, 0x5}, 0xffffffffffffffff, 0x8, r0, 0x1) 19:48:00 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) 19:48:00 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:00 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) r1 = shmget(0x1, 0x4000, 0x54000000, &(0x7f0000890000/0x4000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x3000)=nil, 0x7000) r2 = shmget(0x1, 0x2000, 0x400, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r2, 0x0) 19:48:00 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 408.798817][T16233] binder: 16229:16233 unknown command 0 [ 408.820746][T16233] binder: 16229:16233 ioctl c0306201 20000200 returned -22 [ 409.118824][T16233] binder: 16229:16233 unknown command 0 [ 409.127035][T16233] binder: 16229:16233 ioctl c0306201 20000200 returned -22 19:48:01 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) 19:48:01 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:01 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x2000) r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f00007e6000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) 19:48:01 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) 19:48:01 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) dup2(r1, r0) 19:48:01 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:01 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:01 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) 19:48:01 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0xe0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7, 0x100000001}, 0x44c80, 0x7, 0x80000000, 0x4, 0x1, 0x4, 0x8, 0x0, 0x462, 0x0, 0x8}) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:01 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:01 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@tipc, 0x80, &(0x7f0000000440)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/123, 0x7b}, {&(0x7f0000000140)=""/247, 0xf7}, {&(0x7f0000000240)=""/246, 0xf6}, {&(0x7f0000000340)=""/245, 0xf5}], 0x5}, 0x2) 19:48:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000100)={r4}) r5 = pidfd_open(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000000)={r4, 0x0, r5, 0x6, 0x80000}) shmctl$SHM_UNLOCK(0x0, 0xc) [ 409.918646][T16271] binder: 16268:16271 unknown command 0 [ 409.937151][T16271] binder: 16268:16271 ioctl c0306201 20000200 returned -22 [ 409.973398][T16271] binder: 16268:16271 ioctl 4008240b 20000100 returned -22 [ 410.032425][T16277] binder: 16275:16277 unknown command 0 [ 410.059949][T16277] binder: 16275:16277 ioctl c0306201 20000200 returned -22 19:48:02 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x29, 0x7, 0x3, 0x3, 0x0, 0x400, 0xc413, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x9, 0x3f, 0x1, 0x1, 0x0, 0x6, 0x0, 0x2, 0x0, 0x7fff000}, r0, 0x10, r3, 0xa) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:02 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:02 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) 19:48:02 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0xe0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7, 0x100000001}, 0x44c80, 0x7, 0x80000000, 0x4, 0x1, 0x4, 0x8, 0x0, 0x462, 0x0, 0x8}) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 410.219086][T16279] binder: 16275:16279 ioctl 40182103 20000000 returned -22 [ 410.270645][T16284] binder: 16282:16284 unknown command 0 [ 410.276735][T16284] binder: 16282:16284 ioctl c0306201 20000200 returned -22 [ 410.297307][T16284] binder: 16282:16284 ioctl 4008240b 20000100 returned -22 19:48:02 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) dup2(0xffffffffffffffff, r0) 19:48:02 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:02 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0xe0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7, 0x100000001}, 0x44c80, 0x7, 0x80000000, 0x4, 0x1, 0x4, 0x8, 0x0, 0x462, 0x0, 0x8}) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 410.404939][T16285] binder: 16280:16285 unknown command 0 [ 410.410918][T16285] binder: 16280:16285 ioctl c0306201 20000200 returned -22 [ 410.435727][T16285] binder: 16280:16285 unknown command 0 [ 410.442947][T16285] binder: 16280:16285 ioctl c0306201 20000200 returned -22 19:48:02 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 410.560569][T16296] binder: 16292:16296 unknown command 0 [ 410.567973][T16296] binder: 16292:16296 ioctl c0306201 20000200 returned -22 [ 410.591351][T16296] binder: 16292:16296 ioctl 4008240b 20000100 returned -22 19:48:02 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0xe0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7, 0x100000001}, 0x44c80, 0x7, 0x80000000, 0x4, 0x1, 0x4, 0x8, 0x0, 0x462, 0x0, 0x8}) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:02 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:02 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 410.788582][T16304] binder: 16301:16304 unknown command 0 [ 410.810782][T16304] binder: 16301:16304 ioctl c0306201 20000200 returned -22 [ 410.837733][ T37] audit: type=1326 audit(1620416882.897:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7fc00000 [ 410.863740][T16305] binder: 16301:16305 ioctl 4008240b 20000100 returned -22 19:48:03 executing program 1: r0 = shmget(0x3, 0x2000, 0x100, &(0x7f0000ffe000/0x2000)=nil) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x101000, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0xfc3c0000) shmctl$SHM_UNLOCK(r0, 0xc) [ 410.918358][ T37] audit: type=1326 audit(1620416882.897:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x4665f9 code=0x7fc00000 [ 411.019592][ T37] audit: type=1326 audit(1620416882.897:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7fc00000 [ 411.087466][ T37] audit: type=1326 audit(1620416882.897:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7fc00000 19:48:03 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0xb5273000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x57eb) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:03 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:03 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0xe0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7, 0x100000001}, 0x44c80, 0x7, 0x80000000, 0x4, 0x1, 0x4, 0x8, 0x0, 0x462, 0x0, 0x8}) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:03 executing program 1: shmctl$SHM_UNLOCK(0x0, 0xc) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x0) [ 411.148427][ T37] audit: type=1326 audit(1620416882.897:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7fc00000 19:48:03 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) read(r0, &(0x7f0000000000)=""/140, 0x8c) shmctl$SHM_UNLOCK(0x0, 0xc) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3800006, 0x30, r0, 0xeafc7000) r1 = shmget(0x0, 0x3000, 0x2, &(0x7f0000ffa000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f00000000c0)=""/4096) 19:48:03 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) dup2(0xffffffffffffffff, r0) 19:48:03 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x0, 0x0) [ 411.252780][ T37] audit: type=1326 audit(1620416882.897:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7fc00000 [ 411.307182][T16322] binder: 16319:16322 unknown command 0 [ 411.342276][T16322] binder: 16319:16322 ioctl c0306201 20000200 returned -22 19:48:03 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:03 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) [ 411.371837][T16327] binder: 16319:16327 ioctl 4008240b 20000100 returned -22 [ 411.380614][ T37] audit: type=1326 audit(1620416882.897:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7fc00000 19:48:03 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0xe0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7, 0x100000001}, 0x44c80, 0x7, 0x80000000, 0x4, 0x1, 0x4, 0x8, 0x0, 0x462, 0x0, 0x8}) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 411.498357][ T37] audit: type=1326 audit(1620416882.897:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7fc00000 19:48:03 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0x82) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 411.588597][T16340] binder: 16338:16340 unknown command 0 [ 411.614710][T16340] binder: 16338:16340 ioctl c0306201 20000200 returned -22 [ 411.616961][ T37] audit: type=1326 audit(1620416882.897:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7fc00000 [ 411.671155][T16340] binder: 16338:16340 ioctl 4008240b 20000100 returned -22 19:48:03 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) 19:48:03 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:03 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x2, 0x80, 0xe0, 0x7, 0x9, 0x5, 0x0, 0x3, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_config_ext={0x7, 0x100000001}, 0x44c80, 0x7, 0x80000000, 0x4, 0x1, 0x4, 0x8, 0x0, 0x462, 0x0, 0x8}) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 411.765545][ T37] audit: type=1326 audit(1620416882.897:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16275 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x4665f9 code=0x7fc00000 19:48:04 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 411.973376][T16350] binder: 16348:16350 unknown command 0 [ 411.993760][T16350] binder: 16348:16350 ioctl c0306201 20000200 returned -22 19:48:04 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x9, 0x7, 0x0, 0xc0, 0x0, 0xeda, 0x16400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x1000, 0x400, 0x7, 0x5, 0xc1, 0xfff, 0x20, 0x0, 0xcea, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, r3, 0xa) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) r4 = shmget(0x2, 0x4000, 0x2, &(0x7f00005cf000/0x4000)=nil) shmat(r4, &(0x7f0000453000/0x3000)=nil, 0x1000) shmctl$IPC_RMID(r0, 0x0) [ 412.025216][T16350] binder: 16348:16350 ioctl 4008240b 20000100 returned -22 19:48:04 executing program 1: sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_DEBUG={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000804) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/netfilter\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "2b1d0121bba6b3b619ddd2557724e601dde551a1b3"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) [ 412.170901][T16359] binder: 16356:16359 unknown command 0 [ 412.184912][T16359] binder: 16356:16359 ioctl c0306201 20000200 returned -22 [ 412.265023][T16359] binder: 16356:16359 unknown command 0 [ 412.273835][T16359] binder: 16356:16359 ioctl c0306201 20000200 returned -22 [ 412.283176][T16357] binder: 16356:16357 unknown command 8 [ 412.290296][T16357] binder: 16356:16357 ioctl c0306201 200001c0 returned -22 19:48:04 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) dup2(0xffffffffffffffff, r0) 19:48:04 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:04 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, 0x0) syz_open_procfs(r2, &(0x7f0000000180)='net/ptype\x00') dup2(r1, r0) 19:48:04 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:04 executing program 2: perf_event_open(&(0x7f0000000640)={0xf414cb57460d2d07, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0x10, &(0x7f0000ffd000/0x1000)=nil) 19:48:04 executing program 1: shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 19:48:04 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, r6, r7, 0x1ff}) [ 412.529132][T16374] binder: 16369:16374 unknown command 0 19:48:04 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x80000, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r7, r6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:04 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 412.571112][T16374] binder: 16369:16374 ioctl c0306201 20000200 returned -22 19:48:04 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x2, 0x6, 0x20, 0xb8, 0x0, 0xffffffffffffff3b, 0x180, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x28, 0x226e, 0x6, 0x1, 0x0, 0x3, 0x5, 0x0, 0x2, 0x0, 0x5}, r1, 0x8, r0, 0x0) r2 = shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r2, 0x0) shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x1000) r3 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r3, 0xc) 19:48:04 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:04 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) [ 412.781082][T16390] binder: 16385:16390 unknown command 0 [ 412.805109][T16390] binder: 16385:16390 ioctl c0306201 20000200 returned -22 [ 412.838956][T16390] binder: 16385:16390 unknown command 0 [ 412.844570][T16390] binder: 16385:16390 ioctl c0306201 20000200 returned -22 [ 412.863419][T16392] binder: 16391:16392 unknown command 0 [ 412.884204][T16392] binder: 16391:16392 ioctl c0306201 20000200 returned -22 19:48:05 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) dup2(r0, 0xffffffffffffffff) 19:48:05 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x80000, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r7, r6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:05 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './file0', [{0x20, '%'}, {}, {0x20, '$$@{'}], 0xa, "abd34bcf9fdb032eb7e1dce68ec343214c2b8120931e8310b070ba350b8ed94093c7eeed560627780954c8d562ba64f6c6e2c0f441e69cac369d4d2c67eea771f14afd562b88512f9aefea81ae74f6c14838d823cfffccc440845655b277083852b28f08336df97d2e4a309ec0cea90fd391475dc8caf7a9f7b853bb9b8894"}, 0x92) 19:48:05 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:05 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, r6, r7, 0x1ff}) 19:48:05 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x3, 0x1000, 0x201, &(0x7f0000ffd000/0x1000)=nil) 19:48:05 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r0, 0x0, 0x0) [ 413.310332][T16404] binder: 16399:16404 unknown command 0 [ 413.325953][T16405] binder: 16398:16405 unknown command 0 [ 413.339048][T16404] binder: 16399:16404 ioctl c0306201 20000200 returned -22 [ 413.350483][T16405] binder: 16398:16405 ioctl c0306201 20000200 returned -22 19:48:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x7, 0x2, 0x1f}, @ptr={0x70742a85, 0x1, &(0x7f00000006c0)=""/4096, 0x1000, 0x2, 0x11}}, &(0x7f0000000600)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x2}, @release={0x40046306, 