BVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000100)=0x7f) 10:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x1, 0x5, 0xc, 0x6, 0xffffffffffffff7f, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x8e, &(0x7f0000000080)=""/142, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000100)=0x7f) 10:55:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000100)=0x7f) 10:55:57 executing program 0: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) 10:55:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) 10:55:57 executing program 1: r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f0000000040)) 10:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x8e, &(0x7f0000000080)=""/142, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:57 executing program 0: socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) 10:55:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) pidfd_getfd(0xffffffffffffffff, r2, 0x0) 10:55:57 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x7) pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) 10:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x81, 0x8e, &(0x7f0000000080)=""/142, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:57 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) 10:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) r7 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000100)=0x7f) 10:55:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) 10:55:57 executing program 0: socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) 10:55:57 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) 10:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x81, 0x8e, &(0x7f0000000080)=""/142, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:57 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x7) pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) 10:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) pidfd_getfd(0xffffffffffffffff, r2, 0x0) 10:55:57 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) 10:55:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) 10:55:57 executing program 0: socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, 0x0) 10:55:57 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x7) pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x40, 0x0) 10:55:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) 10:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) 10:55:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 10:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x81, 0x8e, &(0x7f0000000080)=""/142, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) pidfd_getfd(0xffffffffffffffff, r2, 0x0) 10:55:57 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x7) pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) 10:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x8e, &(0x7f0000000080)=""/142, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 10:55:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) 10:55:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) pidfd_getfd(0xffffffffffffffff, r2, 0x0) 10:55:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 10:55:57 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000100)=0x7) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) 10:55:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) pidfd_getfd(0xffffffffffffffff, r2, 0x0) 10:55:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) 10:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x8e, &(0x7f0000000080)=""/142, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 10:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) 10:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x8e, &(0x7f0000000080)=""/142, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:57 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) pidfd_getfd(r1, r2, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) 10:55:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 10:55:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000400)=""/236) 10:55:57 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) 10:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:55:57 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:57 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) 10:55:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) 10:55:57 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) pidfd_getfd(r1, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) 10:55:57 executing program 2: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000680)) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) 10:55:58 executing program 2: ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) 10:55:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) 10:55:58 executing program 2: ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) 10:55:58 executing program 2: ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:55:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) ioctl$SG_SET_KEEP_ORPHAN(r1, 0x2287, &(0x7f0000000040)=0x16f6) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) 10:55:58 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, 0xffffffffffffffff, 0x8) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, 0xffffffffffffffff, 0x8) 10:55:58 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, 0xffffffffffffffff, 0x8) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r4, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:55:58 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, 0x0) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r4, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) 10:55:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r5, 0x8018456f, 0x0) accept4$inet6(r5, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r3, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:55:58 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r3, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x7) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r3, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 10:55:58 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x81, 0x8e, &(0x7f0000000080)=""/142, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x6, 0x58b6, 0xffffffff}, 0x10}, 0x78) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) 10:55:58 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000140)=0x7) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f0000000280)=0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, 0x0}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, r0, 0x10, r1, 0x8) 10:55:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x450900, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:58 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r1, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) 10:55:58 executing program 2: ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 10:55:58 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:58 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) 10:55:58 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:58 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:55:58 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:58 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) 10:55:58 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000300)={"1d16d8e69994b119e62bb87ec738544b", 0x0, r2, {0xa9ef, 0xffffffe8}, {0x800, 0x5}, 0x7, [0x400, 0x5, 0xd88f, 0xffff, 0x2, 0x40800, 0xffffffffffff8b23, 0x1, 0x5, 0x6aa8, 0x2, 0x4, 0x7ffe, 0x0, 0x101, 0x1]}) 10:55:58 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:58 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:58 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:58 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000180), 0x40000) 10:55:58 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000200)={"1b24e0d8c8396ad693422be975bb250c", 0x0, 0x0, {0x7, 0x8}, {0x8, 0x9}, 0x1800000000000000, [0xff, 0x0, 0x1, 0x2, 0xce, 0x80, 0x800, 0x3, 0x5, 0x80000000, 0x5e777ac5, 0x800, 0x7fff, 0xc87b, 0x9, 0x8]}) 10:55:59 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) 10:55:59 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000180), 0x40000) 10:55:59 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 10:55:59 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:59 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x5a55c0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 4: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) 10:55:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000180), 0x40000) 10:55:59 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 10:55:59 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x50000) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) 10:55:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000180), 0x40000) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:59 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 10:55:59 executing program 4: syz_open_dev$evdev(0x0, 0x28, 0x41c482) 10:55:59 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x28, 0x41c482) 10:55:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000180), 0x40000) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:59 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) 10:55:59 executing program 0: syz_open_dev$evdev(0x0, 0x28, 0x41c482) 10:55:59 executing program 4: syz_open_dev$evdev(0x0, 0x28, 0x41c482) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 0: syz_open_dev$evdev(0x0, 0x28, 0x41c482) 10:55:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000180), 0x40000) 10:55:59 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:59 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) 10:55:59 executing program 4: syz_open_dev$evdev(0x0, 0x28, 0x41c482) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xff, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:59 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x40000) 10:55:59 executing program 0: syz_open_dev$evdev(0x0, 0x28, 0x41c482) 10:55:59 executing program 2: syz_open_dev$sg(0x0, 0x0, 0xa03) 10:55:59 executing program 4: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x41c482) 10:55:59 executing program 3: r0 = syz_open_dev$sg(0x0, 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x20, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x41c482) 10:55:59 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x40000) 10:55:59 executing program 2: syz_open_dev$sg(0x0, 0x0, 0xa03) 10:55:59 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x40000) 10:55:59 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 10:55:59 executing program 4: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 10:55:59 executing program 2: syz_open_dev$sg(0x0, 0x0, 0xa03) 10:55:59 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 10:55:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x40000) 10:55:59 executing program 4: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 10:55:59 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 10:55:59 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 10:55:59 executing program 4: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:55:59 executing program 0: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) 10:55:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 10:55:59 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 10:55:59 executing program 0: syz_open_dev$sg(0x0, 0x0, 0xa03) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381) 10:55:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 10:55:59 executing program 2: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:55:59 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 10:55:59 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 10:55:59 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) 10:55:59 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) 10:55:59 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 10:55:59 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:55:59 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) 10:55:59 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x3000000000000000, 0x2042) 10:56:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001b40)={"04c300dfda1e4884d5bd552e994b5d12", 0x0, 0x0, {0x400, 0xfffffeff}, {0xa331, 0xffff}, 0x8, [0x1, 0xd9, 0x20, 0x7fff, 0x3, 0x0, 0x6, 0x1, 0x6, 0xfffffffffffffffd, 0x3f, 0x6, 0x1, 0x20, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", r1, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) 10:56:00 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:56:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001b40)={"04c300dfda1e4884d5bd552e994b5d12", 0x0, 0x0, {0x400, 0xfffffeff}, {0xa331, 0xffff}, 0x8, [0x1, 0xd9, 0x20, 0x7fff, 0x3, 0x0, 0x6, 0x1, 0x6, 0xfffffffffffffffd, 0x3f, 0x6, 0x1, 0x20, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", r1, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001b40)={"04c300dfda1e4884d5bd552e994b5d12", 0x0, 0x0, {0x400, 0xfffffeff}, {0xa331, 0xffff}, 0x8, [0x1, 0xd9, 0x20, 0x7fff, 0x3, 0x0, 0x6, 0x1, 0x6, 0xfffffffffffffffd, 0x3f, 0x6, 0x1, 0x20, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", r1, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, 0xffffffffffffffff, 0x8) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xa03) 10:56:00 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:56:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001b40)={"04c300dfda1e4884d5bd552e994b5d12", 0x0, 0x0, {0x400, 0xfffffeff}, {0xa331, 0xffff}, 0x8, [0x1, 0xd9, 0x20, 0x7fff, 0x3, 0x0, 0x6, 0x1, 0x6, 0xfffffffffffffffd, 0x3f, 0x6, 0x1, 0x20, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", r1, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001b40)={"04c300dfda1e4884d5bd552e994b5d12", 0x0, 0x0, {0x400, 0xfffffeff}, {0xa331, 0xffff}, 0x8, [0x1, 0xd9, 0x20, 0x7fff, 0x3, 0x0, 0x6, 0x1, 0x6, 0xfffffffffffffffd, 0x3f, 0x6, 0x1, 0x20, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", r1, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, 0xffffffffffffffff, 0x8) 10:56:00 executing program 3: syz_open_dev$sg(0x0, 0x0, 0xa03) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 4: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:56:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001b40)={"04c300dfda1e4884d5bd552e994b5d12", 0x0, 0x0, {0x400, 0xfffffeff}, {0xa331, 0xffff}, 0x8, [0x1, 0xd9, 0x20, 0x7fff, 0x3, 0x0, 0x6, 0x1, 0x6, 0xfffffffffffffffd, 0x3f, 0x6, 0x1, 0x20, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", r1, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001b40)={"04c300dfda1e4884d5bd552e994b5d12", 0x0, 0x0, {0x400, 0xfffffeff}, {0xa331, 0xffff}, 0x8, [0x1, 0xd9, 0x20, 0x7fff, 0x3, 0x0, 0x6, 0x1, 0x6, 0xfffffffffffffffd, 0x3f, 0x6, 0x1, 0x20, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", r1, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:00 executing program 3: syz_open_dev$sg(0x0, 0x0, 0xa03) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, 0xffffffffffffffff, 0x8) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 10:56:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:00 executing program 3: syz_open_dev$sg(0x0, 0x0, 0xa03) 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001b40)={"04c300dfda1e4884d5bd552e994b5d12", 0x0, 0x0, {0x400, 0xfffffeff}, {0xa331, 0xffff}, 0x8, [0x1, 0xd9, 0x20, 0x7fff, 0x3, 0x0, 0x6, 0x1, 0x6, 0xfffffffffffffffd, 0x3f, 0x6, 0x1, 0x20, 0x80000000, 0x8]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", r1, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 10:56:00 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:00 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001b40)={"04c300dfda1e4884d5bd552e994b5d12", 0x0, 0x0, {0x400, 0xfffffeff}, {0xa331, 0xffff}, 0x8, [0x1, 0xd9, 0x20, 0x7fff, 0x3, 0x0, 0x6, 0x1, 0x6, 0xfffffffffffffffd, 0x3f, 0x6, 0x1, 0x20, 0x80000000, 0x8]}) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$inet6(r0, 0x0, 0x0, 0x0) 10:56:00 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:00 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:56:00 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:00 executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:00 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:56:00 executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) 10:56:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 