0x3}], 0xea, 0x0, &(0x7f0000000240)="df7757735c828f9c9f089743039021dc23ba33ee946ad4bb5d556f261f64a72b8e35719261c8c5163aa4ca9c7b4683e59a839523377097754f7f640c516c733c125b340c8d22bd1d89bd331a89b2298468e0cf568822b3c7bd6aac93978793407abfc0d4cb667af76a7c47bbb5f43c4488c95b1bab6ec78bf07781a1498610f9a8a48416e88185520500500c834be95ff594efdcdf8b0cd73511b3f4780ee72f6ba3336fb08448cd9186f5365ea1c02a5c9cf6abe28d36c8795f0127e44662d116b1e1a18a91d64b30601efc51be49552e7c4b7627b047862174f7ca2a1f0c1113d2bbd4c65dac3072cd"}) fadvise64(r1, 0x1, 0x4, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x3f7, 0x102, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000040}, 0x20000040) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) preadv(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/62, 0x3e}], 0x1, 0x80000001, 0x6) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:05 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 413.428789][T16405] binder: 16398:16405 unknown command 0 [ 413.434396][T16405] binder: 16398:16405 ioctl c0306201 20000200 returned -22 19:48:05 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x80000, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r7, r6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:05 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) [ 413.570450][T16417] binder: 16415:16417 unknown command 0 [ 413.593856][T16418] binder: 16416:16418 unknown command 0 [ 413.597138][T16417] binder: 16415:16417 ioctl c0306201 20000200 returned -22 [ 413.609299][T16418] binder: 16416:16418 ioctl c0306201 20000200 returned -22 [ 413.649085][T16422] binder: 16419:16422 unknown command 0 [ 413.655053][T16422] binder: 16419:16422 ioctl c0306201 20000200 returned -22 [ 413.681548][T16417] binder: 16415:16417 unknown command 0 [ 413.695277][T16417] binder: 16415:16417 ioctl c0306201 20000200 returned -22 [ 413.709220][T16422] binder: 16419:16422 unknown command 0 [ 413.724317][T16422] binder: 16419:16422 ioctl c0306201 20000200 returned -22 [ 413.738629][T16420] binder: 16415:16420 unknown command 0 19:48:05 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) [ 413.757273][T16420] binder: 16415:16420 ioctl c0306201 20000200 returned -22 [ 413.842579][T16417] binder: 16415:16417 unknown command 0 [ 413.854334][T16420] binder: 16415:16420 unknown command 0 [ 413.866597][T16417] binder: 16415:16417 ioctl c0306201 20000200 returned -22 [ 413.870010][T16420] binder: 16415:16420 ioctl c0306201 20000200 returned -22 19:48:06 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) dup2(r0, 0xffffffffffffffff) 19:48:06 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:06 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x80000, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:06 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) [ 414.109175][T16436] binder: 16433:16436 unknown command 0 19:48:06 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, r6, r7, 0x1ff}) 19:48:06 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7f, 0x2, 0x7f, 0x1a, 0x0, 0x5, 0x70022, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0x3, 0x800}, 0x10, 0xe6, 0x66, 0x0, 0x9, 0x54a, 0x2, 0x0, 0x6, 0x0, 0x20}, 0x0, 0x3, r0, 0x9) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x12c, 0x0, &(0x7f0000000b00)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x3, 0x3}, @flat, @ptr={0x70742a85, 0x1, &(0x7f0000000780)=""/255, 0xff, 0x0, 0x16}}, &(0x7f0000000880)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000980)={@flat=@weak_binder={0x77622a85, 0x2f2577842c6ec557, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000008c0)=""/148, 0x94, 0x1, 0x28}, @fda={0x66646185, 0x0, 0x0, 0x28}}, &(0x7f0000000a00)={0x0, 0x18, 0x40}}, 0x1000}, @decrefs={0x40046307, 0x2}, @enter_looper, @exit_looper, @enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000a40)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x0, 0x8}, @flat=@weak_handle={0x77682a85, 0x1000}}, &(0x7f0000000ac0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000c80)={0x3, 0x80, 0x3f, 0x0, 0x1f, 0x0, 0x0, 0x400, 0xa3003, 0x10, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000c40), 0x3}, 0x8c0, 0x5, 0x7, 0xe, 0x7f, 0x2, 0x2bec, 0x0, 0x5, 0x0, 0x9}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x2) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x6, 0xa5, 0x2, 0xa9, 0x0, 0x5, 0x82001, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x5}, 0x25ce, 0xfff, 0x100, 0x1, 0x0, 0x26, 0x3ff, 0x0, 0x3, 0x0, 0x100000001}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x70, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/151, 0x97, 0x0, 0x35}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/83, 0x53, 0x1, 0x1b}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x1000}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, 0x1}, @exit_looper, @enter_looper], 0x97, 0x0, &(0x7f00000006c0)="80f13e548288e55c069793462a1e23d0fab1cb2c6dc79524f3a697a2c7852b14fc078dab6585e60e9ec200cf119e0a0623cc7cdad7d3b8521c31fd58039750b1c0d601cacf4d00450beeb95caf14ad10e1a0ecfa1cf3551a5f204329375428647e3394df74cd5e0fdad371265c69a366ced977bf1d90f1a257a572e6b14b4f80333d84d1337480a097cabd67ff02731f02d0acf0150624"}) r7 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r8 = dup2(r7, r6) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="8c6300000f630c400000000000000000"], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000100)=0xb365) sendto$inet6(r5, &(0x7f00000000c0)="dbd3658e97cdddd71cccc19c9fba3ba6c3710e1fd34c52653358d15f56d5357a2c6bf027", 0x24, 0x42000, 0x0, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x13, r1, 0x5) 19:48:06 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:06 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 414.150629][T16436] binder: 16433:16436 ioctl c0306201 20000200 returned -22 [ 414.184947][T16436] binder: 16433:16436 unknown command 0 [ 414.206909][T16436] binder: 16433:16436 ioctl c0306201 20000200 returned -22 19:48:06 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:06 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:06 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 414.317062][T16446] binder: 16440:16446 unknown command 0 [ 414.329779][T16446] binder: 16440:16446 ioctl c0306201 20000200 returned -22 [ 414.370260][T16446] binder: 16440:16446 ioctl 4008240b 20000240 returned -22 [ 414.393043][T16446] binder: 16440:16446 unknown command 0 [ 414.399823][T16446] binder: 16440:16446 ioctl c0306201 20000200 returned -22 [ 414.411741][T16446] binder: 16440:16446 unknown command 25484 [ 414.427091][T16446] binder: 16440:16446 ioctl c0306201 200001c0 returned -22 [ 414.449317][T16451] binder: 16449:16451 unknown command 0 [ 414.458199][T16446] binder: 16440:16446 ioctl 40082404 20000100 returned -22 [ 414.483289][T16451] binder: 16449:16451 ioctl c0306201 20000200 returned -22 [ 414.514548][T16448] binder: 16440:16448 ioctl 4008240b 20000240 returned -22 19:48:06 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 414.538488][T16457] binder: 16440:16457 unknown command 0 [ 414.541042][T16458] binder: 16440:16458 unknown command 25484 [ 414.556927][T16459] binder: 16440:16459 ioctl 40082404 20000100 returned -22 [ 414.565673][T16457] binder: 16440:16457 ioctl c0306201 20000200 returned -22 [ 414.575621][T16458] binder: 16440:16458 ioctl c0306201 200001c0 returned -22 19:48:06 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, 0x0) dup2(r0, 0xffffffffffffffff) 19:48:06 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:06 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:06 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58a12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) [ 414.868380][T16470] binder: 16466:16470 unknown command 0 [ 414.880979][T16470] binder: 16466:16470 ioctl c0306201 20000200 returned -22 19:48:07 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, r6, r7, 0x1ff}) 19:48:07 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:07 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:07 executing program 2: setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000000)={0x9, {{0xa, 0x4e22, 0x7, @empty, 0x4}}, {{0xa, 0x4e22, 0x101, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1e}}}, 0x108) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:07 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:07 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:07 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f00008cb000/0x4000)=nil, 0x6000) [ 415.181204][T16481] binder: 16477:16481 unknown command 0 [ 415.216639][T16481] binder: 16477:16481 ioctl c0306201 20000200 returned -22 19:48:07 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 415.227935][T16485] binder: 16478:16485 unknown command 0 [ 415.246699][T16485] binder: 16478:16485 ioctl c0306201 20000200 returned -22 19:48:07 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:07 executing program 2: r0 = socket(0x2, 0x80805, 0x0) r1 = accept4$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, &(0x7f0000000240)=0x10, 0x80000) sendmmsg$inet_sctp(r1, &(0x7f0000000700)=[{&(0x7f00000001c0)=@in={0x2, 0x4e23, @dev}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000002c0)="a0b982d496fb5da952dd195ea229e54972167bece79ed686196de26c90d715c2dd1fea8e7707073008f34a714be22ae41fe2f3798765d308f9675a2349e8b3b1dfffface1879c0a160f1718a5cd8828e1fbc3d664a9a6bf70ad7bc546a15", 0x5e}], 0x1}], 0x1, 0x4000800) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYBLOB="5a000000ecc7d38957548a532c2adbd59e20ff848108ee45ecd849e1590ed07f3c6fb3c40fa072b26fe92d933a3ce130d4ec6e75393bb509c3591a6e8eb66ea681ad210b0abd8519ffd3d198df029ebae02dbb0bbce5245c974a66bc2006dffa665e00"/111], &(0x7f0000000080)=0x63) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r4 = socket$pptp(0x18, 0x1, 0x2) fallocate(r4, 0x10, 0x4, 0x80000000) 19:48:07 executing program 3: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:07 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f00008cb000/0x4000)=nil, 0x6000) [ 415.536853][T16501] binder: 16495:16501 unknown command 0 [ 415.550488][T16501] binder: 16495:16501 ioctl c0306201 20000200 returned -22 [ 415.600677][T16505] binder: 16499:16505 unknown command 0 [ 415.613366][T16505] binder: 16499:16505 ioctl c0306201 20000200 returned -22 19:48:08 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, r6, 0x0, 0x1ff}) 19:48:08 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:08 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:08 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) r6 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:08 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0xff, 0x1, 0x1, 0x0, 0x1, 0x8010, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc12, 0x1, @perf_config_ext={0x5b7, 0x61fa}, 0x1, 0x3ff, 0x1, 0x6, 0x3, 0xfda, 0x8001, 0x0, 0x8, 0x0, 0xcc}, 0x0, 0x5, r3, 0x9) 19:48:08 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 415.999293][T16515] binder: 16513:16515 unknown command 0 [ 415.999293][T16516] binder: 16511:16516 unknown command 0 [ 415.999321][T16515] binder: 16513:16515 ioctl c0306201 20000200 returned -22 [ 416.030357][T16518] binder: 16512:16518 unknown command 0 19:48:08 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) [ 416.045467][T16516] binder: 16511:16516 ioctl c0306201 20000200 returned -22 19:48:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 416.073508][T16518] binder: 16512:16518 ioctl c0306201 20000200 returned -22 [ 416.111561][T16525] binder: 16511:16525 unknown command 0 19:48:08 executing program 3: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000006c0)={0x0, 0x0, "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", "0fb3c6bc11a66b381fbc55b87db5525956186e5829d5822a734185c3877e37e7f7a0d0a25c30b8b86239754a2f692c7a4453c4066b75bf7ff0b22bfdc59b46ab0cacaf2f28524a3bf726f020e721184f6e56a17f0e2397a776d86974837fb0377aaf922bd4e96b3254d62b397dc9fca613f3f727f90e05233a5adf04c15172162bb41eca4113ebcb6dbdc9571254fb80343eec54ba342e13f4a0f8737507c1b2cba95cbfe70b14ade10cbdba4ba8c166ad006bc4d7b086401acc63ee19a421f4b3940d5e31fd63554ffdd00dfb59c44d55fb6516d79a991c5cae1a5bc4a803ba6923198e92491a833fa52cf2190db3cefeb57492af4de309e9bfdd14f26c8ad0a533ceea2e8d9784796a6d8df75b77c8980c13899e83d6965da0008044f47d034041dc8e864c8f8d671dfb335086f43acde3af9f527e127664c38958cb1ae86d0b035257372b8366bf7bf46130044dcd55730d8f73cbecad294c8fcb72a48178d7c82c44d747222fe774dd3253d34c6b27391ab92095d400edb4a483bb85e6d238c6efafedd2c316365eede7c2b483c7e1bb49223d17c3c3e4560a81dbf2c0a6e58a73af3a4b512d0c2527da58a004beaaedfc35f0a6b3fa43314bde4f7544ff9a577391edbd514b58f2cb077a40e27ba9911528629829bff265f0a0aed076033a14050e76a7e96a2bbccaa9d60c1e82a44bc4b7f0a6c9dc2c6701d6cf6b8e1a99627b6dc57bc3341845ac717942a6ef5d29066ebaa9044367bb675f3b8bacafd08ff75925ae3354afecdde3e37d2466bd55cca06db2adc28aa2bfc53ca26dd6612b0abac3cb4f81af400f5feddb1dfe0ce2c10e84deb866b30e0e70b0838e5c811b2f1e36df040b697e050d81c4fed89045205619597195706c3864b18aba430cf8dc77ead84e373a63ffd4ede7ff2a25fdcc5b24ac52b4c9625cb3820860907390eb71758753bbead477f2a3f4422ffc870a81d3d1f2c806769aab5908d77e6e3c19d01f5bd808d06e6ac8a84b1b58f3917e6c9ff2e18ca638f68d59ec570d2fc75c573c4e63967dbcbd03f4a950ab422769bf43a4badd0a23303fb197bee92c010aabc30453abe9e9214d7f90d23c1a0527531e4cbbdd017b34c6159b365a836a87376b1dff534038c962b8ffd902aa35a6cff4bfcb8f02c948a18be6388d89d6e35fea8736ed68b795d9d3f0706b8cd5beba07a6d539418d5502cb77acc232dbccef9c1b6232d0209b05cc274b266994a5cea20c7661ac69fe4902ffc73f196dd4a7a2a8e7d9b36ca088eba5c58726bb972ff6fc4eb3fac3bbcaefd5550a2e78540387a713112fbec38cb8d0d6b50380205f3d61357c077aa0e997246c19f729cbe1c9f501da3de3a8ed7ea574ffb889f63a66f35cc6bc75f2264e8e1e541ee2416c3f630918eb931fb941dcb338c979ea996e001148ed883d99f5b5503635b5d7a30b94d2c70332fe88e0b55668d72837fb5276fe96dc34c871c2c3906d938e971410709814cfcd83ae07f816e0eb9993e9cf94ddf2b930d978322e031416b0441d76dd29f64ccc731eaeaa69dcd84d8ed405b4636355698e6444610a0ace07428435cbdbed7feefece44716609ec38498799a15ecaed377fd79079d61bb660eecb7dd561254e8a4de2c726658494e60d415a506b727b7231dc2a587c26b330755afa467efef30a22a9a60cd462ecef87d9e13f0ec71f3d2f730f462c57d1339f563