3: syz_open_dev$sg(0x0, 0x0, 0xa03) 10:56:00 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 5: socket$inet6_sctp(0xa, 0x0, 0x84) 10:56:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:00 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r5 = socket$isdn(0x22, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') 10:56:00 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r5 = socket$isdn(0x22, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r5 = socket$isdn(0x22, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') 10:56:00 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r5 = socket$isdn(0x22, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') 10:56:00 executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:00 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x7, 0x2042) 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 5: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x3, 0x8000}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$inet6(0xa, 0x2, 0x2) 10:56:00 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:00 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r5 = socket$isdn(0x22, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') 10:56:00 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r5 = socket$isdn(0x22, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') 10:56:00 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:01 executing program 5: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x3, 0x8000}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$inet6(0xa, 0x2, 0x2) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r5 = socket$isdn(0x22, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) r5 = socket$isdn(0x22, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 5: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x3, 0x8000}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$inet6(0xa, 0x2, 0x2) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 5: ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000000)={0x3, 0x8000}) socket$inet6(0xa, 0x2, 0x2) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 5: socket$inet6(0xa, 0x2, 0x2) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7fff, 0x1a1c4c2e, 0x7, 0x9, 0x7, 0x80000001}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 5: socket$inet6(0xa, 0x0, 0x2) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r4 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 5: socket$inet6(0xa, 0x0, 0x2) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x0, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) pidfd_getfd(r1, r1, 0x0) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 5: socket$inet6(0xa, 0x0, 0x2) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {0x0, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) pidfd_getfd(r1, r1, 0x0) r2 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:01 executing program 5: socket$inet6(0xa, 0x2, 0x0) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 4: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 5: socket$inet6(0xa, 0x2, 0x0) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 4: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad]}) 10:56:01 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) r1 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:01 executing program 5: socket$inet6(0xa, 0x2, 0x0) 10:56:01 executing program 4: socket$isdn(0x22, 0x3, 0x4) 10:56:01 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, r0, 0x8) 10:56:01 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5]}) 10:56:01 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x8) 10:56:02 executing program 4: socket$isdn(0x22, 0x3, 0x0) 10:56:02 executing program 5: socket$inet6(0xa, 0x2, 0x0) 10:56:02 executing program 3: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff]}) 10:56:02 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 10:56:02 executing program 5: socket$inet6(0xa, 0x2, 0x0) 10:56:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 4: socket$isdn(0x22, 0x3, 0x0) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 10:56:02 executing program 4: socket$isdn(0x22, 0x3, 0x0) 10:56:02 executing program 5: socket$inet6(0xa, 0x2, 0x0) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4]}) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 4: socket$isdn(0x22, 0x3, 0x0) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7]}) 10:56:02 executing program 5: socket$inet6(0xa, 0x0, 0x0) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 4: socket$inet6(0xa, 0x2, 0x2) 10:56:02 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200]}) 10:56:02 executing program 5: socket$inet6(0xa, 0x0, 0x0) 10:56:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) 10:56:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69]}) 10:56:02 executing program 5: socket$inet6(0xa, 0x0, 0x0) 10:56:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8]}) 10:56:02 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x9cf, 0x3f}, 0x2200, 0x0, 0x7fff, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 5: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {0x74a9, 0x401}, {0xdc22, 0x2}, 0x4d9d, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6, 0x8, 0xf69, 0x200, 0x7, 0x0, 0x4, 0xfff, 0x5, 0x3bad, 0x4]}) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:02 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x1200000000000000, 0x2042) 10:56:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x400010001, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x200) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 10:56:02 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000]}) 10:56:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400800, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0xffffffc0) 10:56:02 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69]}) 10:56:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:02 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd348}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9]}) 10:56:02 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:02 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400800, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0xffffffc0) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x10, r0, 0x8) 10:56:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:02 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81]}) 10:56:02 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) [ 306.488986][ T7122] binder: 7118:7122 ioctl c0306201 0 returned -14 10:56:02 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:02 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:02 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x8) 10:56:02 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f]}) 10:56:02 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400800, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0xffffffc0) [ 306.559473][ T7130] binder: 7125:7130 ioctl c0306201 0 returned -14 10:56:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 1: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:03 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595"}) 10:56:03 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 10:56:03 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400800, 0x0) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 306.672609][ T7145] binder: 7142:7145 ioctl c0306201 0 returned -14 10:56:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 10:56:03 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 10:56:03 executing program 4: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) [ 306.791752][ T7164] binder: 7160:7164 ioctl c0306201 0 returned -14 10:56:03 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 10:56:03 executing program 4: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 0: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) [ 306.868469][ T7176] binder: 7174:7176 ioctl c0306201 0 returned -14 10:56:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 4: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:03 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) [ 306.983394][ T7193] binder: 7191:7193 ioctl c0306201 0 returned -14 10:56:03 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:03 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 307.033389][ T7204] binder: 7199:7204 ioctl c0306201 0 returned -14 10:56:03 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 10:56:03 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:03 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 307.119242][ T7215] binder: 7213:7215 ioctl c0306201 0 returned -14 10:56:03 executing program 1: socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000, 0x6]}) 10:56:03 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 307.211846][ T7227] binder: 7224:7227 ioctl c0306201 0 returned -14 [ 307.215826][ T7229] binder: 7226:7229 ioctl c0306201 0 returned -14 10:56:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 10:56:03 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 307.312607][ T7242] binder: 7238:7242 ioctl c0306201 0 returned -14 10:56:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:56:03 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 10:56:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:56:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x80000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 307.435373][ T7261] binder: 7259:7261 ioctl c0306201 0 returned -14 10:56:03 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:03 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:03 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x80000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69, 0x10000]}) 10:56:03 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x80000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) [ 307.547137][ T7274] binder: 7272:7274 ioctl c0306201 0 returned -14 10:56:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:03 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9, 0x69]}) 10:56:04 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:04 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x80000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 10:56:04 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81, 0x9]}) 10:56:04 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 10:56:04 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:04 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 2: r0 = syz_open_dev$sg(0x0, 0x0, 0x80000) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 10:56:04 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f, 0x81]}) 10:56:04 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 10:56:04 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) 10:56:04 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595", 0x0, 0x0, {}, {}, 0x0, [0x281f]}) 10:56:04 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 10:56:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"c1c5637b4555ba405bece12b34d8d595"}) 10:56:04 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:04 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10:56:04 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:04 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:05 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:05 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:05 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:05 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 308.849590][ T7473] binder: 7471:7473 ioctl c0306201 0 returned -14 10:56:05 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:05 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 308.925831][ T7482] binder: 7481:7482 ioctl c0306201 0 returned -14 [ 308.947085][ T7486] binder: 7483:7486 ioctl c0306201 0 returned -14 10:56:05 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:05 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 309.022255][ T7494] binder: 7493:7494 ioctl c0306201 0 returned -14 [ 309.056650][ T7501] binder: 7498:7501 ioctl c0306201 0 returned -14 10:56:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 309.091322][ T7507] binder: 7505:7507 ioctl c0306201 0 returned -14 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x0, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 309.141489][ T7510] binder: 7506:7510 ioctl c0306201 0 returned -14 [ 309.177294][ T7517] binder: 7511:7517 ioctl c0306201 0 returned -14 10:56:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 309.324775][ T7540] binder: 7535:7540 ioctl c0306201 0 returned -14 10:56:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:05 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3b"}) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3b"}) 10:56:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xa5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3b"}) 10:56:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc0, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d"}) [ 309.596513][ T7579] binder: 7578:7579 ioctl c0306201 0 returned -14 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc0, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) [ 309.681738][ T7589] binder: 7588:7589 ioctl c0306201 0 returned -14 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc0, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 309.781923][ T7606] binder: 7601:7606 ioctl c0306201 0 returned -14 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xce, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xce, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="f0"}) 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xce, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xd5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xd5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xd5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xd8, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xd8, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xd8, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4"}) 10:56:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:06 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xda, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc47"}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xda, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc47"}) 10:56:07 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xda, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc47"}) 10:56:07 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:07 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xa5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3b"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xa5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3b"}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, 0x0}) 10:56:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, 0x0}) 10:56:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xa5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3b"}) 10:56:07 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xc0, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d"}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, 0x0}) 10:56:07 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xc0, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d"}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000280)="f0"}) 10:56:07 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:07 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xc0, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d"}) 10:56:07 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000280)="f0"}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xce, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50"}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xce, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50"}) 10:56:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:07 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x1, 0x0, &(0x7f0000000280)="f0"}) 10:56:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:07 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xce, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50"}) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xd5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94"}) [ 311.662105][ T7877] binder: 7870:7877 ioctl c0306201 0 