f426d9ffb0d8721ad95fcfd5e187fe43b3b8a714675485a7838e980f89500e012b42a972abb49df0e4db94351ea3d65199117d37a4747a2c2a26d27c8b5eb5f21c1bbfc1c647ae08d37e44dbd4037aa75fe5cd83d9ddd5891b733c4a5f1f956572b7ece0547fd70bcde1c83ff12fb3607f1fc3e4cc65adc9a5e0546a748f0cf37332b5aae7733cd2283d9453b807087c130bb331a7c0c24b66c9495dde3f951d8595f4c4c77b60df5179d250ff55a61d0f1a8dc69b3b4136a7bccea747370b5a598f59e03b79a38d7697b81515d2fe38a486564ef962bd9c9ffb4ee5b7845f8c9913dd329114b04cc9ac409fc71ea7d01d07fbf8b490ced2052cf063eb9de23f44471dfe7bb42fb9a5a6d96ec77024163b5a31a09fa57892175d4166a33c0228d23143ddee6fe33ff3dc00f3c8fc4f6dd6167255ae68638b56458e7bca6eec40d2ca246913dd4ff73985770a8e91429c1573ec376bc4d1105fa50dc778822009f76d899bce68b5bfe06b7ec4e9b2b5f4ab3f23b43f86d4cfeda323a65407e3b991009e8d26c809cb94e97cfbf91e25fd0497b18e2eb10298373ba0ffb12247b1c94f8be661805ecd90cd56cbe14de4bc7d6f03c8114e879d1858531b4a6096bd1690578a9ec62bb0b805bb784075c404a828aaecfdc30cd67db7d9231957aa5c0b33fb13162b5d98333dc8d3ce94d4bac2cf4933cb7769066d7a492113ff62048dcbdfeae8918515f875cbb3f874178c4520e5f176793d375717624f6da427f17c4dbf2a456dd1eb086fa69fc78741a72f89590b00fc3288c7c647440b1eabf3c5b5f5b307c8f2c458ac745d6437fd0041bf3c283c0b1e446a0ef29a3473f546b2ef63ad0fedefba702f7aff4f76d5e3c2ae81f0f04400494e787af824e7c3e14754b1cf78dd87c9ab71e8324a3a697ccb1e38430190f423e26755f84aaf103218b46977d5dcc9e6067c0774f32bc997a796c355c437197a40dd17a5eb86b357646a5f6837f84a557ed098443afdd115ccda7523f04c9fc1a11c6030075d7947375dd392502aa52514120b912a21d3cd67be7592e3e866b4618c8ba70353b25a50b79400af3c56ba804fcb4886ca0c711f1b927b2629d82cd2b72d02faf3ce610b9f11117b1a06a3cf0f2c88125bdccc77c28ca88d02fa71e647556e241703dacb0cbbfa2fc1490c3518660e52b2eec8fbc1beba43c6ab07e159105ffb567731476fadb7ec6bc4c3fb336dca0a589a3090e49ff352787ff717b1861e3b419fa815168c6060d37404255f6c33f46455a9f7b9aa5027dc68ee0f29fdb291268b3c46ff775c2041982da96971d4999d3b25b5f4ebd54ca6fd298b143370071335c105313281ce89f6f9e5cf91f168a18b5e96982e9eef1cb837f8a276fc4c1ea772166b679bfc0a1824ab1e18695e2d5a8deee8ec025362b2dc50b501ccc361e39d0ce3a4d72342b5f781b8487cf4e8102fc9648fb55f26d96f12d35b05b92d77130176a6313141ea90328e3f7d88bf087699b68c0ee487f0845ba82245efccb7e80062e5a2c3eaab3dafaf1b1402f8d1c6aa0440876188c7b6768e3979fdc4b77c94dbbc975bd8ec938dad0d08c402d2cc623d61143119931bdb5d82cb7e224a068e501ed56124637866be415da57cf8cf217e118d6c935c4bda6c937752a0682b5ffd7cb2291a90b18a738751ea9e36dcfb8327b3673e95f22cac03a6589ed3fe151991fbb33c616d49061382e6dcf6f86f872222c5dec3456250c7c6e92c82c2b34857a76c76d653a9e0d4c136a59b72805ebe692cf02dfa9c011653086e6f63425860b1ef1d48c958682a04e88d098b33d049691e3ccd06c4a96e23f3a84f749a18ccb7ada97c484fab1786038a3343ed76aaa68dd1138bbc92ce36db02063fc47d48ec3989ad049667495c67b39a2fa67605c98b3aaf0cba3b461e77b543228e4e14efb3c83357f631c6c033fa35c6982746d2c123f5bf5aaabff80c9273ee5b835eec3e47bd622b07e5a5275afec1d90b089be85ba649cfcc2c6564a957b3dbdd68314ea59f9154306af62a416953ed1eb7c078c412820a9ac372a861cf7e4c993b041f2bf281359a660e0ee2cf74e2a51ce4643333791edf244ec486751c0eebf7930649d2e894de94bc3b3ed68a8c6d988f73c554d58d979375f7b1e1d261f7aadebac51dd7640dd5aff0439415583e2dbd68dc46d3ed9be831281e4e0ebc666217e30526a2c666aac6c57f06d61cc8a7bbc465d174eac69763a4ab0c49bf450296a095f5cea9c4fc1c64258ff528a07f9c4efc560db9a8240cbe4b50a7035b5d291c312220c4f2a84b0687e50c871e0364068d37462b41478fedbb0d373d3e688824abc4283d9a2838b705090d94e78233642ecc191a5d4dc561ef32ff34bebdcc86839945f8dad02f6e467001b81c54d9ca165c161f9daa68bad1bdfe2f99b603995567903f179397857b2e31bbbdbd7c1db247ddeeb865d43058f94dc4f18a7e18c7bbaa37602cc9cbbd45969a107954365285bd452845e75c936a2687f91fc19a1486df4904f98e042e9edd5589bb120d40b74a7367b42e3ec431a93efa29d0f9da399fd9f11ecf0e2f06bd95ee8927e6b64a99038e3d83f35841ba2e64601432aac98b65cf87ce19301d8ca86dbe3f96ce9081cfb028047ac388c24d99625eb987c5be75e3ad0c99b7d684775cc46b65d937f6da2326abe3460c7f1553c5b10d82d576f142c74b1a10fefaadd7e4e659483770cb0bd0f33acd34dd7aedc3cbcd1133527053a9b5890c0ee9753a783907259043714ee957d4a1690e4fdcfc18a1fd6e5257e65dee62e0a84625767c77379f14c24aef1fa039f95989b50a99fbb3db1472d5c45d8d2f3f2ac258cd9d72d9bf117b6653d59173136121740251c809c5f3d9edb01e7028c5e747453fc98885bca6917a1c8791efd3acdb76909dda4e0fc1fcd4e975b3110e39245e4bee9e142d53586f0e4fe355834b05998d818f71c99eef77984a68c2c9d2ce17c6e3d3e987704722f9458f8ffb128f84533c68f4b495f48fa55018581ed8e0f07b46cb2af05ba34a5e14d52ad7c692fad974a7709c8c0e6d74f9fc1afa2c1937cd1f9a16eef7c03d98a67bf6166aae4fb07e857c4f16d145c7183528cac26d8dfa8a02b8132eecfa94606800d9a31234d263947a395665462989ffdfb9bdf01c433102a5d94389939f664b997027e5848dfea122fbc7425c7317d6a532f6fe61474e0e1a7fe43ec02389cf7c622e5f71069a13f673050a46467333d7e315293dd8ec1bde65ec03679828c951d6b416e10b3352edfd5cd5a91da40d1d1e055899341cbb8c85eda0a53acdb61c0a4c0e15e8c9f755cfc78ac89bd80b90ab29d52612e1b7e20776e407cd7fa6fc2cf05ac727888df86066c95c1c8759ae1ec868193f6549a9bbff196c33d39edc99c807db2a5c3095648035a4592d12f421955c7174015b6dcb358f8c9af8ed446ca44a8d97d14244d06a5d8fc556bfac13a3131bfdf005541cd0e6816dcb92f8a19d0ff6e049439a7dd194d0a7a0fa2fd76e2a7ef94dd96da22020887cc56d45ec38d343e1f44e858b4034dc6aea806c886ad5cd697457f95a7c824e3d765293ea1071ec25030b2f4dc2648279e902db8b5ba399f94f913996b676493f9e57e540e164f639f18e193cb833f9c5768"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000000)={{r2, 0x9, 0xeec, 0x1b17, 0x20, 0xdbaf, 0x1, 0x7fffffff, 0x1e3, 0xb2ee, 0x8001, 0x1, 0x3, 0x7ff}, 0x8, [0x0]}) r3 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = dup2(r4, r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300000f630c620000aab60000000000000000"], 0x0, 0x0, 0x0}) dup2(r1, r5) 19:48:08 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) [ 416.156377][T16525] binder: 16511:16525 ioctl c0306201 20000200 returned -22 19:48:08 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 416.340232][T16535] binder: 16529:16535 ioctl d000943e 200006c0 returned -22 [ 416.382558][T16535] binder: 16529:16535 unknown command 0 [ 416.393983][T16538] binder: 16532:16538 unknown command 0 [ 416.411639][T16535] binder: 16529:16535 ioctl c0306201 20000200 returned -22 [ 416.423780][T16538] binder: 16532:16538 ioctl c0306201 20000200 returned -22 [ 416.439148][T16541] binder: 16529:16541 unknown command 1644978959 [ 416.467170][T16541] binder: 16529:16541 ioctl c0306201 200001c0 returned -22 19:48:08 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r5, 0xc) r6 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, r6, 0x0, 0x1ff}) 19:48:08 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r5 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x3) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer={0x40086303, r5}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:08 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:08 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0xff, 0x1, 0x1, 0x0, 0x1, 0x8010, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc12, 0x1, @perf_config_ext={0x5b7, 0x61fa}, 0x1, 0x3ff, 0x1, 0x6, 0x3, 0xfda, 0x8001, 0x0, 0x8, 0x0, 0xcc}, 0x0, 0x5, r3, 0x9) [ 416.774763][T16553] binder: 16546:16553 unknown command 0 [ 416.782875][T16552] binder: 16549:16552 unknown command 0 [ 416.797170][T16552] binder: 16549:16552 ioctl c0306201 20000200 returned -22 [ 416.808336][T16553] binder: 16546:16553 ioctl c0306201 20000200 returned -22 19:48:08 executing program 4: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:09 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:09 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x20, 0x3, 0x3, 0x7, 0x0, 0x8000, 0xa4800, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000000), 0x90a7c1164cbeec1d}, 0xcd0, 0x7, 0x1, 0x9, 0x7fffffff00, 0x2, 0xfffa, 0x0, 0xa0ca, 0x0, 0x2}, r1, 0xc, r0, 0x8) r2 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) r3 = shmget(0x2, 0x3000, 0x10, &(0x7f0000839000/0x3000)=nil) shmat(r3, &(0x7f0000ffb000/0x4000)=nil, 0x2000) shmat(r2, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r2, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmat(r2, &(0x7f0000ffd000/0x2000)=nil, 0x4000) 19:48:09 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0xff, 0x1, 0x1, 0x0, 0x1, 0x8010, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc12, 0x1, @perf_config_ext={0x5b7, 0x61fa}, 0x1, 0x3ff, 0x1, 0x6, 0x3, 0xfda, 0x8001, 0x0, 0x8, 0x0, 0xcc}, 0x0, 0x5, r3, 0x9) 19:48:09 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$SHM_UNLOCK(r5, 0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:09 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:09 executing program 4: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:09 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 417.066510][T16570] binder: 16567:16570 unknown command 0 [ 417.078543][T16569] binder: 16563:16569 unknown command 0 [ 417.087252][T16570] binder: 16567:16570 ioctl c0306201 20000200 returned -22 [ 417.105336][T16569] binder: 16563:16569 ioctl c0306201 20000200 returned -22 19:48:09 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:09 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x6, 0x80, 0x2, 0x6, 0x0, 0x5, 0x86610, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff7, 0x0, @perf_config_ext={0xfff, 0x4b8f}, 0x2, 0x8, 0x20, 0x6, 0x7, 0xffffffff, 0xfff7, 0x0, 0x6, 0x0, 0x9ba}, r1, 0x2, r4, 0x9) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:09 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0xff, 0x1, 0x1, 0x0, 0x1, 0x8010, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc12, 0x1, @perf_config_ext={0x5b7, 0x61fa}, 0x1, 0x3ff, 0x1, 0x6, 0x3, 0xfda, 0x8001, 0x0, 0x8, 0x0, 0xcc}, 0x0, 0x5, r3, 0x9) 19:48:09 executing program 4: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:09 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:09 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) r5 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r5, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 417.335263][T16582] binder: 16579:16582 unknown command 0 [ 417.356360][T16582] binder: 16579:16582 ioctl c0306201 20000200 returned -22 [ 417.370335][T16583] binder: 16581:16583 unknown command 0 [ 417.408376][T16583] binder: 16581:16583 ioctl c0306201 20000200 returned -22 19:48:09 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:09 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:09 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) 19:48:09 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0xff, 0x1, 0x1, 0x0, 0x1, 0x8010, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc12, 0x1, @perf_config_ext={0x5b7, 0x61fa}, 0x1, 0x3ff, 0x1, 0x6, 0x3, 0xfda, 0x8001, 0x0, 0x8, 0x0, 0xcc}, 0x0, 0x5, r3, 0x9) 19:48:09 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:09 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 417.857750][T16604] binder: 16596:16604 unknown command 0 [ 417.873058][T16602] binder: 16595:16602 unknown command 0 [ 417.891488][T16606] binder: 16600:16606 unknown command 0 19:48:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:10 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:10 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) r4 = getegid() getgroups(0x2, &(0x7f0000000180)=[r4, r2]) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r3, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 417.908867][T16604] binder: 16596:16604 ioctl c0306201 20000200 returned -22 [ 417.924541][T16602] binder: 16595:16602 ioctl c0306201 20000200 returned -22 [ 417.939073][T16606] binder: 16600:16606 ioctl c0306201 20000200 returned -22 19:48:10 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:10 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) 19:48:10 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0xff, 0x1, 0x1, 0x0, 0x1, 0x8010, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc12, 0x1, @perf_config_ext={0x5b7, 0x61fa}, 0x1, 0x3ff, 0x1, 0x6, 0x3, 0xfda, 0x8001, 0x0, 0x8, 0x0, 0xcc}, 0x0, 0x5, r3, 0x9) 19:48:10 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:10 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 418.154769][T16619] binder: 16615:16619 unknown command 0 [ 418.183962][T16619] binder: 16615:16619 ioctl c0306201 20000200 returned -22 [ 418.198123][T16622] binder: 16618:16622 unknown command 0 19:48:10 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) getegid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r2, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:10 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) [ 418.230027][T16624] binder: 16621:16624 unknown command 0 [ 418.239247][T16622] binder: 16618:16622 ioctl c0306201 20000200 returned -22 [ 418.266073][T16624] binder: 16621:16624 ioctl c0306201 20000200 returned -22 19:48:10 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:10 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0xff, 0x1, 0x1, 0x0, 0x1, 0x8010, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc12, 0x1, @perf_config_ext={0x5b7, 0x61fa}, 0x1, 0x3ff, 0x1, 0x6, 0x3, 0xfda, 0x8001, 0x0, 0x8, 0x0, 0xcc}, 0x0, 0x5, r3, 0x9) 19:48:10 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:48:10 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:10 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f00000000c0)=[0xee01, 0xee00, 0x0, 0xffffffffffffffff, 0x0, 0xee00]) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, r2, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 418.477186][T16635] binder: 16633:16635 unknown command 0 [ 418.498749][T16635] binder: 16633:16635 ioctl c0306201 20000200 returned -22 19:48:10 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) [ 418.557461][T16638] binder: 16636:16638 unknown command 0 [ 418.585107][T16638] binder: 16636:16638 ioctl c0306201 20000200 returned -22 [ 418.598845][T16641] binder: 16639:16641 unknown command 0 19:48:10 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) [ 418.615451][T16641] binder: 16639:16641 ioctl c0306201 20000200 returned -22 19:48:10 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) 19:48:10 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:10 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:10 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:10 