returned -14 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xd5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94"}) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) [ 311.758344][ T7892] binder: 7889:7892 ioctl c0306201 0 returned -14 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:08 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xd5, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94"}) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xd8, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4"}) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xd8, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4"}) 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 311.887803][ T7908] binder: 7906:7908 ioctl c0306201 0 returned -14 [ 311.904649][ T7910] binder: 7907:7910 ioctl c0306201 0 returned -14 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xce, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50"}) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 311.965154][ T7919] binder: 7917:7919 ioctl c0306201 0 returned -14 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xd8, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4"}) 10:56:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xc0, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d"}) [ 312.020422][ T7930] binder: 7924:7930 ioctl c0306201 0 returned -14 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xd8, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4"}) 10:56:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 312.121655][ T7942] binder: 7940:7942 ioctl c0306201 0 returned -14 [ 312.155369][ T7945] binder: 7944:7945 ioctl c0306201 0 returned -14 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xda, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc47"}) 10:56:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) [ 312.252465][ T7955] binder: 7953:7955 ioctl c0306201 0 returned -14 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xda, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc47"}) 10:56:08 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:08 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xda, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc47"}) 10:56:08 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x58, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:08 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 1: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:09 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:09 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) [ 313.002762][ T8076] binder: 8072:8076 ioctl c0306201 0 returned -14 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:09 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) [ 313.130933][ T8094] binder: 8091:8094 ioctl c0306201 0 returned -14 10:56:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:09 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:09 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 313.236665][ T8111] binder: 8105:8111 ioctl c0306201 0 returned -14 [ 313.243897][ T8113] binder: 8108:8113 ioctl c0306201 0 returned -14 10:56:09 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000280)}) [ 313.323510][ T8127] binder: 8122:8127 ioctl c0306201 0 returned -14 10:56:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 313.370656][ T8134] binder: 8132:8134 ioctl c0306201 0 returned -14 10:56:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 313.440670][ T8146] binder: 8145:8146 ioctl c0306201 0 returned -14 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000280)="f0"}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x6e, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9"}) 10:56:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:09 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 313.488429][ T8151] binder: 8148:8151 ioctl c0306201 0 returned -14 [ 313.507702][ T8154] binder: 8153:8154 ioctl c0306201 0 returned -14 10:56:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x1, 0x0, &(0x7f0000000280)="f0"}) 10:56:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:09 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000280)}) 10:56:10 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000280)}) 10:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000200)=[@increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f0000000280)}) 10:56:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000280)}) 10:56:10 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 4: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 4: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000280)}) 10:56:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done, @decrefs, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000280)}) 10:56:10 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 4: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) 10:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, &(0x7f0000000280)}) 10:56:10 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:10 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) 10:56:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:10 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 314.096412][ T8236] binder: 8234:8236 ioctl c0306201 0 returned -14 [ 314.114646][ T8243] binder: 8240:8243 ioctl c0306201 0 returned -14 [ 314.130824][ T8246] binder: 8241:8246 ioctl c0306201 0 returned -14 10:56:10 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}}], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 5: syz_open_dev$binderN(0x0, 0x0, 0x800) 10:56:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 314.207276][ T8257] binder: 8251:8257 ioctl c0306201 0 returned -14 10:56:10 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 5: syz_open_dev$binderN(0x0, 0x0, 0x800) 10:56:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:10 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) [ 314.291364][ T8267] binder: 8264:8267 ioctl c0306201 0 returned -14 10:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 5: syz_open_dev$binderN(0x0, 0x0, 0x800) 10:56:10 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:10 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) [ 314.361238][ T8276] binder: 8271:8276 ioctl c0306201 0 returned -14 10:56:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() setreuid(0x0, r2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x4000) 10:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 0: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:10 executing program 5: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) 10:56:10 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:10 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() setreuid(0x0, r2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x4000) 10:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:10 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() setreuid(0x0, r2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x4000) 10:56:10 executing program 2: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:10 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() setreuid(0x0, r2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x4000) 10:56:10 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() setreuid(0x0, r2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x4000) 10:56:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:11 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 314.600304][ T8311] binder: 8303:8311 ioctl c0306201 0 returned -14 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = geteuid() setreuid(0x0, r1) 10:56:11 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 314.666173][ T8320] binder: 8315:8320 ioctl c0306201 0 returned -14 10:56:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() setreuid(0x0, r2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x4000) 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:11 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) [ 314.725866][ T8327] binder: 8324:8327 ioctl c0306201 0 returned -14 10:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = geteuid() setreuid(0x0, r1) [ 314.788163][ T8335] binder: 8330:8335 ioctl c0306201 0 returned -14 [ 314.801059][ T8339] binder: 8336:8339 ioctl c0306201 0 returned -14 10:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:11 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) setreuid(0x0, 0x0) 10:56:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() 10:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 314.907209][ T8351] binder: 8349:8351 ioctl c0306201 0 returned -14 10:56:11 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) setreuid(0x0, 0x0) 10:56:11 executing program 3: syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 10:56:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) geteuid() 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 1: setreuid(0x0, 0x0) 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) geteuid() 10:56:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() 10:56:11 executing program 5: geteuid() 10:56:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 315.144405][ T8386] binder: 8384:8386 ioctl c0306201 0 returned -14 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 10:56:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() setreuid(0x0, r2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x4000) 10:56:11 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='fsi_master_aspeed_opb_error\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) [ 315.219183][ T8395] binder: 8393:8395 ioctl c0306201 0 returned -14 [ 315.247988][ T8401] binder: 8399:8401 ioctl c0306201 0 returned -14 10:56:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() 10:56:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() setreuid(0x0, r2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x4000) 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0x0, 0x0, 0x0}) 10:56:11 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='fsi_master_aspeed_opb_error\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) 10:56:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = geteuid() setreuid(0x0, r2) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000000)=0x4000) [ 315.366210][ T8418] binder: 8413:8418 ioctl c0306201 0 returned -14 10:56:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:11 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:11 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='fsi_master_aspeed_opb_error\x00', r1}, 0x10) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) 10:56:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = geteuid() setreuid(0x0, r1) 10:56:11 executing program 1: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:11 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='fsi_master_aspeed_opb_error\x00', r1}, 0x10) [ 315.499190][ T8457] binder: 8440:8457 ioctl c0306201 0 returned -14 10:56:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 10:56:11 executing program 1: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:56:11 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) geteuid() 10:56:11 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:11 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 1: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:56:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x1c, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done, @decrefs], 0x0, 0x0, 0x0}) 10:56:12 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='fsi_master_aspeed_opb_error\x00', r1}, 0x10) 10:56:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:56:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xc, 0x0, &(0x7f0000000200)=[@dead_binder_done], 0xdb, 0x0, &(0x7f0000000280)="f03e090ec8561328fb3658d2e7c6db82d3aadc6bfe3d699d62ed0b0f2059a2713ab84c149a3011bef799c796fa4ec97ab0af088c5b7d79f48403fac17b8e928f3d82f1ed764b0ef8cdf48f7bb004b9a068f77cbf440e406ca001180fe2b5af7fc35258a841c017c87dda491bbfd9884a6f8f6b81fa2778e628d578cb32c9d20b46e9e49a3c2a2c16a90c9c7e4f1aca536c19ef753a5f103f7646ea002d4dab91ea99981c3bedc92bb5706aaefd20761e3c0ce8cf00782dd3d685ae63a87cfe7d8993c55d123da891b40da2970d50fb0e2750721d94b515f4cc4783"}) 10:56:12 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 1: openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:56:12 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='fsi_master_aspeed_opb_error\x00', r1}, 0x10) 10:56:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 10:56:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000200)=[@increfs, @dead_binder_done], 0x0, 0x0, 0x0}) 10:56:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) 10:56:12 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='fsi_master_aspeed_opb_error\x00', r1}, 0x10) 10:56:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = geteuid() setreuid(0x0, r1) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:12 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x3}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:12 executing program 5: ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 10:56:12 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)=0x1) 10:56:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:12 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffffffffffff, 0x10800) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) 10:56:12 executing program 5: ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 10:56:12 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffffffffffff, 0x10800) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) 10:56:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) 10:56:12 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)=0x1) 10:56:12 executing program 5: ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:12 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffffffffffff, 0x10800) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000000)) 10:56:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) 10:56:12 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000080)=0x1) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 10:56:12 executing program 2: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffffffffffff, 0x10800) 10:56:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 10:56:12 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 2: syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x10800) 10:56:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 10:56:12 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 1: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) 10:56:12 executing program 2: syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x10800) 10:56:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:12 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 10:56:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 2: syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x10800) 10:56:12 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x8000}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 2: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x10800) 10:56:12 executing program 5: openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 10:56:12 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 10:56:12 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 2: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x10800) 10:56:12 executing program 5: syz_open_dev$sg(0x0, 0xffffffffffffffff, 0x10800) 10:56:12 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:12 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 10:56:12 executing program 2: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x10800) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"c48da2661bf0cb9c1c9be36ed6771d15", 0x0, 0x0, {0x400, 0xffffffff}, {0x38, 0x5}, 0x80, [0x7ff, 0xffff, 0x6, 0x4, 0x9, 0x7, 0x5, 0xffffffff, 0x2d, 0x8, 0x80000001, 0x6, 0x9, 0x0, 0x1, 0xfdf]}) pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r2, r0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400002, 0x0) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000040)) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)=0xf5) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 2: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xffffffffffffffff, 0x0) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"c48da2661bf0cb9c1c9be36ed6771d15", 