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) [ 418.801857][T16651] binder: 16649:16651 unknown command 0 [ 418.826072][T16651] binder: 16649:16651 ioctl c0306201 20000200 returned -22 19:48:11 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:11 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) [ 418.922648][T16657] binder: 16653:16657 unknown command 0 [ 418.936186][T16657] binder: 16653:16657 ioctl c0306201 20000200 returned -22 19:48:11 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:11 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:11 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) 19:48:11 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 419.139424][T16667] binder: 16664:16667 unknown command 0 19:48:11 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) [ 419.180749][T16667] binder: 16664:16667 ioctl c0306201 20000200 returned -22 [ 419.213806][T16673] binder: 16671:16673 unknown command 0 19:48:11 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:11 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 419.237745][T16673] binder: 16671:16673 ioctl c0306201 20000200 returned -22 19:48:11 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:11 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r2, r1) 19:48:11 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:11 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:11 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:11 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) [ 419.509709][T16690] binder: 16687:16690 unknown command 0 [ 419.512207][T16691] binder: 16683:16691 unknown command 0 [ 419.533975][T16690] binder: 16687:16690 ioctl c0306201 20000200 returned -22 19:48:11 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:11 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) [ 419.568318][T16691] binder: 16683:16691 ioctl c0306201 20000200 returned -22 19:48:11 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:11 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:48:11 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:11 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:11 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:11 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) [ 419.827368][T16706] binder: 16703:16706 unknown command 0 [ 419.836877][T16707] binder: 16704:16707 unknown command 0 [ 419.852100][T16706] binder: 16703:16706 ioctl c0306201 20000200 returned -22 [ 419.875758][T16707] binder: 16704:16707 ioctl c0306201 20000200 returned -22 19:48:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r2, r1) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:12 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:12 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:12 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:12 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:12 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) 19:48:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, r1) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:12 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:12 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:12 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:12 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, r1) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:12 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) 19:48:12 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:12 executing program 3: add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:12 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) dup2(0xffffffffffffffff, r1) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:12 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:12 executing program 3: add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:12 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:12 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:12 executing program 5: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:12 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) 19:48:13 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:13 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:13 executing program 3: add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:13 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:13 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:13 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:13 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:13 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:13 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:13 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:13 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:13 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:13 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:13 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:13 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:13 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:13 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:13 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:14 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:14 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:14 executing program 3: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:14 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:14 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:14 executing program 3: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:14 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:14 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x0) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:14 executing program 2: r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:14 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:14 executing program 3: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:14 executing program 2: r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:14 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:14 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:14 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:14 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:14 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:14 executing program 2: r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:14 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:14 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:14 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:14 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(0x0, &(0x7f00008cb000/0x4000)=nil, 0x6000) 19:48:14 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:14 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:15 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:15 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:15 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:15 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:15 executing program 1: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:15 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x0) 19:48:15 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:15 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:15 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:15 executing program 1: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:15 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:15 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x0) 19:48:15 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:15 executing program 1: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:15 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:15 executing program 2: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:15 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:15 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x0) 19:48:15 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:15 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:15 executing program 2: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:15 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:15 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:15 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:15 executing program 2: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:16 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:16 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:16 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:16 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:16 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:16 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:16 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:16 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:16 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:16 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:16 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:16 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:16 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:16 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:16 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:16 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:16 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:16 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:16 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:16 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:16 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) 19:48:16 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:16 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:16 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:16 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:16 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:17 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), 0x0, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:17 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:17 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:17 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:17 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:17 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:17 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), 0x0, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:17 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:17 executing program 4: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:17 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:17 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:17 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), 0x0, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) 19:48:17 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:17 executing program 4: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:17 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:17 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:17 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:17 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 19:48:17 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:17 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:17 executing program 4: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:17 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 19:48:17 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:17 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:17 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:18 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:18 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:18 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) 19:48:18 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:18 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) 19:48:18 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:18 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:18 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 19:48:18 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:18 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:18 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:18 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) 19:48:18 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 19:48:18 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:18 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:18 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:18 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:18 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) 19:48:18 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 19:48:18 executing program 0: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:18 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:18 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:18 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x0, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:18 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4", 0x21, 0xfffffffffffffffd) 19:48:18 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:18 executing program 0: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:19 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:19 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:19 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4", 0x21, 0xfffffffffffffffd) 19:48:19 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:19 executing program 0: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:19 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x0, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:19 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 19:48:19 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4", 0x21, 0xfffffffffffffffd) 19:48:19 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:19 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:19 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:19 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 427.327776][T17106] binder: 17103:17106 ioctl c0306201 0 returned -14 19:48:19 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 