0x0, 0x0, {0x400, 0xffffffff}, {0x38, 0x5}, 0x80, [0x7ff, 0xffff, 0x6, 0x4, 0x9, 0x7, 0x5, 0xffffffff, 0x2d, 0x8, 0x80000001, 0x6, 0x9, 0x0, 0x1, 0xfdf]}) pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r2, r0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400002, 0x0) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000040)) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)=0xf5) 10:56:13 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"c48da2661bf0cb9c1c9be36ed6771d15", 0x0, 0x0, {0x400, 0xffffffff}, {0x38, 0x5}, 0x80, [0x7ff, 0xffff, 0x6, 0x4, 0x9, 0x7, 0x5, 0xffffffff, 0x2d, 0x8, 0x80000001, 0x6, 0x9, 0x0, 0x1, 0xfdf]}) pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r2, r0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400002, 0x0) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000040)) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)=0xf5) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"c48da2661bf0cb9c1c9be36ed6771d15", 0x0, 0x0, {0x400, 0xffffffff}, {0x38, 0x5}, 0x80, [0x7ff, 0xffff, 0x6, 0x4, 0x9, 0x7, 0x5, 0xffffffff, 0x2d, 0x8, 0x80000001, 0x6, 0x9, 0x0, 0x1, 0xfdf]}) pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r2, r0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400002, 0x0) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000040)) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:13 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2, 0x440a00) r2 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x10200) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x3, 0x2042) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"c48da2661bf0cb9c1c9be36ed6771d15", 0x0, 0x0, {0x400, 0xffffffff}, {0x38, 0x5}, 0x80, [0x7ff, 0xffff, 0x6, 0x4, 0x9, 0x7, 0x5, 0xffffffff, 0x2d, 0x8, 0x80000001, 0x6, 0x9, 0x0, 0x1, 0xfdf]}) pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r2, r0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400002, 0x0) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2, 0x440a00) r2 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x10200) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x3, 0x2042) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"c48da2661bf0cb9c1c9be36ed6771d15", 0x0, 0x0, {0x400, 0xffffffff}, {0x38, 0x5}, 0x80, [0x7ff, 0xffff, 0x6, 0x4, 0x9, 0x7, 0x5, 0xffffffff, 0x2d, 0x8, 0x80000001, 0x6, 0x9, 0x0, 0x1, 0xfdf]}) pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r2, r0, 0x0) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2, 0x440a00) r2 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x10200) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x3, 0x2042) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000000c0)={"c48da2661bf0cb9c1c9be36ed6771d15", 0x0, 0x0, {0x400, 0xffffffff}, {0x38, 0x5}, 0x80, [0x7ff, 0xffff, 0x6, 0x4, 0x9, 0x7, 0x5, 0xffffffff, 0x2d, 0x8, 0x80000001, 0x6, 0x9, 0x0, 0x1, 0xfdf]}) pidfd_getfd(r2, r0, 0x0) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2, 0x440a00) r2 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x10200) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) pidfd_getfd(r2, r0, 0x0) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2, 0x440a00) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x10200) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) pidfd_getfd(r2, r0, 0x0) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2, 0x440a00) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) pidfd_getfd(r2, r0, 0x0) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:13 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 10:56:13 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:13 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:13 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) 10:56:13 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) pidfd_getfd(r1, r0, 0x0) 10:56:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0xa, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) pidfd_getfd(r1, r0, 0x0) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) 10:56:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 10:56:14 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x24a200, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x24a200, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x24a200, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:56:14 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 10:56:14 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:56:14 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:56:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) pidfd_getfd(r0, 0xffffffffffffffff, 0x0) 10:56:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:14 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:56:14 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:56:14 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:14 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:14 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10:56:14 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x24a200, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) pidfd_getfd(r2, r0, 0x0) 10:56:15 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2, 0x440a00) r2 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x10200) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) 10:56:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:56:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_congestion_control\x00', 0x1, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x2, 0x440a00) r2 = syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x0, 0x10200) ioctl$SCSI_IOCTL_DOORLOCK(r2, 0x5380) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000080)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000000)=0x1) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xff, 0x18b802) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0) 10:56:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r6, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x7, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}]}) 10:56:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x46101, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"1c6549977c12bf027a5f368d48dd5a9d", 0x0, 0x0, {0x4, 0x3}, {0x1, 0x81}, 0x0, [0x4, 0x577, 0x9, 0x5, 0x3, 0x100, 0x4, 0x4, 0x0, 0x0, 0xffffffffffff0f58, 0x27, 0x2, 0x5, 0x4, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000140)=r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0xbe, 0x0, &(0x7f0000000200)="ca4adef181410f49f59f67658c4aca6179f710da42e59e6871cdf524721457f80f1c820a5f681a70f0ff44dd18d6169c1106fdee71c54afb0c54c48fa8695c34ae143514f8bf58865c3fad3118cd073a690db67fdab715d728652b6951387056cb0a4e5fb58fd3de12fd5bb0938d2ec5dbb4b6d15c1a2c6a8a31f9ec2c6b33b423ab8c96bfd29b381b6f3f2c7cc90b04ea56c65f493349a00deab52b6a617820331160b902b6be432439f6f01ea6020700d9fbed560945d02cf608d2be09"}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x84000, 0x0) 10:56:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}]}) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {r6, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x46101, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"1c6549977c12bf027a5f368d48dd5a9d", 0x0, 0x0, {0x4, 0x3}, {0x1, 0x81}, 0x0, [0x4, 0x577, 0x9, 0x5, 0x3, 0x100, 0x4, 0x4, 0x0, 0x0, 0xffffffffffff0f58, 0x27, 0x2, 0x5, 0x4, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000140)=r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0xbe, 0x0, &(0x7f0000000200)="ca4adef181410f49f59f67658c4aca6179f710da42e59e6871cdf524721457f80f1c820a5f681a70f0ff44dd18d6169c1106fdee71c54afb0c54c48fa8695c34ae143514f8bf58865c3fad3118cd073a690db67fdab715d728652b6951387056cb0a4e5fb58fd3de12fd5bb0938d2ec5dbb4b6d15c1a2c6a8a31f9ec2c6b33b423ab8c96bfd29b381b6f3f2c7cc90b04ea56c65f493349a00deab52b6a617820331160b902b6be432439f6f01ea6020700d9fbed560945d02cf608d2be09"}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x84000, 0x0) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:56:15 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {r5, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x46101, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"1c6549977c12bf027a5f368d48dd5a9d", 0x0, 0x0, {0x4, 0x3}, {0x1, 0x81}, 0x0, [0x4, 0x577, 0x9, 0x5, 0x3, 0x100, 0x4, 0x4, 0x0, 0x0, 0xffffffffffff0f58, 0x27, 0x2, 0x5, 0x4, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000140)=r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0xbe, 0x0, &(0x7f0000000200)="ca4adef181410f49f59f67658c4aca6179f710da42e59e6871cdf524721457f80f1c820a5f681a70f0ff44dd18d6169c1106fdee71c54afb0c54c48fa8695c34ae143514f8bf58865c3fad3118cd073a690db67fdab715d728652b6951387056cb0a4e5fb58fd3de12fd5bb0938d2ec5dbb4b6d15c1a2c6a8a31f9ec2c6b33b423ab8c96bfd29b381b6f3f2c7cc90b04ea56c65f493349a00deab52b6a617820331160b902b6be432439f6f01ea6020700d9fbed560945d02cf608d2be09"}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x84000, 0x0) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x5, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}]}) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 3: ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x48000000) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x81, 0x100) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000040)) 10:56:15 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {r4, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x4, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}]}) 10:56:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x46101, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"1c6549977c12bf027a5f368d48dd5a9d", 0x0, 0x0, {0x4, 0x3}, {0x1, 0x81}, 0x0, [0x4, 0x577, 0x9, 0x5, 0x3, 0x100, 0x4, 0x4, 0x0, 0x0, 0xffffffffffff0f58, 0x27, 0x2, 0x5, 0x4, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000140)=r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0xbe, 0x0, &(0x7f0000000200)="ca4adef181410f49f59f67658c4aca6179f710da42e59e6871cdf524721457f80f1c820a5f681a70f0ff44dd18d6169c1106fdee71c54afb0c54c48fa8695c34ae143514f8bf58865c3fad3118cd073a690db67fdab715d728652b6951387056cb0a4e5fb58fd3de12fd5bb0938d2ec5dbb4b6d15c1a2c6a8a31f9ec2c6b33b423ab8c96bfd29b381b6f3f2c7cc90b04ea56c65f493349a00deab52b6a617820331160b902b6be432439f6f01ea6020700d9fbed560945d02cf608d2be09"}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x1e) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x1f) 10:56:15 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040), &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x46101, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"1c6549977c12bf027a5f368d48dd5a9d", 0x0, 0x0, {0x4, 0x3}, {0x1, 0x81}, 0x0, [0x4, 0x577, 0x9, 0x5, 0x3, 0x100, 0x4, 0x4, 0x0, 0x0, 0xffffffffffff0f58, 0x27, 0x2, 0x5, 0x4, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000140)=r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0xbe, 0x0, &(0x7f0000000200)="ca4adef181410f49f59f67658c4aca6179f710da42e59e6871cdf524721457f80f1c820a5f681a70f0ff44dd18d6169c1106fdee71c54afb0c54c48fa8695c34ae143514f8bf58865c3fad3118cd073a690db67fdab715d728652b6951387056cb0a4e5fb58fd3de12fd5bb0938d2ec5dbb4b6d15c1a2c6a8a31f9ec2c6b33b423ab8c96bfd29b381b6f3f2c7cc90b04ea56c65f493349a00deab52b6a617820331160b902b6be432439f6f01ea6020700d9fbed560945d02cf608d2be09"}) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}]}) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {r3, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) socket(0x0, 0x80000, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}]}) 10:56:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x46101, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"1c6549977c12bf027a5f368d48dd5a9d", 0x0, 0x0, {0x4, 0x3}, {0x1, 0x81}, 0x0, [0x4, 0x577, 0x9, 0x5, 0x3, 0x100, 0x4, 0x4, 0x0, 0x0, 0xffffffffffff0f58, 0x27, 0x2, 0x5, 0x4, 0xfffffffffffffff8]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000140)=r1) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80080, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {r2, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) [ 319.361894][ T9044] binder: 9041:9044 unknown command 1071866628 [ 319.369640][ T9044] binder: 9041:9044 ioctl c0306201 20000240 returned -22 10:56:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) socket(0x0, 0x80000, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x46101, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"1c6549977c12bf027a5f368d48dd5a9d", 0x0, 0x0, {0x4, 0x3}, {0x1, 0x81}, 0x0, [0x4, 0x577, 0x9, 0x5, 0x3, 0x100, 0x4, 0x4, 0x0, 0x0, 0xffffffffffff0f58, 0x27, 0x2, 0x5, 0x4, 0xfffffffffffffff8]}) 10:56:15 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) socket(0x0, 0x80000, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) [ 319.456472][ T9056] binder: 9052:9056 unknown command 1071866628 [ 319.478566][ T9056] binder: 9052:9056 ioctl c0306201 20000240 returned -22 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x0, 0x0, 0x0, 0x2, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:15 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x46101, 0x0) 10:56:15 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 10:56:15 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:15 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:15 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0xb, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) [ 319.565137][ T9071] binder: 9065:9071 unknown command 1071866628 [ 319.595378][ T9071] binder: 9065:9071 ioctl c0306201 20000240 returned -22 10:56:16 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x46101, 0x0) 10:56:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) socket(0x0, 0x80000, 0x0) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0xc, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) 10:56:16 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x46101, 0x0) 10:56:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 319.701983][ T9089] binder: 9086:9089 unknown command 1071866628 [ 319.708259][ T9089] binder: 9086:9089 ioctl c0306201 20000240 returned -22 10:56:16 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x46101, 0x0) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) [ 319.788768][ T9102] binder: 9101:9102 unknown command 1071866628 [ 319.797890][ T9102] binder: 9101:9102 ioctl c0306201 20000240 returned -22 10:56:16 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:16 executing program 5: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:16 executing program 5: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:16 executing program 5: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], 0x0, 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 0: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) [ 320.298664][ T9179] binder: 9177:9179 unknown command 1071866628 [ 320.325889][ T9179] binder: 9177:9179 ioctl c0306201 20000240 returned -22 10:56:16 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 4: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:16 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x0, 0xc2, &(0x7f00000000c0)=""/194, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 4: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:16 executing program 5: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x8, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:16 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:16 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:16 executing program 4: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:16 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:17 executing program 0: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:17 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) [ 320.657884][ T9234] binder: 9233:9234 ioctl c0306201 0 returned -14 10:56:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:17 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x7, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0xfffffffff0008000}]}) 10:56:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x6, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x4000}]}) [ 320.770255][ T9248] binder: 9246:9248 ioctl c0306201 0 returned -14 10:56:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:17 executing program 1: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x5, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}, {0xffffffffffffffff, 0x0, 0x100000000, 0x1000000}]}) 10:56:17 