19:48:19 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:19 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707", 0x31, 0xfffffffffffffffd) 19:48:19 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:19 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:19 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:19 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 427.586567][T17118] binder: 17116:17118 ioctl c0306201 0 returned -14 19:48:19 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4", 0x21, 0xfffffffffffffffd) 19:48:19 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 19:48:19 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:19 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:19 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:19 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4", 0x21, 0xfffffffffffffffd) [ 427.851561][T17135] binder: 17132:17135 ioctl c0306201 0 returned -14 19:48:20 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:20 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:20 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:20 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x0, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:20 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3", 0x11, 0xfffffffffffffffd) 19:48:20 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:20 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:20 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:20 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:20 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x0, 0x0, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:20 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3", 0x11, 0xfffffffffffffffd) 19:48:20 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000180)=@keyring) 19:48:20 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:20 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:20 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:20 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:20 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) 19:48:20 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000180)=@keyring) 19:48:20 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:20 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:20 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:20 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd) 19:48:20 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) 19:48:20 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000180)=@keyring) 19:48:20 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:20 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:21 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 19:48:21 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) 19:48:21 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) 19:48:21 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:21 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 19:48:21 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}) 19:48:21 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) 19:48:21 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:21 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffd) 19:48:21 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) 19:48:21 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}}) 19:48:21 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x0, 0x0, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:21 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f00000002c0)=[@release, @free_buffer], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:21 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) 19:48:21 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:21 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f00000002c0)=[@release, @free_buffer], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:22 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) 19:48:22 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f00000002c0)=[@release, @free_buffer], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:22 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f00000002c0)=[@release, @free_buffer], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:22 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) 19:48:22 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:22 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f00000002c0)=[@release, @free_buffer], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:22 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:22 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:22 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:22 executing program 2: add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:22 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:22 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 2: add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:23 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:23 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 2: add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:23 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 1: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)}, 0x1000}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:23 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:23 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:23 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 1: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:23 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:23 executing program 1: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:23 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:23 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:23 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:24 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:24 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 3: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:24 executing program 2: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:24 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:24 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f00000002c0)=[@release, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:24 executing program 3: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 2: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:24 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 3: syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:24 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f00000002c0)=[@release, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:24 executing program 2: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:24 executing program 1: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:24 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:24 executing program 1: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:24 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:24 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f00000002c0)=[@release, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:25 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:25 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:25 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:25 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:25 executing program 1: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:25 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:25 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)}, 0x1000}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:25 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:48:25 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:25 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:25 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:25 executing program 3: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:25 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) 19:48:25 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:25 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:48:25 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:25 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:25 executing program 3: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:25 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) 19:48:25 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:25 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:25 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:48:25 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:25 executing program 3: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:26 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) 19:48:26 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:26 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000180)}) 19:48:26 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:26 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:26 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:26 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:26 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) 19:48:26 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000180)}) 19:48:26 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:26 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:26 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x3, 0x1, 0x5, 0x0, 0xc, 0x4045f, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x4ffe}, 0x1000, 0x4, 0x20000, 0x1, 0xe6, 0x2, 0x800, 0x0, 0x2, 0x0, 0x2ab8}, 0x0, 0x7, 0xffffffffffffffff, 0x3) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) add_key$user(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="aea4f53272c59765034953919978a1e6b3a797230e268f45e641872f8c2762baf4077090a95f30e77f13c80e5f0a20e707a6fdf88da1d9af6c09f9f8e2a0a1f1d9", 0x41, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) 19:48:26 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:26 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) 19:48:26 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000180)}) 19:48:26 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 434.428607][T17483] binder: 17479:17483 unknown command 0 19:48:26 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 434.495702][T17483] binder: 17479:17483 ioctl c0306201 20000200 returned -22 19:48:26 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:26 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:26 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring) 19:48:26 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x20, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7"}) 19:48:26 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:26 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:26 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:26 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:27 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:27 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000180)='A'}) 19:48:27 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:27 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:27 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 19:48:27 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, r1, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:27 executing program 4: add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:27 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000180)}) 19:48:27 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:27 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:27 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 19:48:27 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:27 executing program 4: add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:27 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000180)}) 19:48:27 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:27 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:27 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 19:48:27 executing program 4: add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:27 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:27 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f00000002c0)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000180)}) 19:48:27 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:27 executing program 2: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x7c, 0x0, &(0x7f00000002c0)=[@release, @free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@binder={0x73622a85, 0x1000, 0x3}, @fd}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}, 0x1000}, @acquire={0x40046305, 0x1}, @acquire_done={0x40106309, 0x3}], 0x3f, 0x0, &(0x7f0000000180)="41cacf1c892ca663f63334ee36fb5777281cd89e7c8bfa027bc9c1d6d5072fe7a88650c30f4b6553406a65327af9fa18089bfc3eb46c0ce6f81b71f2799bcf"}) 19:48:27 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:27 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(0x0, &(0x7f00006df000/0xa000)=nil, 0x5000) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:27 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:27 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) 19:48:28 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:28 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) [ 435.990156][T17566] binder: 17561:17566 unknown command 0 [ 436.020038][T17566] binder: 17561:17566 ioctl c0306201 20000200 returned -22 [ 436.034122][ T37] kauditd_printk_skb: 28 callbacks suppressed 19:48:28 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:28 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 436.034140][ T37] audit: type=1800 audit(1620416908.098:253): pid=17568 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 19:48:28 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) close(r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') dup2(r2, r1) 19:48:28 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:28 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0) close(r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') dup2(r2, r1) 19:48:28 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:28 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:28 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x7289, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 436.279285][T17579] binder: 17578:17579 unknown command 0 [ 436.299953][T17579] binder: 17578:17579 ioctl c0306201 20000200 returned -22 19:48:28 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) [ 436.388115][T17586] binder: 17583:17586 unknown command 0 [ 436.401550][T17586] binder: 17583:17586 ioctl c0306201 20000200 returned -22 19:48:28 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:28 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:28 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:28 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:28 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:28 executing program 5: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:28 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:29 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:29 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:29 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, 0x0, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:29 executing program 4: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:29 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0x100000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) 19:48:29 executing program 5: creat(&(0x7f0000000000)='./file0\x00', 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x6}, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r0, 0x0) 19:48:29 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:29 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:29 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 437.116365][ T37] audit: type=1800 audit(1620416909.188:254): pid=17621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=37 res=0 errno=0 19:48:29 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x10, r7, 0x800000400) 19:48:29 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 437.244991][ T37] audit: type=1800 audit(1620416909.308:255): pid=17625 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 19:48:29 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:29 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:29 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x10, r7, 0x800000400) 19:48:29 executing program 0: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:29 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:29 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x10, r7, 0x800000400) 19:48:29 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:29 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:29 executing program 0: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:29 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:29 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x10, r7, 0x800000400) 19:48:29 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:29 executing program 0: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:29 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:29 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x10, r7, 0x800000400) 19:48:30 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:30 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:30 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:30 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x10, r7, 0x800000400) 19:48:30 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:30 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:30 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x10, r7, 0x800000400) 19:48:30 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:30 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:30 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x10, r7, 0x800000400) 19:48:30 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:30 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:30 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) 19:48:30 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:30 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:30 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:30 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) dup2(r6, r5) 19:48:30 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:30 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:30 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) r5 = syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) r6 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup2(r6, r5) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000080)=[@enter_looper, @clear_death], 0x0, 0x0, 0x0}) mmap$usbfs(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3, 0x10, r7, 0x800000400) 19:48:30 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:30 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:31 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:31 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:31 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:31 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 19:48:31 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000000c0)) 19:48:31 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:31 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:31 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:31 executing program 0: perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:31 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) 19:48:31 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:31 executing program 5: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r2, &(0x7f0000000100)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x200000003, 0x84) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000001280)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x19403, 0x0) 19:48:31 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(0x0, &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:31 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:31 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) 19:48:31 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) 19:48:31 executing program 3: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), 0x0) 19:48:31 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 19:48:31 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:31 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) 19:48:31 executing program 3 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 439.747642][ T3238] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.754049][ T3238] ieee802154 phy1 wpan1: encryption failed: -22 19:48:31 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 19:48:31 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) [ 439.958562][T17760] FAULT_INJECTION: forcing a failure. [ 439.958562][T17760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.024241][T17760] CPU: 1 PID: 17760 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 440.032728][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.042835][T17760] Call Trace: [ 440.046139][T17760] dump_stack+0x141/0x1d7 [ 440.050505][T17760] should_fail.cold+0x5/0xa [ 440.055227][T17760] _copy_from_user+0x2c/0x180 [ 440.059947][T17760] io_uring_setup+0x91/0x2a80 [ 440.064718][T17760] ? __context_tracking_exit+0xb8/0xe0 [ 440.070212][T17760] ? io_connect+0x680/0x680 [ 440.074741][T17760] ? lock_downgrade+0x6e0/0x6e0 [ 440.079637][T17760] ? syscall_enter_from_user_mode+0x27/0x70 [ 440.085572][T17760] do_syscall_64+0x3a/0xb0 [ 440.090017][T17760] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 440.095945][T17760] RIP: 0033:0x4665f9 [ 440.099853][T17760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 440.119635][T17760] RSP: 002b:00007fd903e58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 440.128136][T17760] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 440.136127][T17760] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 440.144100][T17760] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 440.152065][T17760] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 440.160114][T17760] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 19:48:32 executing program 5 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:32 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:32 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f00008cb000/0x4000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) 19:48:32 executing program 4: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 19:48:32 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) 19:48:32 executing program 3 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 440.440680][T17771] FAULT_INJECTION: forcing a failure. [ 440.440680][T17771] name failslab, interval 1, probability 0, space 0, times 0 [ 440.497231][T17771] CPU: 0 PID: 17771 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 440.505708][T17771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.515797][T17771] Call Trace: [ 440.519101][T17771] dump_stack+0x141/0x1d7 [ 440.523478][T17771] should_fail.cold+0x5/0xa [ 440.528039][T17771] ? io_uring_setup+0x27d/0x2a80 [ 440.533618][T17771] should_failslab+0x5/0x10 [ 440.538156][T17771] kmem_cache_alloc_trace+0x55/0x290 [ 440.543492][T17771] io_uring_setup+0x27d/0x2a80 [ 440.548459][T17771] ? __context_tracking_exit+0xb8/0xe0 [ 440.553955][T17771] ? io_connect+0x680/0x680 [ 440.558520][T17771] ? syscall_enter_from_user_mode+0x27/0x70 [ 440.564471][T17771] do_syscall_64+0x3a/0xb0 [ 440.568926][T17771] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 440.574874][T17771] RIP: 0033:0x4665f9 19:48:32 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) 19:48:32 executing program 4 (fault-call:1 fault-nth:0): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:32 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) r4 = dup2(r3, r2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0}) [ 440.578798][T17771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 440.598615][T17771] RSP: 002b:00007fd903e58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 440.607072][T17771] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 440.615077][T17771] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 440.623082][T17771] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 440.631090][T17771] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 440.639097][T17771] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 19:48:32 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 440.664079][T17776] FAULT_INJECTION: forcing a failure. [ 440.664079][T17776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.740503][T17776] CPU: 1 PID: 17776 Comm: syz-executor.5 Not tainted 5.12.0-syzkaller #0 [ 440.748991][T17776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.758683][T17781] FAULT_INJECTION: forcing a failure. [ 440.758683][T17781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.759068][T17776] Call Trace: [ 440.759081][T17776] dump_stack+0x141/0x1d7 [ 440.759119][T17776] should_fail.cold+0x5/0xa [ 440.759159][T17776] _copy_from_user+0x2c/0x180 [ 440.789292][T17776] io_uring_setup+0x91/0x2a80 [ 440.793988][T17776] ? __context_tracking_exit+0xb8/0xe0 [ 440.799636][T17776] ? io_connect+0x680/0x680 [ 440.804236][T17776] ? lock_downgrade+0x6e0/0x6e0 [ 440.809103][T17776] ? syscall_enter_from_user_mode+0x27/0x70 [ 440.815010][T17776] do_syscall_64+0x3a/0xb0 [ 440.819529][T17776] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 440.825547][T17776] RIP: 0033:0x4665f9 [ 440.829549][T17776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 440.849420][T17776] RSP: 002b:00007f4767f19108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 440.857850][T17776] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 440.865855][T17776] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 440.873992][T17776] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 440.881980][T17776] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 440.889975][T17776] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 [ 440.912909][T17781] CPU: 0 PID: 17781 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 440.921388][T17781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.931486][T17781] Call Trace: [ 440.934829][T17781] dump_stack+0x141/0x1d7 [ 440.939462][T17781] should_fail.cold+0x5/0xa [ 440.944032][T17781] strncpy_from_user+0x34/0x3e0 [ 440.949011][T17781] ? lock_downgrade+0x6e0/0x6e0 [ 440.953916][T17781] __do_sys_add_key+0xa9/0x430 [ 440.958737][T17781] ? __do_sys_request_key+0x3b0/0x3b0 [ 440.964165][T17781] ? syscall_enter_from_user_mode+0x27/0x70 [ 440.970116][T17781] do_syscall_64+0x3a/0xb0 [ 440.974576][T17781] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 440.980686][T17781] RIP: 0033:0x4665f9 19:48:33 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) [ 440.984621][T17781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 441.004535][T17781] RSP: 002b:00007f7d7a905188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 441.013125][T17781] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 441.021135][T17781] RDX: 0000000000000000 RSI: 00000000200009c0 RDI: 0000000020000980 [ 441.029146][T17781] RBP: 00007f7d7a9051d0 R08: fffffffffffffffe R09: 0000000000000000 19:48:33 executing program 3 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 441.037184][T17781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.045192][T17781] R13: 0000000000a9fb1f R14: 00007f7d7a905300 R15: 0000000000022000 [ 441.165465][T17790] FAULT_INJECTION: forcing a failure. [ 441.165465][T17790] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 441.186038][T17790] CPU: 0 PID: 17790 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 441.194512][T17790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.204601][T17790] Call Trace: [ 441.207905][T17790] dump_stack+0x141/0x1d7 [ 441.212276][T17790] should_fail.cold+0x5/0xa [ 441.216920][T17790] __alloc_pages_nodemask+0x189/0x730 [ 