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) [ 320.876230][ T9263] binder: 9262:9263 ioctl c0306201 0 returned -14 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x4, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x10000}]}) 10:56:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x3, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}, {0xffffffffffffffff, 0x0, 0x100000000, 0xfffff000}]}) [ 320.968188][ T9281] binder: 9274:9281 ioctl c0306201 20000240 returned -14 10:56:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x81, 0x5}, 0x10}, 0x78) 10:56:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 4: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x100000000}]}) 10:56:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=@raw=[@alu={0x4}], &(0x7f0000000080)='GPL\x00', 0x4, 0xc2, &(0x7f00000000c0)=""/194, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 321.055787][ T9295] binder: 9290:9295 ioctl c0306201 20000240 returned -14 10:56:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:17 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) [ 321.153652][ T9310] binder: 9303:9310 ioctl c0306201 20000240 returned -14 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:17 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:17 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x10000}]}) 10:56:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:17 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) [ 321.250568][ T9321] binder: 9316:9321 unknown command 0 [ 321.285739][ T9321] binder: 9316:9321 ioctl c0306201 20000240 returned -22 10:56:17 executing program 1: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 10:56:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:17 executing program 2: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:17 executing program 0: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 10:56:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:17 executing program 2: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) [ 321.423759][ T9345] binder: 9341:9345 unknown command 0 [ 321.446573][ T9345] binder: 9341:9345 ioctl c0306201 20000240 returned -22 10:56:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) 10:56:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:17 executing program 2: ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}, {}]}) 10:56:17 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:17 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:17 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:17 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x1000000000000, 0x10000}]}) [ 321.560275][ T9367] binder: 9361:9367 ioctl c0306201 20000240 returned -14 [ 321.570551][ T9368] binder: 9363:9368 unknown command 0 [ 321.588261][ T9368] binder: 9363:9368 ioctl c0306201 20000240 returned -22 10:56:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:18 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:18 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 10:56:18 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:18 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 10:56:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 321.686954][ T9383] binder: 9378:9383 ioctl c0306201 20000240 returned -14 [ 321.709533][ T9388] binder: 9387:9388 unknown command 0 [ 321.729100][ T9388] binder: 9387:9388 ioctl c0306201 20000240 returned -22 10:56:18 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:18 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x10000}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) 10:56:18 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 10:56:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 10:56:18 executing program 5: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{}, {0xffffffffffffffff, 0x0, 0x0, 0x100000000}]}) [ 321.802998][ T9401] binder: 9398:9401 ioctl c0306201 20000240 returned -14 10:56:18 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x10000}, {}]}) 10:56:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:18 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 10:56:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 321.864287][ T9409] binder: 9406:9409 unknown command 0 [ 321.884481][ T9409] binder: 9406:9409 ioctl c0306201 20000240 returned -22 10:56:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)) 10:56:18 executing program 4: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{}, {}]}) 10:56:18 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)) 10:56:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c4000"/56], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 321.970056][ T9425] binder: 9421:9425 unknown command 0 [ 321.976233][ T9427] binder: 9423:9427 unknown command 0 [ 321.981756][ T9427] binder: 9423:9427 ioctl c0306201 20000240 returned -22 [ 322.005462][ T9425] binder: 9421:9425 ioctl c0306201 20000240 returned -22 10:56:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000000000000463e33f020000000c630c400000000000000000000000000f630c400200000000000000000000001061c331620040000000000007630440020000000d6300000f630c400300"/112], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) socket(0x0, 0x80000, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 10:56:18 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:18 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 322.081042][ T9438] binder: 9434:9438 unknown command 1071866628 [ 322.089769][ T9439] binder: 9437:9439 ioctl c0306201 0 returned -14 [ 322.096825][ T9438] binder: 9434:9438 ioctl c0306201 20000240 returned -22 10:56:18 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200000000000000, 0x2042) 10:56:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 322.130262][ T9446] binder: 9440:9446 unknown command 1071866628 [ 322.143984][ T9446] binder: 9440:9446 ioctl c0306201 20000240 returned -22 10:56:18 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:18 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x800, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40a080, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000080)) 10:56:18 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 10:56:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) [ 322.185353][ T9454] binder: 9449:9454 unknown command 0 [ 322.218555][ T9454] binder: 9449:9454 ioctl c0306201 20000240 returned -22 10:56:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, 0x0) 10:56:18 executing program 4: ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000000)) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 10:56:18 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 10:56:18 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x1, [{}]}) 10:56:18 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x400, 0x208003) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffd, 0x28, 0x20, @buffer={0x0, 0xff, &(0x7f0000000040)=""/255}, &(0x7f0000000140)="654b88c7c898253e0fd6f0154ad94de0213c641b196294cb81c3bb2313e21ae0688aad5cf8c7e65d", &(0x7f0000000180)=""/253, 0x3ff, 0x0, 0x1, &(0x7f0000000280)}) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) [ 322.320130][ T9469] binder: 9465:9469 unknown command 0 [ 322.329140][ T9469] binder: 9465:9469 ioctl c0306201 20000240 returned -22 10:56:18 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) 10:56:18 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0xf6ffffff, 0x2042) 10:56:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 10:56:18 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x0) 10:56:18 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x896, 0x1) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/49) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x80000000, 0x7, &(0x7f0000000040)=0x400}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) [ 322.427912][ T9488] binder: 9486:9488 unknown command 0 [ 322.448697][ T9488] binder: 9486:9488 ioctl c0306201 20000240 returned -22 10:56:18 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 10:56:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000000000000000000000200000001063084000000000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 322.487780][ T9496] binder: 9493:9496 unknown command 0 [ 322.496457][ T9496] binder: 9493:9496 ioctl c0306201 20000240 returned -22 10:56:18 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x896, 0x1) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/49) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x80000000, 0x7, &(0x7f0000000040)=0x400}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:18 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) 10:56:18 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) [ 322.551504][ T9503] binder: 9501:9503 ioctl c0306201 0 returned -14 [ 322.578660][ T9506] binder: 9505:9506 unknown command 0 [ 322.593555][ T9509] binder: 9504:9509 unknown command 0 10:56:18 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x896, 0x1) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000140)=""/49) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x80000000, 0x7, &(0x7f0000000040)=0x400}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) 10:56:19 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 322.604585][ T9506] binder: 9505:9506 ioctl c0306201 20000240 returned -22 [ 322.611960][ T9509] binder: 9504:9509 ioctl c0306201 20000240 returned -22 10:56:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x896, 0x1) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/49) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) [ 322.660184][ T9518] binder: 9515:9518 ioctl c0306201 0 returned -14 [ 322.698520][ T9523] binder: 9520:9523 unknown command 0 [ 322.702969][ T9525] binder: 9521:9525 unknown command 0 10:56:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f0000000000)) 10:56:19 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 322.710388][ T9525] binder: 9521:9525 ioctl c0306201 20000240 returned -22 [ 322.728012][ T9523] binder: 9520:9523 ioctl c0306201 20000240 returned -22 10:56:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x896, 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 322.766283][ T9531] binder: 9527:9531 ioctl c0306201 0 returned -14 [ 322.795957][ T9535] binder: 9532:9535 unknown command 0 10:56:19 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 10:56:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) 10:56:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x0, 0x0, 0x0}) 10:56:19 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 322.814903][ T9535] binder: 9532:9535 ioctl c0306201 20000240 returned -22 10:56:19 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x896, 0x1) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/49) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) [ 322.874611][ T9545] binder: 9543:9545 ioctl c0306201 20000240 returned -14 10:56:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 10:56:19 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x896, 0x1) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/49) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0963104002000000000000000000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 322.924240][ T9551] binder: 9546:9551 unknown command 0 [ 322.950675][ T9551] binder: 9546:9551 ioctl c0306201 20000240 returned -22 10:56:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 10:56:19 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x896, 0x1) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000140)=""/49) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) 10:56:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) [ 323.047481][ T9569] binder: 9564:9569 unknown command 0 [ 323.056331][ T9569] binder: 9564:9569 ioctl c0306201 20000240 returned -22 10:56:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x896, 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x141800, 0x0) 10:56:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 10:56:19 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 323.151600][ T9582] binder: 9580:9582 unknown command 0 [ 323.165510][ T9582] binder: 9580:9582 ioctl c0306201 20000240 returned -22 10:56:19 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x141800, 0x0) 10:56:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 10:56:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x141800, 0x0) 10:56:19 executing program 0: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 323.254084][ T9598] binder: 9593:9598 unknown command 0 [ 323.268561][ T9598] binder: 9593:9598 ioctl c0306201 20000240 returned -22 10:56:19 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0) 10:56:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:19 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x200, 0x2042) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff, 0x1}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) 10:56:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 323.381821][ T9616] binder: 9613:9616 unknown command 0 [ 323.396788][ T9616] binder: 9613:9616 ioctl c0306201 20000240 returned -22 [ 323.401659][ T9618] binder: 9615:9618 unknown command 0 [ 323.424263][ T9618] binder: 9615:9618 ioctl c0306201 20000240 returned -22 10:56:19 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:19 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x200000) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x7a, 0x5d, @buffer={0x0, 0xc8, &(0x7f0000000100)=""/200}, &(0x7f0000000200)="0536b107eca9c4cc2a60ae83b3b9a94369803422d90fb819a07788c371ead8e200ec60b41d56582ce9cd49bd4564a65bc1fb3f3b25d40b57da5372effcc7688dfc3d5b36fa1b597b85dd9b8f27aa65d4b9f2691db05b0c52665ac4c1d47792cc6075b65fba3964d114bda6d1a826a0e500083c99fcb83ba1695c", &(0x7f0000000280)=""/144, 0xffff8a00, 0x10000, 0x1, &(0x7f0000000340)}) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000380)) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x8, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0xd6881, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000040)=0x5) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r2 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x5, 0x121000) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f00000004c0)) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) 10:56:19 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x141800, 0x0) [ 323.483578][ T9629] binder: 9625:9629 unknown command 0 [ 323.507283][ T9629] binder: 9625:9629 ioctl c0306201 20000240 returned -22 10:56:19 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0xf6ffffff, 0x2042) 10:56:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:19 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x141800, 0x0) 10:56:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:19 executing program 0: getrusage(0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xa, 0x46b62) 10:56:20 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x141800, 0x0) [ 323.599603][ T9645] binder: 9639:9645 unknown command 0 10:56:20 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:20 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x141800, 0x0) 10:56:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:20 executing program 0: getrusage(0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xa, 0x46b62) [ 323.646194][ T9652] binder: 9648:9652 ioctl c0306201 0 returned -14 [ 323.646980][ T9645] binder: 9639:9645 ioctl c0306201 20000240 returned -22 [ 323.669575][ T9653] binder: 9650:9653 unknown command 0 [ 323.684315][ T9653] binder: 9650:9653 ioctl c0306201 20000240 returned -22 10:56:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 5: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0) 10:56:20 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) [ 323.743632][ T9662] binder: 9660:9662 ioctl c0306201 0 returned -14 [ 323.758339][ T9666] binder: 9664:9666 unknown command 0 [ 323.766589][ T9668] binder: 9663:9668 unknown command 0 [ 323.777010][ T9666] binder: 9664:9666 ioctl c0306201 20000240 returned -22 10:56:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:20 executing program 0: getrusage(0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xa, 0x46b62) 10:56:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 323.787685][ T9668] binder: 9663:9668 ioctl c0306201 20000240 returned -22 10:56:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) [ 323.854764][ T9676] binder: 9674:9676 unknown command 0 [ 323.858694][ T9679] binder: 9672:9679 ioctl c0306201 0 returned -14 [ 323.865498][ T9676] binder: 9674:9676 ioctl c0306201 20000240 returned -22 [ 323.867159][ T9678] binder: 9673:9678 unknown command 0 [ 323.875641][ T9681] binder: 9677:9681 unknown command 0 [ 323.881083][ T9678] binder: 9673:9678 ioctl c0306201 20000240 returned -22 10:56:20 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xa, 0x46b62) 10:56:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 0: syz_open_dev$sg(0x0, 0xa, 0x46b62) [ 323.911513][ T9681] binder: 9677:9681 ioctl c0306201 20000240 returned -22 10:56:20 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:20 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 0: syz_open_dev$sg(0x0, 0xa, 0x46b62) 10:56:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4000064, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) [ 323.986521][ T9690] binder: 9687:9690 unknown command 0 [ 323.988788][ T9691] binder: 9686:9691 ioctl c0306201 20000240 returned -14 [ 323.996902][ T9692] binder: 9688:9692 unknown command 0 [ 324.008894][ T9690] binder: 9687:9690 ioctl c0306201 20000240 returned -22 [ 324.022609][ T9692] binder: 9688:9692 ioctl c0306201 20000240 returned -22 10:56:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 0: syz_open_dev$sg(0x0, 0xa, 0x46b62) [ 324.054100][ T9699] binder: 9698:9699 ioctl c0306201 20000240 returned -14 10:56:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e24, 0x4f, @private0, 0x4}, 0x1c) 10:56:20 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x46b62) 10:56:20 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.132269][ T9708] binder: 9705:9708 unknown command 0 [ 324.143984][ T9708] binder: 9705:9708 ioctl c0306201 20000240 returned -22 [ 324.158741][ T9714] binder: 9710:9714 ioctl c0306201 20000240 returned -14 [ 324.172469][ T9713] binder: 9711:9713 unknown command 9 10:56:20 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 10:56:20 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.181254][ T9713] binder: 9711:9713 ioctl c0306201 20000240 returned -22 10:56:20 executing program 4: getrusage(0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xa, 0x46b62) 10:56:20 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:20 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:20 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.269296][ T9727] binder: 9724:9727 unknown command 0 [ 324.297815][ T9727] binder: 9724:9727 ioctl c0306201 20000240 returned -22 10:56:20 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 0: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) [ 324.334645][ T9735] binder: 9732:9735 unknown command 9 [ 324.360913][ T9735] binder: 9732:9735 ioctl c0306201 20000240 returned -22 [ 324.368183][ T9740] binder: 9738:9740 unknown command 9 10:56:20 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.390456][ T9740] binder: 9738:9740 ioctl c0306201 20000240 returned -22 [ 324.419645][ T9746] binder: 9745:9746 unknown command 0 10:56:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.439064][ T9750] binder: 9748:9750 unknown command 0 [ 324.448308][ T9750] binder: 9748:9750 ioctl c0306201 20000240 returned -22 [ 324.453242][ T9746] binder: 9745:9746 ioctl c0306201 20000240 returned -22 [ 324.458470][ T9753] binder: 9751:9753 unknown command 9 [ 324.480081][ T9753] binder: 9751:9753 ioctl c0306201 20000240 returned -22 10:56:20 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffe, 0xfb, 0x3, @scatter={0xa, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/162, 0xa2}]}, &(0x7f0000000100)="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", &(0x7f0000000200)=""/99, 0x9, 0x21, 0x2, &(0x7f0000000280)}) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x5cf) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x600402) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x9788, 0x6800) prctl$PR_GET_NAME(0x10, &(0x7f0000000bc0)=""/236) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) 10:56:20 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="096310"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.551430][ T9758] binder: 9756:9758 unknown command 9 [ 324.559474][ T9758] binder: 9756:9758 ioctl c0306201 20000240 returned -22 [ 324.566819][ T9761] binder: 9760:9761 unknown command 0 [ 324.575715][ T9761] binder: 9760:9761 ioctl c0306201 20000240 returned -22 [ 324.584617][ T9768] binder: 9765:9768 unknown command 1073929 10:56:20 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffe, 0xfb, 0x3, @scatter={0xa, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/162, 0xa2}]}, &(0x7f0000000100)="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", &(0x7f0000000200)=""/99, 0x9, 0x21, 0x2, &(0x7f0000000280)}) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x5cf) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x600402) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x9788, 0x6800) prctl$PR_GET_NAME(0x10, &(0x7f0000000bc0)=""/236) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) 10:56:20 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:20 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.599456][ T9768] binder: 9765:9768 ioctl c0306201 20000240 returned -22 10:56:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="096310"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:21 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffe, 0xfb, 0x3, @scatter={0xa, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/162, 0xa2}]}, &(0x7f0000000100)="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", &(0x7f0000000200)=""/99, 0x9, 0x21, 0x2, &(0x7f0000000280)}) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x5cf) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x600402) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x9788, 0x6800) prctl$PR_GET_NAME(0x10, &(0x7f0000000bc0)=""/236) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) [ 324.686675][ T9778] binder: 9774:9778 unknown command 0 [ 324.693592][ T9782] binder: 9777:9782 unknown command 9 [ 324.705837][ T9782] binder: 9777:9782 ioctl c0306201 20000240 returned -22 [ 324.706882][ T9783] binder: 9780:9783 unknown command 1073929 [ 324.721039][ T9778] binder: 9774:9778 ioctl c0306201 20000240 returned -22 10:56:21 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:21 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.736619][ T9783] binder: 9780:9783 ioctl c0306201 20000240 returned -22 [ 324.755281][ T9786] binder: 9784:9786 ioctl c0306201 0 returned -14 10:56:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="096310"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffe, 0xfb, 0x3, @scatter={0xa, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/162, 0xa2}]}, &(0x7f0000000100)="cb6cd40233508cf2dcf762b137e91a0c522e969fa1713c80da7d409d3e57181dc8da538212e0ba18dd6afbccb2cd61d50948ab9080fffca8bf4fa89da8c29d079a2d915b6fc2f5d5b00e3574b7867f1fb3797eb0e9198792490092c6c19c5d4eb4f5b77948c92cf324b54d29990419713503225e29bffb54b4fed451c05f384a673ac931039d31c6a04a6d24d37269743ca5860eeb07440572e4bce678ad004c817feb307ee7beff80b638f0bfa9b8f2bb09023b183f0473f599df92af42913d999f448c3bc43baf135f36b424206675a7af1f774ac4a96f0cb4d384ff3407043960c98dde8e64b13d34eb86fc96159dc1cee86eb21b1d108db049", &(0x7f0000000200)=""/99, 0x9, 0x21, 0x2, &(0x7f0000000280)}) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x5cf) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x600402) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x9788, 0x6800) prctl$PR_GET_NAME(0x10, &(0x7f0000000bc0)=""/236) 10:56:21 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.829350][ T9797] binder: 9788:9797 ioctl c0306201 0 returned -14 [ 324.838087][ T9798] binder: 9793:9798 unknown command 1073929 [ 324.845849][ T9798] binder: 9793:9798 ioctl c0306201 20000240 returned -22 10:56:21 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffe, 0xfb, 0x3, @scatter={0xa, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/162, 0xa2}]}, &(0x7f0000000100)="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", &(0x7f0000000200)=""/99, 0x9, 0x21, 0x2, &(0x7f0000000280)}) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x5cf) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x600402) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x9788, 0x6800) 10:56:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0}) 10:56:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:21 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:21 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffe, 0xfb, 0x3, @scatter={0xa, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/162, 0xa2}]}, &(0x7f0000000100)="cb6cd40233508cf2dcf762b137e91a0c522e969fa1713c80da7d409d3e57181dc8da538212e0ba18dd6afbccb2cd61d50948ab9080fffca8bf4fa89da8c29d079a2d915b6fc2f5d5b00e3574b7867f1fb3797eb0e9198792490092c6c19c5d4eb4f5b77948c92cf324b54d29990419713503225e29bffb54b4fed451c05f384a673ac931039d31c6a04a6d24d37269743ca5860eeb07440572e4bce678ad004c817feb307ee7beff80b638f0bfa9b8f2bb09023b183f0473f599df92af42913d999f448c3bc43baf135f36b424206675a7af1f774ac4a96f0cb4d384ff3407043960c98dde8e64b13d34eb86fc96159dc1cee86eb21b1d108db049", &(0x7f0000000200)=""/99, 0x9, 0x21, 0x2, &(0x7f0000000280)}) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x5cf) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x600402) 10:56:21 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 324.939314][ T9810] binder: 9808:9810 unknown command 0 [ 324.951509][ T9810] binder: 9808:9810 ioctl c0306201 20000240 returned -22 [ 324.961092][ T9811] binder: 9807:9811 ioctl c0306201 0 returned -14 10:56:21 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffe, 0xfb, 0x3, @scatter={0xa, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/162, 0xa2}]}, &(0x7f0000000100)="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", &(0x7f0000000200)=""/99, 0x9, 0x21, 0x2, &(0x7f0000000280)}) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x5cf) 10:56:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="096310"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:21 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 325.020039][ T9819] binder: 9816:9819 ioctl c0306201 0 returned -14 [ 325.045017][ T9824] binder: 9822:9824 ioctl c0306201 0 returned -14 [ 325.057646][ T9827] binder: 9823:9827 ioctl c0306201 20000240 returned -14 10:56:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20002) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x0, 0xfffffffffffffffe, 0xfb, 0x3, @scatter={0xa, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)=""/157, 0x9d}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/209, 0xd1}, {&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/150, 0x96}, {&(0x7f0000000840)=""/82, 0x52}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/162, 0xa2}]}, &(0x7f0000000100)="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", &(0x7f0000000200)=""/99, 0x9, 0x21, 0x2, &(0x7f0000000280)}) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 325.110064][ T9833] binder: 9830:9833 unknown command 1073929 [ 325.119081][ T9833] binder: 9830:9833 ioctl c0306201 20000240 returned -22 [ 325.120041][ T9835] binder: 9829:9835 ioctl c0306201 0 returned -14 10:56:21 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040020000"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 325.186532][ T9841] binder: 9837:9841 ioctl c0306201 20000240 returned -14 [ 325.196103][ T9842] binder: 9838:9842 ioctl c0306201 0 returned -14 10:56:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2, 0x20002) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x2042) 10:56:21 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:21 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x2042) 10:56:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 325.309700][ T9855] binder: 9851:9855 ioctl c0306201 20000240 returned -14 [ 325.346406][ T9865] binder: 9859:9865 ioctl c0306201 20000240 returned -14 10:56:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 1: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:21 executing program 1: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:21 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 325.416435][ T9871] binder: 9869:9871 ioctl c0306201 20000240 returned -14 [ 325.448587][ T9878] binder: 9873:9878 ioctl c0306201 0 returned -14 [ 325.455768][ T9879] binder: 9876:9879 unknown command 0 10:56:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x2042) 10:56:21 executing program 1: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) [ 325.472030][ T9879] binder: 9876:9879 ioctl c0306201 20000240 returned -22 [ 325.495332][ T9886] binder: 9885:9886 ioctl c0306201 20000240 returned -14 10:56:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:21 executing program 3: sched_rr_get_interval(0x0, &(0x7f0000000040)) 10:56:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 325.541551][ T9889] binder: 9887:9889 ioctl c0306201 0 returned -14 10:56:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 10:56:22 executing program 3: sched_rr_get_interval(0x0, 0x0) [ 325.588545][ T9895] binder: 9892:9895 unknown command 0 [ 325.597391][ T9901] binder: 9899:9901 ioctl c0306201 0 returned -14 [ 325.612646][ T9895] binder: 9892:9895 ioctl c0306201 20000240 returned -22 [ 325.612858][ T9902] binder: 9897:9902 ioctl c0306201 0 returned -14 [ 325.620293][ T9900] binder: 9890:9900 unknown command 0 10:56:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 1: syz_open_dev$sg(0x0, 0x7, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) [ 325.661657][ T9900] binder: 9890:9900 ioctl c0306201 20000240 returned -22 [ 325.682968][ T9906] binder: 9905:9906 ioctl c0306201 0 returned -14 10:56:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 3: sched_rr_get_interval(0x0, 0x0) 10:56:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 325.718989][ T9912] binder: 9908:9912 unknown command 0 [ 325.728568][ T9911] binder: 9910:9911 ioctl c0306201 20000240 returned -14 [ 325.739989][ T9912] binder: 9908:9912 ioctl c0306201 20000240 returned -22 [ 325.756658][ T9918] binder: 9915:9918 unknown command 0 10:56:22 executing program 1: syz_open_dev$sg(0x0, 0x7, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 3: sched_rr_get_interval(0x0, 0x0) 10:56:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 325.770391][ T9918] binder: 9915:9918 ioctl c0306201 20000240 returned -22 [ 325.771609][ T9919] binder: 9916:9919 ioctl c0306201 0 returned -14 10:56:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 325.825242][ T9924] binder: 9921:9924 ioctl c0306201 20000240 returned -14 10:56:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 1: syz_open_dev$sg(0x0, 0x7, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 325.866062][ T9928] binder: 9927:9928 ioctl c0306201 20000240 returned -14 [ 325.877268][ T9929] binder: 9926:9929 ioctl c0306201 20000240 returned -14 10:56:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) [ 325.911712][ T9934] binder: 9931:9934 ioctl c0306201 20000240 returned -14 [ 325.920283][ T9935] binder: 9930:9935 unknown command 0 [ 325.932520][ T9935] binder: 9930:9935 ioctl c0306201 20000240 returned -22 [ 325.954078][ T9938] binder: 9936:9938 unknown command 0 10:56:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) 10:56:22 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 325.962282][ T9938] binder: 9936:9938 ioctl c0306201 20000240 returned -22 [ 325.970816][ T9941] binder: 9937:9941 ioctl c0306201 20000240 returned -14 [ 325.996769][ T9942] binder: 9939:9942 unknown command 0 10:56:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) [ 326.018994][ T9942] binder: 9939:9942 ioctl c0306201 20000240 returned -22 [ 326.027257][ T9947] binder: 9944:9947 unknown command 0 [ 326.043437][ T9947] binder: 9944:9947 ioctl c0306201 20000240 returned -22 [ 326.051255][ T9950] binder: 9948:9950 unknown command 0 [ 326.063947][ T9952] binder: 9946:9952 unknown command 0 10:56:22 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 0: syz_open_dev$sg(0x0, 0x7, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) 10:56:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 326.073090][ T9950] binder: 9948:9950 ioctl c0306201 20000240 returned -22 [ 326.087603][ T9953] binder: 9951:9953 ioctl c0306201 20000240 returned -14 [ 326.102300][ T9952] binder: 9946:9952 ioctl c0306201 20000240 returned -22 10:56:22 executing program 0: syz_open_dev$sg(0x0, 0x7, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) [ 