441.222345][T17790] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 441.229155][T17790] ? find_held_lock+0x2d/0x110 [ 441.234248][T17790] alloc_pages_current+0x18c/0x2a0 [ 441.239409][T17790] kmalloc_order+0x34/0xf0 [ 441.243880][T17790] kmalloc_order_trace+0x14/0x130 [ 441.248952][T17790] io_uring_setup+0x37e/0x2a80 [ 441.253760][T17790] ? __context_tracking_exit+0xb8/0xe0 [ 441.259266][T17790] ? io_connect+0x680/0x680 [ 441.263851][T17790] ? syscall_enter_from_user_mode+0x27/0x70 [ 441.269820][T17790] do_syscall_64+0x3a/0xb0 [ 441.274277][T17790] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 441.280211][T17790] RIP: 0033:0x4665f9 [ 441.284133][T17790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 441.303783][T17790] RSP: 002b:00007fd903e58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 19:48:33 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:33 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) dup2(r3, r2) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) 19:48:33 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_RMID(r1, 0x0) 19:48:33 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 441.312331][T17790] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 441.320422][T17790] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 441.328423][T17790] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 441.336427][T17790] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 441.344433][T17790] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 19:48:33 executing program 4 (fault-call:1 fault-nth:1): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:33 executing program 3 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:33 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:33 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000240)={@fd, @fd, @fd}, &(0x7f0000000040)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) 19:48:33 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_RMID(r1, 0x0) 19:48:33 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 441.701442][T17806] FAULT_INJECTION: forcing a failure. [ 441.701442][T17806] name failslab, interval 1, probability 0, space 0, times 0 [ 441.720182][T17808] FAULT_INJECTION: forcing a failure. [ 441.720182][T17808] name failslab, interval 1, probability 0, space 0, times 0 [ 441.777807][T17806] CPU: 1 PID: 17806 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 441.786372][T17806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.796457][T17806] Call Trace: [ 441.799757][T17806] dump_stack+0x141/0x1d7 [ 441.804118][T17806] should_fail.cold+0x5/0xa [ 441.808667][T17806] ? percpu_ref_init+0xcc/0x3a0 [ 441.813545][T17806] should_failslab+0x5/0x10 [ 441.818079][T17806] kmem_cache_alloc_trace+0x55/0x290 [ 441.823403][T17806] ? io_uring_fasync+0x60/0x60 [ 441.828262][T17806] percpu_ref_init+0xcc/0x3a0 [ 441.832971][T17806] ? rcu_read_lock_sched_held+0x3a/0x70 [ 441.838553][T17806] io_uring_setup+0x42d/0x2a80 [ 441.843352][T17806] ? __context_tracking_exit+0xb8/0xe0 [ 441.848989][T17806] ? io_connect+0x680/0x680 [ 441.853536][T17806] ? syscall_enter_from_user_mode+0x27/0x70 [ 441.859475][T17806] do_syscall_64+0x3a/0xb0 [ 441.863936][T17806] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 441.869963][T17806] RIP: 0033:0x4665f9 19:48:34 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_RMID(r1, 0x0) 19:48:34 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) [ 441.873882][T17806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 441.893517][T17806] RSP: 002b:00007fd903e58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 441.902035][T17806] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 441.910014][T17806] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 441.918005][T17806] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 441.925977][T17806] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 441.933942][T17806] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 19:48:34 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 441.974090][T17808] CPU: 0 PID: 17808 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 441.982580][T17808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.992675][T17808] Call Trace: [ 441.995987][T17808] dump_stack+0x141/0x1d7 [ 442.000363][T17808] should_fail.cold+0x5/0xa [ 442.004916][T17808] ? strndup_user+0x70/0xe0 [ 442.009466][T17808] ? strndup_user+0x70/0xe0 [ 442.014013][T17808] should_failslab+0x5/0x10 [ 442.018556][T17808] __kmalloc_track_caller+0x70/0x2d0 [ 442.023896][T17808] memdup_user+0x22/0xd0 [ 442.028181][T17808] strndup_user+0x70/0xe0 [ 442.032830][T17808] __do_sys_add_key+0x131/0x430 [ 442.037852][T17808] ? __do_sys_request_key+0x3b0/0x3b0 [ 442.043379][T17808] ? syscall_enter_from_user_mode+0x27/0x70 [ 442.049340][T17808] do_syscall_64+0x3a/0xb0 [ 442.053800][T17808] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 442.059739][T17808] RIP: 0033:0x4665f9 19:48:34 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 442.063690][T17808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 442.083438][T17808] RSP: 002b:00007f7d7a905188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 442.091983][T17808] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 442.100024][T17808] RDX: 0000000000000000 RSI: 00000000200009c0 RDI: 0000000020000980 [ 442.108121][T17808] RBP: 00007f7d7a9051d0 R08: fffffffffffffffe R09: 0000000000000000 [ 442.116134][T17808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:48:34 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) 19:48:34 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 442.124143][T17808] R13: 0000000000a9fb1f R14: 00007f7d7a905300 R15: 0000000000022000 19:48:34 executing program 4 (fault-call:1 fault-nth:2): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:34 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 19:48:34 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:34 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:34 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) 19:48:34 executing program 3 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 442.509819][T17833] FAULT_INJECTION: forcing a failure. [ 442.509819][T17833] name fail_page_alloc, interval 1, probability 0, space 0, times 0 19:48:34 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 19:48:34 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) [ 442.553980][T17839] FAULT_INJECTION: forcing a failure. [ 442.553980][T17839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.584278][T17833] CPU: 0 PID: 17833 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 442.592763][T17833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.602947][T17833] Call Trace: [ 442.606255][T17833] dump_stack+0x141/0x1d7 [ 442.610625][T17833] should_fail.cold+0x5/0xa [ 442.615167][T17833] __alloc_pages_nodemask+0x189/0x730 [ 442.620569][T17833] ? __debug_object_init+0x409/0xd10 [ 442.625872][T17833] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 442.632663][T17833] ? debug_object_destroy+0x210/0x210 [ 442.638057][T17833] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 442.643794][T17833] ? cap_capable+0x1f1/0x280 [ 442.648406][T17833] alloc_pages_current+0x18c/0x2a0 [ 442.653541][T17833] __get_free_pages+0x8/0x40 [ 442.658148][T17833] io_uring_setup+0xcc3/0x2a80 [ 442.662924][T17833] ? __context_tracking_exit+0xb8/0xe0 [ 442.668398][T17833] ? io_connect+0x680/0x680 [ 442.672934][T17833] ? syscall_enter_from_user_mode+0x27/0x70 [ 442.678855][T17833] do_syscall_64+0x3a/0xb0 [ 442.683285][T17833] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 442.689193][T17833] RIP: 0033:0x4665f9 [ 442.693115][T17833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 442.712920][T17833] RSP: 002b:00007fd903e58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 442.721360][T17833] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 442.729352][T17833] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 442.737354][T17833] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 442.745338][T17833] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 442.753325][T17833] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 [ 442.761431][T17839] CPU: 1 PID: 17839 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 442.769888][T17839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.779943][T17839] Call Trace: [ 442.783304][T17839] dump_stack+0x141/0x1d7 [ 442.787634][T17839] should_fail.cold+0x5/0xa [ 442.792151][T17839] _copy_from_user+0x2c/0x180 [ 442.796838][T17839] memdup_user+0x65/0xd0 [ 442.801081][T17839] strndup_user+0x70/0xe0 [ 442.805593][T17839] __do_sys_add_key+0x131/0x430 [ 442.810547][T17839] ? __do_sys_request_key+0x3b0/0x3b0 [ 442.815928][T17839] ? syscall_enter_from_user_mode+0x27/0x70 [ 442.821835][T17839] do_syscall_64+0x3a/0xb0 [ 442.826257][T17839] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 442.832238][T17839] RIP: 0033:0x4665f9 19:48:35 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 442.836386][T17839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 442.856081][T17839] RSP: 002b:00007f7d7a905188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 442.864501][T17839] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 442.872475][T17839] RDX: 0000000000000000 RSI: 00000000200009c0 RDI: 0000000020000980 [ 442.880443][T17839] RBP: 00007f7d7a9051d0 R08: fffffffffffffffe R09: 0000000000000000 [ 442.888408][T17839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.896460][T17839] R13: 0000000000a9fb1f R14: 00007f7d7a905300 R15: 0000000000022000 19:48:35 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:35 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) 19:48:35 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) shmget(0x2, 0x1000, 0xa18, &(0x7f0000ffd000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) 19:48:35 executing program 4 (fault-call:1 fault-nth:3): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:35 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x7}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:35 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) 19:48:35 executing program 3 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:35 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:35 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) [ 443.539371][T17867] FAULT_INJECTION: forcing a failure. [ 443.539371][T17867] name failslab, interval 1, probability 0, space 0, times 0 [ 443.586378][T17867] CPU: 1 PID: 17867 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 443.587398][T17869] FAULT_INJECTION: forcing a failure. [ 443.587398][T17869] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 443.594845][T17867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.594864][T17867] Call Trace: [ 443.594874][T17867] dump_stack+0x141/0x1d7 [ 443.594907][T17867] should_fail.cold+0x5/0xa [ 443.594937][T17867] ? prepare_creds+0x3b/0x730 [ 443.595026][T17867] ? prepare_creds+0x3b/0x730 [ 443.640099][T17867] should_failslab+0x5/0x10 [ 443.644618][T17867] kmem_cache_alloc+0x5e/0x370 [ 443.649376][T17867] ? __validate_process_creds+0x20c/0x370 [ 443.655097][T17867] prepare_creds+0x3b/0x730 [ 443.659601][T17867] lookup_user_key+0x507/0x11c0 [ 443.664461][T17867] ? join_session_keyring+0x340/0x340 [ 443.669838][T17867] ? lock_downgrade+0x6e0/0x6e0 [ 443.674718][T17867] ? key_validate+0x100/0x100 [ 443.679402][T17867] ? _copy_from_user+0x5d/0x180 [ 443.684424][T17867] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 443.691099][T17867] ? memdup_user+0x7c/0xd0 [ 443.695521][T17867] __do_sys_add_key+0x1d3/0x430 [ 443.700371][T17867] ? __do_sys_request_key+0x3b0/0x3b0 [ 443.705843][T17867] ? syscall_enter_from_user_mode+0x27/0x70 [ 443.711856][T17867] do_syscall_64+0x3a/0xb0 [ 443.716289][T17867] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 443.722706][T17867] RIP: 0033:0x4665f9 [ 443.726597][T17867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 443.746644][T17867] RSP: 002b:00007f7d7a905188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 443.755066][T17867] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 443.763029][T17867] RDX: 0000000000000000 RSI: 00000000200009c0 RDI: 0000000020000980 [ 443.771010][T17867] RBP: 00007f7d7a9051d0 R08: fffffffffffffffe R09: 0000000000000000 [ 443.778987][T17867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 19:48:35 executing program 1: r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, r0) r1 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r1, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r1, 0x0) 19:48:35 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 443.786973][T17867] R13: 0000000000a9fb1f R14: 00007f7d7a905300 R15: 0000000000022000 [ 443.821155][T17869] CPU: 0 PID: 17869 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 19:48:35 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x100, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) [ 443.829644][T17869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.839724][T17869] Call Trace: [ 443.843025][T17869] dump_stack+0x141/0x1d7 [ 443.847476][T17869] should_fail.cold+0x5/0xa [ 443.852113][T17869] __alloc_pages_nodemask+0x189/0x730 [ 443.857513][T17869] ? __debug_object_init+0x409/0xd10 [ 443.862831][T17869] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 443.869639][T17869] ? debug_object_destroy+0x210/0x210 [ 443.875047][T17869] ? __sanitizer_cov_trace_cmp4+0x1c/0x70 [ 443.880806][T17869] ? cap_capable+0x1f1/0x280 19:48:36 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) [ 443.885431][T17869] alloc_pages_current+0x18c/0x2a0 [ 443.890587][T17869] __get_free_pages+0x8/0x40 [ 443.895232][T17869] io_uring_setup+0xe7a/0x2a80 [ 443.900030][T17869] ? __context_tracking_exit+0xb8/0xe0 [ 443.905535][T17869] ? io_connect+0x680/0x680 [ 443.910079][T17869] ? syscall_enter_from_user_mode+0x27/0x70 [ 443.916019][T17869] do_syscall_64+0x3a/0xb0 [ 443.921079][T17869] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 443.927107][T17869] RIP: 0033:0x4665f9 [ 443.931032][T17869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 