326.178024][ T9965] binder: 9960:9965 unknown command 0 [ 326.190520][ T9965] binder: 9960:9965 ioctl c0306201 20000240 returned -22 [ 326.200400][ T9967] binder: 9963:9967 unknown command 0 [ 326.208285][ T9970] binder: 9966:9970 unknown command 0 [ 326.214800][ T9967] binder: 9963:9967 ioctl c0306201 20000240 returned -22 10:56:22 executing program 0: syz_open_dev$sg(0x0, 0x7, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) 10:56:22 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 10:56:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) [ 326.226972][ T9970] binder: 9966:9970 ioctl c0306201 20000240 returned -22 10:56:22 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) 10:56:22 executing program 0: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 5: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) 10:56:22 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) 10:56:22 executing program 0: prctl$PR_GET_NAME(0x10, 0x0) [ 326.318604][ T9980] binder: 9976:9980 unknown command 0 [ 326.339261][ T9985] binder: 9979:9985 unknown command 0 [ 326.345653][ T9980] binder: 9976:9980 ioctl c0306201 20000240 returned -22 [ 326.351045][ T9985] binder: 9979:9985 ioctl c0306201 20000240 returned -22 10:56:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 3: syz_open_dev$binderN(0x0, 0x0, 0x0) 10:56:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 5: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 0: prctl$PR_GET_NAME(0x10, 0x0) 10:56:22 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) 10:56:22 executing program 3: syz_open_dev$binderN(0x0, 0x0, 0x0) 10:56:22 executing program 5: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 0: prctl$PR_GET_NAME(0x10, 0x0) [ 326.459030][T10002] binder: 10000:10002 unknown command 9 [ 326.459465][ T9999] binder: 9996:9999 unknown command 0 [ 326.477555][T10002] binder: 10000:10002 ioctl c0306201 20000240 returned -22 [ 326.491270][ T9999] binder: 9996:9999 ioctl c0306201 20000240 returned -22 10:56:22 executing program 3: syz_open_dev$binderN(0x0, 0x0, 0x0) 10:56:22 executing program 4: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) 10:56:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:22 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:22 executing program 4: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) [ 326.561523][T10014] binder: 10011:10014 unknown command 9 [ 326.587161][T10014] binder: 10011:10014 ioctl c0306201 20000240 returned -22 10:56:23 executing program 1: prctl$PR_GET_NAME(0x10, 0x0) 10:56:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, 0x0, 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\t'], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:23 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) [ 326.633954][T10023] binder: 10022:10023 unknown command 0 [ 326.643229][T10023] binder: 10022:10023 ioctl c0306201 20000240 returned -22 10:56:23 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:56:23 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:56:23 executing program 4: prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="096310"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:23 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x2042) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) [ 326.720178][T10034] binder: 10031:10034 unknown command 9 [ 326.724074][T10033] binder: 10030:10033 ioctl c0306201 20000240 returned -14 [ 326.731132][T10034] binder: 10031:10034 ioctl c0306201 20000240 returned -22 10:56:23 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:56:23 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:56:23 executing program 4: prctl$PR_GET_NAME(0x10, 0x0) 10:56:23 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000ac0)=""/198) 10:56:23 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:56:23 executing program 4: prctl$PR_GET_NAME(0x10, 0x0) 10:56:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="096310"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:23 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) 10:56:23 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 326.834436][T10052] binder: 10043:10052 unknown command 1073929 [ 326.840753][T10052] binder: 10043:10052 ioctl c0306201 20000240 returned -22 10:56:23 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:56:23 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) 10:56:23 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:56:23 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 10:56:23 executing program 4: prctl$PR_GET_NAME(0x10, 0x0) 10:56:23 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r0, 0x0, r1, 0x15, 0x80000}) 10:56:23 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 326.935070][T10064] binder: 10061:10064 unknown command 1073929 [ 326.970266][T10064] binder: 10061:10064 ioctl c0306201 20000240 returned -22 10:56:23 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, 0x0) 10:56:23 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:56:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="096310"], 0x35, 0x0, &(0x7f0000000200)="96b7f494397c381e18229cd4a8acce94d6bdea08b2c19fab2dadc164127098919dcc510bae360427d997460d6236dcd56b775caa02"}) 10:56:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000006480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007200)={0x18, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000b0bf176cf43a258a74b69dfb207cba31dab09af0ea67f443cd7d13ed1d434854516eab661f1a57efd223d78cdafde9e3ba2f80e7b8ef5119b35085c6fbc604440c0f74aea67ab4cce5826280f233cee7a11893ebab8a00f4b27cad5660c3dab998bd1419598e668dd142d6753c06a9102ad5bdba4dcc707dbbcc365fb4b8a58cc9c412be467d8596e24bfbabd4b75ad79229f951f48afa305d4cf4416a01d2a94ae7cefd", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000007100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @isdn={0x22, 0x8, 0x3, 0x8e, 0x6}, @xdp={0x2c, 0x6, r2, 0x28}, @hci={0x1f, 0x2, 0x4}, 0x6, 0x0, 0x0, 0x0, 0xdd14, &(0x7f0000000000)='geneve0\x00', 0x100000000, 0x9, 0x9}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000006480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007200)={0x18, 0x2, &(0x7f00000070c0)=@raw=[@map_val], &(0x7f0000007100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newvlan={0x5c, 0x70, 0xa, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x80000001}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040090}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) 10:56:23 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000006480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007200)={0x18, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="200000b0bf176cf43a258a74b69dfb207cba31dab09af0ea67f443cd7d13ed1d434854516eab661f1a57efd223d78cdafde9e3ba2f80e7b8ef5119b35085c6fbc604440c0f74aea67ab4cce5826280f233cee7a11893ebab8a00f4b27cad5660c3dab998bd1419598e668dd142d6753c06a9102ad5bdba4dcc707dbbcc365fb4b8a58cc9c412be467d8596e24bfbabd4b75ad79229f951f48afa305d4cf4416a01d2a94ae7cefd", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000007100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @isdn={0x22, 0x8, 0x3, 0x8e, 0x6}, @xdp={0x2c, 0x6, r2, 0x28}, @hci={0x1f, 0x2, 0x4}, 0x6, 0x0, 0x0, 0x0, 0xdd14, &(0x7f0000000000)='geneve0\x00', 0x100000000, 0x9, 0x9}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000006480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007200)={0x18, 0x2, &(0x7f00000070c0)=@raw=[@map_val], &(0x7f0000007100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newvlan={0x5c, 0x70, 0xa, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x80000001}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x9}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20040090}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) 10:56:23 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) 10:56:23 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r0, 0x0, r1, 0x15, 0x80000}) 10:56:23 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) 10:56:23 executing program 4: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) [ 327.071839][T10084] binder: 10082:10084 unknown command 1073929 [ 327.089677][T10084] binder: 10082:10084 ioctl c0306201 20000240 returned -22 10:56:23 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x70, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="09631040"], 0x0, 0x0, 0x0}) 10:56:23 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000000c0)={r0, 0x0, r1, 0x15, 0x80000}) 10:56:23 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) 10:56:23 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) 10:56:23 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 10:56:23 executing program 3: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) 10:56:23 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') 10:56:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x80040, 0x0) 10:56:23 executing program 5: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x5e63, 0x2040) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) [ 327.210458][T10098] binder: 10096:10098 unknown command 0 [ 327.221348][T10098] binder: 10096:10098 ioctl c0306201 20000240 returned -22 10:56:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x8, 0x100}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0xe141) 10:56:23 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) 10:56:23 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) 10:56:23 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') 10:56:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x8, 0x100}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0xe141) 10:56:23 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) 10:56:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80040, 0x0) 10:56:23 executing program 3: open$dir(0x0, 0x703200, 0x0) 10:56:23 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) 10:56:23 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') 10:56:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80040, 0x0) 10:56:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000040)={0x8, 0x100}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0xe141) 10:56:23 executing program 2: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x406800) open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) 10:56:23 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:23 executing program 3: open$dir(0x0, 0x703200, 0x0) 10:56:23 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) 10:56:23 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x703200, 0x0) 10:56:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80040, 0x0) 10:56:23 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0xe141) 10:56:23 executing program 2: open$dir(0x0, 0x703200, 0x0) 10:56:23 executing program 3: open$dir(0x0, 0x703200, 0x0) 10:56:23 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) 10:56:23 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0xe141) 10:56:23 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) 10:56:23 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:56:23 executing program 2: open$dir(0x0, 0x703200, 0x0) 10:56:24 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0xe141) 10:56:24 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:56:24 executing program 2: open$dir(0x0, 0x703200, 0x0) 10:56:24 executing program 4: syz_open_dev$sg(0x0, 0x1, 0xe141) 10:56:24 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:56:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) 10:56:24 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:56:24 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:56:24 executing program 4: syz_open_dev$sg(0x0, 0x1, 0xe141) 10:56:24 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 2: open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 10:56:24 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 4: syz_open_dev$sg(0x0, 0x1, 0xe141) 10:56:24 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x81}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb9, 0x58, 0x4, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, r0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xe141) 10:56:24 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 0: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0xc000000, 0x2042) 10:56:24 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:24 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x81}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb9, 0x58, 0x4, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, r0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xe141) 10:56:24 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x7, 0x20, 0x2, 0x80000000, 0x80000000, 0x8001}) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:24 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0xa000000, 0x2042) 10:56:24 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:24 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={r1, 0x0, 0x81}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb9, 0x58, 0x4, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, r0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xe141) 10:56:24 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xe141) 10:56:24 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x4, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:24 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:24 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb9, 0x58, 0x4, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, r0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x0) 10:56:24 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xe141) 10:56:24 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:24 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x0) 10:56:24 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:24 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb9, 0x58, 0x4, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, r0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xe141) 10:56:24 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$phonet(0x23, 0x2, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xb9, 0x58, 0x4, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x0) 10:56:24 executing program 3: syz_open_dev$sg(0x0, 0x0, 0xe141) 10:56:24 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) socket$phonet(0x23, 0x2, 0x1) 10:56:24 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:24 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xe141) 10:56:24 executing program 3: syz_open_dev$sg(0x0, 0x0, 0xe141) 10:56:24 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:24 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xe141) 10:56:24 executing program 3: syz_open_dev$sg(0x0, 0x0, 0xe141) 10:56:24 executing program 2: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1) 10:56:24 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:24 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0xb9, 0x58, 0x4, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:24 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0xe141) 10:56:24 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4}, 0x8) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:25 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) 10:56:25 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:25 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:56:25 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x58, 0x4, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 4: syz_open_dev$sg(0x0, 0x0, 0xe141) 10:56:25 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) 10:56:25 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:25 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x4}, 0x8) 10:56:25 executing program 4: syz_open_dev$sg(0x0, 0x0, 0xe141) 10:56:25 executing program 3: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:25 executing program 0: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 10:56:25 executing program 4: syz_open_dev$sg(0x0, 0x0, 0xe141) 10:56:25 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, 0x0, 0x0) 10:56:25 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x4, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 3: r0 = socket$inet6(0xa, 0x800, 