443.950669][T17869] RSP: 002b:00007fd903e37108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 443.959114][T17869] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 00000000004665f9 [ 443.967114][T17869] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 443.975110][T17869] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 443.983107][T17869] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 443.991103][T17869] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 19:48:36 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) shmat(r0, &(0x7f0000002000/0x4000)=nil, 0x6000) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) 19:48:36 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) 19:48:36 executing program 4 (fault-call:1 fault-nth:4): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:36 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0xc}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:36 executing program 1: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 19:48:36 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) 19:48:36 executing program 3 (fault-call:1 fault-nth:6): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:36 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmdt(0x0) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) [ 444.482126][T17895] FAULT_INJECTION: forcing a failure. [ 444.482126][T17895] name failslab, interval 1, probability 0, space 0, times 0 [ 444.500404][T17896] FAULT_INJECTION: forcing a failure. [ 444.500404][T17896] name failslab, interval 1, probability 0, space 0, times 0 [ 444.512905][T17895] CPU: 1 PID: 17895 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 444.521545][T17895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.531719][T17895] Call Trace: [ 444.535027][T17895] dump_stack+0x141/0x1d7 [ 444.539383][T17895] should_fail.cold+0x5/0xa [ 444.543916][T17895] ? security_prepare_creds+0x10e/0x190 [ 444.549785][T17895] should_failslab+0x5/0x10 [ 444.554319][T17895] __kmalloc+0x72/0x300 [ 444.558595][T17895] security_prepare_creds+0x10e/0x190 [ 444.564008][T17895] prepare_creds+0x509/0x730 [ 444.568629][T17895] lookup_user_key+0x507/0x11c0 [ 444.573691][T17895] ? join_session_keyring+0x340/0x340 [ 444.579092][T17895] ? lock_downgrade+0x6e0/0x6e0 [ 444.583988][T17895] ? key_validate+0x100/0x100 [ 444.588699][T17895] ? _copy_from_user+0x5d/0x180 [ 444.593566][T17895] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 444.599814][T17895] ? memdup_user+0x7c/0xd0 [ 444.604411][T17895] __do_sys_add_key+0x1d3/0x430 [ 444.609259][T17895] ? __do_sys_request_key+0x3b0/0x3b0 [ 444.614631][T17895] ? syscall_enter_from_user_mode+0x27/0x70 [ 444.620533][T17895] do_syscall_64+0x3a/0xb0 [ 444.624952][T17895] entry_SYSCALL_64_after_hwframe+0x44/0xae 19:48:36 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) 19:48:36 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, 0x0) [ 444.630848][T17895] RIP: 0033:0x4665f9 [ 444.634735][T17895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 444.654354][T17895] RSP: 002b:00007f7d7a905188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 444.662793][T17895] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 444.670846][T17895] RDX: 0000000000000000 RSI: 00000000200009c0 RDI: 0000000020000980 19:48:36 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) 19:48:36 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x10}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) [ 444.678819][T17895] RBP: 00007f7d7a9051d0 R08: fffffffffffffffe R09: 0000000000000000 [ 444.686888][T17895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.694855][T17895] R13: 0000000000a9fb1f R14: 00007f7d7a905300 R15: 0000000000022000 [ 444.746658][T17896] CPU: 1 PID: 17896 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 444.755131][T17896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.765212][T17896] Call Trace: [ 444.768512][T17896] dump_stack+0x141/0x1d7 [ 444.772882][T17896] should_fail.cold+0x5/0xa [ 444.777430][T17896] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 444.783795][T17896] should_failslab+0x5/0x10 [ 444.788334][T17896] kmem_cache_alloc_trace+0x55/0x290 [ 444.793661][T17896] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 444.799854][T17896] io_uring_setup+0x1dd6/0x2a80 [ 444.804750][T17896] ? __context_tracking_exit+0xb8/0xe0 [ 444.810239][T17896] ? io_connect+0x680/0x680 [ 444.814784][T17896] ? syscall_enter_from_user_mode+0x27/0x70 [ 444.820720][T17896] do_syscall_64+0x3a/0xb0 [ 444.825164][T17896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 444.831095][T17896] RIP: 0033:0x4665f9 19:48:36 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01, 0x0, 0x200}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:36 executing program 1: r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmat(r0, &(0x7f0000ffb000/0x2000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) [ 444.835008][T17896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 444.854649][T17896] RSP: 002b:00007fd903e58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 444.863099][T17896] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 444.871099][T17896] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 444.879100][T17896] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 444.887275][T17896] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 444.895275][T17896] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 [ 445.060529][T17896] ------------[ cut here ]------------ [ 445.070921][T17896] WARNING: CPU: 1 PID: 17896 at fs/io_uring.c:7081 io_rsrc_node_switch+0x2a5/0x390 [ 445.086664][T17896] Modules linked in: 19:48:37 executing program 4 (fault-call:1 fault-nth:5): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000980), &(0x7f00000009c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 19:48:37 executing program 0: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xc00000, 0x0, &(0x7f0000400000/0xc00000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0xee01, 0xee01}, 0x61, 0x3, 0x4, 0xfffffffffffffff8, 0x0, 0x0, 0x1ff}) 19:48:37 executing program 5: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7689, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 19:48:37 executing program 2: perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x8000}, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f0000ffc000/0x3000)=nil) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x3000) shmat(r0, &(0x7f0000ffa000/0x2000)=nil, 0x0) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) r1 = fsopen(&(0x7f0000000680)='jffs2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000006c0)='mand\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x0) [ 445.105003][T17896] CPU: 1 PID: 17896 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 445.130537][T17896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.154193][T17896] RIP: 0010:io_rsrc_node_switch+0x2a5/0x390 [ 445.168477][T17896] Code: ff 4d 85 e4 74 a4 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc 00 99 ff e8 f7 00 99 ff 0f 0b e9 ee fd ff ff e8 eb 00 99 ff <0f> 0b e9 9d fd ff ff 4c 89 f7 e8 7c e0 dc ff eb 8b 4c 89 ef e8 72 [ 445.271203][T17896] RSP: 0018:ffffc9000534fd90 EFLAGS: 00010246 [ 445.306142][T17896] RAX: 0000000000040000 RBX: ffff8880255f2000 RCX: ffffc900100d9000 [ 445.314136][T17919] FAULT_INJECTION: forcing a failure. [ 445.314136][T17919] name failslab, interval 1, probability 0, space 0, times 0 [ 445.334048][T17896] RDX: 0000000000040000 RSI: ffffffff81db5d25 RDI: ffff8880255f2000 [ 445.379343][T17896] RBP: 0000000000000000 R08: 0000000000000dc0 R09: ffffffff8c0b37d3 [ 445.393461][T17919] CPU: 0 PID: 17919 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 445.401959][T17919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.412046][T17919] Call Trace: [ 445.415348][T17919] dump_stack+0x141/0x1d7 [ 445.419718][T17919] should_fail.cold+0x5/0xa [ 445.424257][T17919] ? key_alloc+0x3d8/0x1210 [ 445.428807][T17919] ? key_alloc+0x3d8/0x1210 [ 445.433347][T17919] should_failslab+0x5/0x10 [ 445.437893][T17919] kmem_cache_alloc+0x5e/0x370 [ 445.442702][T17919] key_alloc+0x3d8/0x1210 [ 445.447104][T17919] ? key_user_lookup+0x560/0x560 [ 445.452070][T17919] ? rcu_read_lock_sched_held+0x3a/0x70 [ 445.457651][T17919] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 445.463926][T17919] ? apparmor_cred_prepare+0x171/0x370 [ 445.469747][T17919] keyring_alloc+0x42/0xb0 [ 445.474205][T17919] lookup_user_key+0xd18/0x11c0 [ 445.479105][T17919] ? join_session_keyring+0x340/0x340 [ 445.484521][T17919] ? lock_downgrade+0x6e0/0x6e0 [ 445.489868][T17919] ? key_validate+0x100/0x100 [ 445.494596][T17919] ? _copy_from_user+0x5d/0x180 [ 445.499497][T17919] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 445.505781][T17919] ? memdup_user+0x7c/0xd0 [ 445.510248][T17919] __do_sys_add_key+0x1d3/0x430 [ 445.515149][T17919] ? __do_sys_request_key+0x3b0/0x3b0 [ 445.520582][T17919] ? syscall_enter_from_user_mode+0x27/0x70 [ 445.526615][T17919] do_syscall_64+0x3a/0xb0 [ 445.531066][T17919] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 445.537019][T17919] RIP: 0033:0x4665f9 [ 445.540944][T17919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 445.560586][T17919] RSP: 002b:00007f7d7a905188 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 445.569041][T17919] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 445.577670][T17919] RDX: 0000000000000000 RSI: 00000000200009c0 RDI: 0000000020000980 [ 445.585678][T17919] RBP: 00007f7d7a9051d0 R08: fffffffffffffffe R09: 0000000000000000 [ 445.593684][T17919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.601696][T17919] R13: 0000000000a9fb1f R14: 00007f7d7a905300 R15: 0000000000022000 [ 445.641758][T17896] R10: fffffbfff18166fa R11: 0000000000000000 R12: 0000000000000000 [ 445.672552][T17896] R13: 0000000000000000 R14: ffff8880255f2808 R15: 0000000000000000 [ 445.681395][T17896] FS: 00007fd903e58700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 445.690598][T17896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 445.697646][T17896] CR2: 00007f6519c6a000 CR3: 0000000025335000 CR4: 00000000001506f0 [ 445.705857][T17896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 445.713880][T17896] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 445.743052][T17896] Call Trace: [ 445.747968][T17896] ? __kasan_kmalloc+0xad/0xc0 [ 445.752786][T17896] io_uring_setup+0xf75/0x2a80 [ 445.760742][T17896] ? __context_tracking_exit+0xb8/0xe0 [ 445.767092][T17896] ? io_connect+0x680/0x680 [ 445.771652][T17896] ? syscall_enter_from_user_mode+0x27/0x70 [ 445.778635][T17896] do_syscall_64+0x3a/0xb0 [ 445.783095][T17896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 445.790249][T17896] RIP: 0033:0x4665f9 [ 445.794175][T17896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 445.816449][T17896] RSP: 002b:00007fd903e58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 445.825564][T17896] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 445.845385][T17896] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 445.853411][T17896] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 445.865469][T17896] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 445.873716][T17896] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 [ 445.885276][T17896] Kernel panic - not syncing: panic_on_warn set ... [ 445.891896][T17896] CPU: 0 PID: 17896 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 445.900326][T17896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.910413][T17896] Call Trace: [ 445.913715][T17896] dump_stack+0x141/0x1d7 [ 445.918112][T17896] panic+0x306/0x73d [ 445.922082][T17896] ? __warn_printk+0xf3/0xf3 [ 445.926712][T17896] ? __warn.cold+0x1a/0x44 [ 445.931163][T17896] ? io_rsrc_node_switch+0x2a5/0x390 [ 445.936487][T17896] __warn.cold+0x35/0x44 [ 445.940760][T17896] ? io_rsrc_node_switch+0x2a5/0x390 [ 445.946090][T17896] report_bug+0x1bd/0x210 [ 445.950466][T17896] handle_bug+0x3c/0x60 [ 445.954739][T17896] exc_invalid_op+0x14/0x40 [ 445.959280][T17896] asm_exc_invalid_op+0x12/0x20 [ 445.964283][T17896] RIP: 0010:io_rsrc_node_switch+0x2a5/0x390 [ 445.970210][T17896] Code: ff 4d 85 e4 74 a4 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc 00 99 ff e8 f7 00 99 ff 0f 0b e9 ee fd ff ff e8 eb 00 99 ff <0f> 0b e9 9d fd ff ff 4c 89 f7 e8 7c e0 dc ff eb 8b 4c 89 ef e8 72 [ 445.989847][T17896] RSP: 0018:ffffc9000534fd90 EFLAGS: 00010246 [ 445.996030][T17896] RAX: 0000000000040000 RBX: ffff8880255f2000 RCX: ffffc900100d9000 [ 446.004032][T17896] RDX: 0000000000040000 RSI: ffffffff81db5d25 RDI: ffff8880255f2000 [ 446.016720][T17896] RBP: 0000000000000000 R08: 0000000000000dc0 R09: ffffffff8c0b37d3 [ 446.025502][T17896] R10: fffffbfff18166fa R11: 0000000000000000 R12: 0000000000000000 [ 446.033593][T17896] R13: 0000000000000000 R14: ffff8880255f2808 R15: 0000000000000000 [ 446.041606][T17896] ? io_rsrc_node_switch+0x2a5/0x390 [ 446.046931][T17896] ? __kasan_kmalloc+0xad/0xc0 [ 446.051848][T17896] io_uring_setup+0xf75/0x2a80 [ 446.056633][T17896] ? __context_tracking_exit+0xb8/0xe0 [ 446.062186][T17896] ? io_connect+0x680/0x680 [ 446.066736][T17896] ? syscall_enter_from_user_mode+0x27/0x70 [ 446.072634][T17896] do_syscall_64+0x3a/0xb0 [ 446.077046][T17896] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 446.083032][T17896] RIP: 0033:0x4665f9 [ 446.086933][T17896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 446.106557][T17896] RSP: 002b:00007fd903e58108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 446.115063][T17896] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 446.123044][T17896] RDX: 0000000020ffd000 RSI: 0000000020000000 RDI: 0000000000007689 [ 446.131012][T17896] RBP: 0000000020000000 R08: 00000000200000c0 R09: 00000000200000c0 [ 446.138976][T17896] R10: 0000000020000080 R11: 0000000000000202 R12: 00000000200000c0 [ 446.147564][T17896] R13: 0000000020ffd000 R14: 0000000020000080 R15: 0000000020ffd000 [ 446.156746][T17896] Kernel Offset: disabled [ 446.161080][T17896] Rebooting in 86400 seconds..