0xd4e) sendto$inet6(r0, &(0x7f0000000400)="477d297b59314d3cc60e9d4ff56f12b58b45afccee878f88f17fe351c6a2d5ff97fdc31fb6a02675a767b47c28a97f29698c57561307612d0a7e8f4e65d8195c0bdd317ecaed912d9eaff5144b5846ab7e8299143ee19ba25a2bfbfd51782c688dd5ece04b676b1385e1c3d702dd35b322d6e2597fb09dbb1507ac3da149d996cbb77de299431251cd03d2819604c2e40ef6dc782f91e557a0a9e295290b0822b1274acff268b5f31df520b51e52dfbc331f0635deb5b524e8ecfaa330fd2bf534412be4b06b44aa8f1e700b14b28b1b87b226690c6110ce2aa030a55a319457a5ff68a416a79206f7d94533e577bbd3070b70bf77fe2a1ad0e0ac3c5c576fdb8a8f715ca95781858f9d18c8cea3651c4551b8c514bd105e0407f074e73e01085b12b0c237092b64f2940d3a21511c14e02d021bcaafe48a433ee39e0d43bf643f9859caf14d7b9247b78a36b76bbe61d120410f0a68bb821d92793e3cd1b8f1ef58f125c88485fa0948b6272687d54c9543e969513674d980d28b619f3db50d2f076c70fcefd8cb5abb15a9f7ed86e00c421b5a0b3bc4730f8354af7ee00ac652671264f03eb12887fb82f8e5600c6711c8c66bccc1419392930d9219948ca9d011d2b50088ccfb9a6a2d2483d3ec63004cf82087c403a055c4ddf309b1e375ab848a5278f5368c251de0e36290e5c04e654bf2c8a4691f6c37f9371d0e57df5d1567587c9467b4c097c2c6fb3fce15269d31e78defd2e5c40961c47ae0c51e7728dd0a883316793c75169515dce6d3991aba17348120f0c5ab6aea5302910e69ee09ea6e2a1447a42191375c0a0ce27feed0a6ce05cd3948ff2b828e36cd05defa9b9b4058a58290bae16fae4f8643369e24dfad570d7779ec997ccafc866c4a59629f0977ac1c41354eb30b1e671f9a865e80775d1de34ae9097b81114a92be3dc0e5489c69622204989f08c48c8948eb7b51468ce10c5382f9d37012c89a3cfda811d237d4c674566b0f6f4f48af7fb26a51659e44e20346a7cf6d5c69b71a7e2f91649916d1a4274574f7cc95f16c87fcb9e35e4dd73507b20aef6ab397e899353e5a7d9887158cec178afdca8afe644a450e31b84fa1ba3af3c4263502575181e253d19961043514767705fc4dd19e92e96c9801401a6d1a71c6aa338bd202bfd0bfc68718c90adf4f620ed59819d9ad81e99844e528505eed8fcbe69772f04b7afe4f8b5dd661c7fa25f353125697bfb05951b7a989812ec8adaf58e256e7615be9d8bcff0b8627bacee71166994d742d4fed02ef5a25d45bf6cb82a7b8f45150cef2ef649ad520c1e63f731bb2ff4ccb4e031f86f59c43d570c0b57ce1391143d5cb86ea540aaa205a465f5edd2667fa4847105598ffb80a4d255d77b6ec2266403d699e9d18f09fbcf43d75fa35d83acc280d2555f8d6c3550293e7587fecedf89586d4d2b7ff986afcd1c45fae0501009b102a1b221e06ac16a69a9bd0194aceda2d52bacfdebec6b089354f4f7209a65672ef26e2281e275a7ba7d15cf10adfa324265dfb507c01ac6a82f11ef5887529e6f34fc342fc5db9ed33ae80322915504c047cea17592d5de10c34a4d8d869d0355066382642dbea12ca3b33a248e36fcbf41ea01743a59482f2fc10fe95dc09c882ab75717abd5ff57a54a338e2576335a611eb5c306603ae0296889a1f559b2b3864c657aef7b44452164e9b8d24f385b041d70cf124f704ec1a0619be9be24200d7ee86751ce1b2a9b740c67072f563518ae7b3c328b445f7fe156d9ac45e20b488a69371b10786fbb3bb1a21d6368b3029ed97de88e28bdcd3d3d1327adaa1da57cb8a70aa33960ec208c0d838d462858186318e55f4c5254d06227fe812bd3099629e4c1a2f68a3b37ee0d6a2bd2816176c561febbd4be82fce16d4682c7a592d0f0540e7b443531c265c4f060db0fb803cdbcdf92844eb97f8c6405acea0eebfb7dddc806260385eb5862baa033239857aae9d48d737e369cd1d0ee0e4afe6613911deeed91f55f4bce1bd5b6421928d8ac5d48992f80e530224217b9c485df770d9ebfc4c9a20f2e103986fe1f9019a2bc17ca24ac69be9d5fef4dedb9d0f31709fbaa17cd95ad37c61029658e24e87ffa9555c2d474cf72c6e155e74e5bd765f42a98eaa5cfdec4f653b8cb3c2bb89a9677ab1242339faff876924f5bd80cc6dc2089f3e5e6c16e417a6fe00c5f6e402ece5b6099174352902091f4829fb8439907eb3b36c7c12706d63bc52b15a4889025b4057a563d98cb9adffb0e27d0fee2fac217ea4a3681cbc0f6aef014c112da8703cb978a30222275ceb1738cb1e9e4387e4a0c3e0bcb043941b88205bbd9d75a48d0997af88d0be2d821cf3581bad99d6f7c37f09405ad8fdb2040a0ce1b2b5128a585c1173e94557e741587155d086238e76c6a68f852b3a72c8a0c5480fc90649dd58cec5cab96c68a4315f3ac06e9c67b41501ce8c1ee163aad0bcaf48b4454e246ed66bd2113e0c5fda8dc4f97a66b551a89cef2f0fc578931af7a9d38fa8ad3dadf286866fbbd7b8ec2682e1575e2ef6763988958dac5daaa5fe57d95ee700a32a797230a2b38941019de46b7708c669b349b4fb9974fe829ab4e237fdb833f8aa6a927f0b31c1dd073900dcfbb363c752581ef4ad8fe38ae00c6ba7cdb88eac5b7777394f36e90cca58189b9e52a3d3c73babc3fa5f314d9cb9514f2c997caac511e6de2f2ba7d8b8babd5bea90d3f5ad4b2e68a761eaaa330ac472cc849342acafd8562f412a2c5e381ce7f29cc7ceac7837d0394b64973dd8ae309d804bd2625d9f55c6860812b65f7c26eb4968a916b6844bf563709adeb7dae85eb6749f987ecfec9bfec6129031f5c026a21e6d7963934d906da22ef167178acd03f9ad60fc9e13508a61c1f1126782bf8bf5475d9fd3891ede9dd0ba8652435dfaa8f491600f878a6b87fab9d76ff793ff64dafefdf5d432380b6c8f889c8dc0d4360eb6aa752210f8e8e340111324e18c638ff696baf8ba97e5839991e36856add886014d58a65dd285a00aad792eaf6cf6ec19715c8ee04e37ae02ae5a0581545b3547fd64adcc19a85b4921f2e2cee04ce926d7825341ec7e58320044bfb72be7785886d8e715a611cd2842f8f41eee0338e614cb94659a312b796f65c4572e554071ae9a5e2c24629c625b76f1b881200eb21e0ee2eae20e296e73fdf2ca785300589e874379788063f3f96473bf557af3a9d8d9a8e94d03d01f72e3abd3b1fb7b7fec4dd8a477aefa9f46389ead5b7abf54ef82ca4dc35202863a21318808694d16236a8df68783ce2ff446c1e0c5aebdf660ec2d69ed1658b76920233de123d3b069cf06123f98e6fa548216f47526dfaaa5d984e8898c03dae9e4a3cd8ec910817c1d29b49250d1aa1c723bc785a34fc08ae3e552ba7c2b9f6286d815b01020658ca1fe42698f384be71ad20e47be0e7efcf8fe22cb9c430f2b59ef9a01d9f753b9578d8502ca869233dd40731af33ad1777a8677f930f2da93e9c6acac9b5eb05d4d1bca4fa6fb83920b0316fb011d7b1d7195be5e72ff55b4aaa38a342be62099fc3e0e92bac6e32bcfe7829e6e004c87072ea56322b46eb76b31f8539826a2812e08ea137962093b59d5489b7fa7f3b6bc8624080eecd24e77d51ff82edc1df345485156d6086103600d7af0b180049b6e60f06622618609dda4775465463cc64c872c2fffa689ac2a46c65c4f9c3644b75f74b46d894e11de4f1aed2386db49b92a0e494a7d15426ba32ec3d626b055053c0851620a57fd5fd0356f7a34b0d0116d51dab436020f5a19d87a8a0e1d5a61d4374dd61ec1e874dba7445574b9f41e09f60bafdc5423503a7bfe91cf8e0eb111246a866417759b34ed4ca0f488291dd759fd9a3b9f54c19932a299b5cf0cec2d6902fda9aade978c587230491bdfca3eaf67b9bb2047967983d71d52bea2ed3e2a8deaedc728eb86126a17c787256f1cd5b7314af667ab8a1ffb8c7e3a6e1594a21b3ef2d16f00b1049edbf1568e15e9ab87a5714749402f574007e1fa2bd62f2a5f7f447c5ff62a86cef10a1e8bdfe7d871ca155aea7d9dfaf1480e1f156e36d52f001f186c58fef8c1d7ce89841d5bd623af0dd086b08bab94ad77765d1307ed614cd1b83773f4ab9811ed491ae2fbc38b2092ff9ebe4096e32d70959dfd7a5a67326ca0233297fafb4d3b78ed617313cf33d07343ff6951cd23001a92780792820f8ac639c61dc9440f124bab3865a4753b318089b062b9919b617e6b0e7091d6283a9e252cd74a42c3fe41710b2e97f83a4990c4b1a5d41781af4513dded094baac9e77937317b5dce710c152f7241f5137d21a5685fa005a5e83e02abe61506a90cdee02d5837bb5a3cdc8789e0e34917c284dd7317ac05bc570ec723d3471e86fa26f2ecca638226277af769e4c2e526636f4b4778c8f4cf3d9125ba844bfa2539ccc61c75f09317ea8f4e1e59494e91095b7242a0997769cb84460a4164e50f825b475bd084d970ca6bbba6645dc369aed41844eee55d181588b87ad262e5eda69cdc433694fb2a6937e12529a95a0ebb18ca6af9f34998847f304dd528805981e2519319567454fe49d4bd8751dd0025cc32dcf4e0a06bbf6751e740b7067f932ee05ae5d233c64b3190d95f4a460c2b49f83e0552d451e159a345427b6d17fc3205a058ea298c3aa3641dd4f8b828feec37b4b3300c2c5c7fbd2754dcc8592af3bdd956ab41fa2d115cd904e3b0424860a07a60fbd0702a49c8b5f2e2e1f2c1a01c6acc8adc4fd737d905d33b01d9a742bc6b70a281d5e5c967369471add3ee8b5bd259e3e0bc56620142903b7d451ca078513c717c125259a5e2c075884163795b23463e7569bf599930b5c90a5656cb9b76b3108bbb6bf641ead0c4dd08e60dca43cabcd66737a167a052442dfa489119793e27dc094a7fa617fa59aa79272871c862baca1822089d8c23f8d88e290892dd3fae04ecca5c5ddbabe99daeb85c3f26888df18db5da494dabccd7987e31ed20f0c900a45be82e0a34c77cb2ac4e7c8f3901a010cacebb165812af3d8a3f316ef1260e29a6cd1c6bb0570742ef38b2547ef83f1f7708b823cbc918f9d9b4a31f93e746a2799920cc6bdb0ceae06d8d78c4a2becfb29b54f64ceb1d2b828652c23ee30b8c94eb15c60e1ee5cac1207aeee6cd70f3e1fbf9da7789842af493f3ba725f88c8fb590ee85896e48924fdced088f7cbb9eed9e285c50a8c4bc640ec73cf4cfbcc77867d6d78d34f047c48b866da3537b335635f25adb6eb40783154430cbf8c14f95d5cecec4d6966c70ead8f6ad13fc799989dff6148eab3d4996b1161da24959c6813dff009085ae970636361181fce588502c2396e524b83d1a12e0ce6a507156e541caf91b97d345b7523b5ebf46adc3d0d58b48ed538cb77b8758383992490fa1b903fd96b311fdcd34bc4667a0d737a8ba4bc8d582d0f2114a7351e63ff87c9f0f8dbd249ac28b90e89f2c7ad92d309727f16b2e73733d8ac92ca99f49f2855e09772b902195d8727aaac68704630f808e9bfc747e4b6f8d52d1ef2f9cd729f224db73fe2af1db16d4965b35ab6d9573213cb08d82de9c4772ecb5868f502b68ed567a6fc4eece2abb8fdac9bd203508c50a879adf64739b428085b0b1d7d9d99f4975a89d9cbd303ae27ec7be377fa9fec27699385073f60e900e6e392203e7a5e74ea894e2c30bdb250d643e3ef3698c9a8fb5f5e2585e71773edd48ac49970", 0x1000, 0x20000000, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x3}, 0x1c) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2942) 10:56:25 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:25 executing program 1: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000000)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x282, 0x0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000080)={0x7, 0x6379}) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 5: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x88000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) 10:56:25 executing program 0: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 10:56:25 executing program 3: r0 = socket$inet6(0xa, 0x800, 0xd4e) sendto$inet6(r0, &(0x7f0000000400)="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", 0x1000, 0x20000000, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x3}, 0x1c) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2942) 10:56:25 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:25 executing program 1: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x88000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040)) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 0: bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 10:56:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xa0000, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x8) 10:56:25 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000006480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007200)={0x18, 0x2, &(0x7f00000070c0)=@raw=[@map_val], &(0x7f0000007100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r5, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)=@bridge_newvlan={0x7c, 0x70, 0x8, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10}}}]}, 0x7c}}, 0x4000040) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000001c0), 0x4) 10:56:25 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0, 0x0, 0x18}, 0x10) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 4: syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) 10:56:25 executing program 3: r0 = socket$inet6(0xa, 0x800, 0xd4e) sendto$inet6(r0, &(0x7f0000000400)="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", 0x1000, 0x20000000, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x3}, 0x1c) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2942) 10:56:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xa0000, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x8) 10:56:25 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) 10:56:25 executing program 3: r0 = socket$inet6(0xa, 0x800, 0xd4e) sendto$inet6(r0, &(0x7f0000000400)="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", 0x1000, 0x20000000, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @empty, 0x3}, 0x1c) 10:56:25 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000006480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007200)={0x18, 0x2, &(0x7f00000070c0)=@raw=[@map_val], &(0x7f0000007100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r5, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)=@bridge_newvlan={0x7c, 0x70, 0x8, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10}}}]}, 0x7c}}, 0x4000040) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000001c0), 0x4) 10:56:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xa0000, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000000)=0x8) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1a5000, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000280)={0x53, 0xffffffffffffffff, 0x1000, 0x7d, @buffer={0x0, 0x20, &(0x7f0000000100)=""/32}, &(0x7f0000000400)="e8fb45aca773078bc80c43e35d77d4c7bcd0e5082f24cc2f4b54a2e68462e47b99db6c7d72631b0e65ea2b79dfde1eaa499f4b56233cbeec2a821d5370ffd050674beb423694b96b0dfcf002e651056e9b789fffed4189e6b4b4cb695c98e9d39c1d5a9a487b3e00077407cd52f5044e5488f17060aa9a15c509345495c5a2d7830c11423b558d923a7bdcd87d7a64e44de60f767958c7bbfb426549242ffe020a4cca1dc2d1664447071e1f27312f61d5aaebc88067f56b0de72e62796afd275372f4310105d3ce8154b48206f78f254b439e98be9abe8c5466abefe401d2fffc6f72262f96afc2276f1b1749960f63786cfe7a50b11e119c29b9817e132255ec95825d38caa6048f160711d2421224a457bce89ad6b36f5758c667b937f7ebbbb6ab01de6df4bfdf969ef890bd598cc964fcc8acaa072a5339b1424c013c254a431fd4ec6b8036319767d30bed708f85c0a64646aae6b0dbfb66c0a8e03a7017ef0cb203aee6d92f219e635ad8c926743c3e10479c1226bea5dfd488e39ceef6a6cfbd0525b4621a651f44356da41160b6b0863cec1706f7acb88501051c60cc0fb78f19ef3960d3b11be8b7c1e67a8b99338ad43596ca2369a468aaaad3dcc472517da4394e74bd77223477c702f8a9a8ac5de8cf0b00b76042e789f2f7800cfcad9f5c10ffdda449abe264ed8db52394d232de1b6ec05adf427521e4c8f6d2818d5b367d540a1f7a398f24311568ece81264f7d0c352e8918fc06c62a37ecaad4505a680edcbdccf0b60fb4ec0bcbe715366063ae4a3301670deb8a0aff4d65cdda7996fdda016d8586875a841b0db2c45dfc4c1f92497d4478885651d598aca6c4eb94e35aebd1fdfc4377ca7f640fcf73cd7d0de322ed20822c63f546302e1bab07363ab7810ea1fbfb2a78ee58e41fcf2fac412dfe538b98f4306be0b5d4bf9e71bf5572503e7af9fd70774b7d96b0ea5d1a2d5ed159f1b7781a1948398e6347b0513369e3e2a36f65eaff92865b6e3b2273f4f147ef2ccb7f9199e8504baebe7b37562457b9339bf62eed644661b7226f723ccfa1f0992cf1162f09802eeb294044560b6c778ff69a651469ea1bd4a0ec22ce961f24dddb2f9225969dae11a1469cb9e45a79c1395b8fb87eec1694504a0640d423187bef061ce4dbd2c309783fcb5fd0c134b2dba74c7042760d5d72e58b88079cacf5ad67c97fe2e465d897da96bc5893a9fe61aca978ac2b047b206256dbe8c07838799fb2f6863adecfed6aacb8fbdc8cccb98df1fcc1dc7ffaa675b7b8efeb1c22c6cc0eecdd829ae16e85e7bfb43764c0cc47db49643cb0392409102a533216aa8578012778ca7e61e1253b77c050eb30276504ac809bfd7f67c181839f5441effbfdafa9eefce3474e9d8dca1697a9d3601259e2bff3cb54127d4cb7c59f134193ac57f4ea3531eab8b1530849fac3bf24a91f7dd7b31357886ca9a0f831f6be1aa14792e0b11f23bee4711a0a7d915815579fc1a0211873f02e375cb56a5e9849c87af7c94ea6e08a1149f42b18bdd6923deef847152fe63769f6b7557ec55c04f9f3dbed6a9ee300eabadc39ff4035e7f079100ea1759c2814e6dbdae1bc95f527d6d15556ff64d598712389a5b13e382e7bcec26d4015204118f6fc0d438ab83398f13a37aa4a644d6381ba4d70a2ba214029fa8046e8ddaaa589f9318bed4912a9a0e210d38524c8ec6b06352002ee0d42809b7899f23f5e232e9aad817d6c9b6a4aecaea7a886adfc3914ae063deb16768e02c31ca276faeeabb86a2332d7a08e3aa884a369c5d1d2bf07f40a1d4f1413a37280f62c47c2eeb1e993fc7b373eb257a766165b17e9a00394eae566240590da293c2f4a4622d96251f99a5cd7b6f18821fbdfd6ff27746ba47e9dfa9e78a5ef4e3af5c94ffc5e09a61ba1eac7b85ce88865f049368bbff213dd0ebbe67a1e6dc5f94f3fcf23a940fb6edd2b658a260fbdbcb316d2c4cedb2654a2e5f174e055cd7beb4faedbe94546a211a034551357919576c844fba0e9c820b02f3204b3db7747851d2fffc57b2e67331e0a7391231e6068dec37456fe1d932fed89f29b45dbf68c03e77b94c53b8e6d9992a103c8cb6a48775cec172f0b177a3afb6e982c175c995e1e3e56ec2430c0ccf9fa034400ada47b385eaa92d32d3aef7aa2e9e26758cdc762e5fc25f11eae9f85403b8c6de0e2d751833abf02d4d423e03beb32e3a4d58e2ca97d3f67d6cad163c3bf7fd70c837dd7c3fcf009fbdd0a7f21a9b17bfd5fe2543bef39fab7c03196e66d90148025ae8aa304980479cac693d72624ab9bcd88b5d03ca8241a8b195d3e1cff2ed52cfe24403db3be8cb6f282f55bd620c620a3451a11843584ecfcbe7c7ca994645c7560f8d0045e0478b3ee235d5a7cb17bbe223bb2f6588d7cc52925d0a136063a85f7eacbff6a7ead2b1e83939fd483fc90f3aa4031dfca39250560d3f0accb5b519c689f1e7afcbca5c81e6fc6361b7f78c875d3032c4ea2327e845fc253b1a70d9b81c0113994d37aee4a140dd457868225ddd893c46f0a83f21453dbf34addf2805f51026b21218c9cc7c0c704f7d3223584a1d56c844240bf4a76c7e19b5d5c2c18e281dd6e04a5f7da51c242e3aefa68b66fb56a2d3ea4aafd6c42462f5725c426faf73e04d51f55ba99d0111abc6d617954fe3bf0e4f205563edd8ac1f6e57255e3c1830970bf2efe08362b5e2f73210db29fad58d98ea9748d7dc1f0ad1fdab975b602d37f7b65645bcad48a3dac71bef286200fef406c3b1bd5c07d0ab249d23dc6d36739634f379396aa8545f9b9913bc75e47aa02b53493414c97aacf55b285768682b02a99e5b6916c981afa3d75ade5c08cacf10aeb76016bbcd3c464696f9b23ec6de437325fd719e8ded6fd50fcee786cb2ddfe8f6d327e4d3649f67ccbf636f44c94768d6a3fc28f4ec56e15249c80d8cab43d90908c315d7f300e5ca3acfcd6cf3daf47669e247af96b9a730506b2ae3b0ea00b2e626ff76ed759135942d2950cb95794efc39b13e6ca0bb05cec05dca45a5f8146f7b103f20de0ac2867c30014d53de08922726040138eef854b985deae482de6def32aecbf7471e0dbc9b7a5358b04326097b21e2f14bc9f3707dd3151661c304704afa28c84f864706fffac67327826fb7719df5b082767a61e15e7096916c26b27bc7737a49f754ea44153a2d08011ab4176d3aefe97746bafb637f7ea7169f4b05b90d8be31d89fbea49308b146835e2c2d77af600176fc828a0b1970a17d395ed447ec6b1c950676d2597d161821f41c66ade29f446beabc0601951f54a7e16fb1de0db2e0d339f894d8e82d29d66d697a0c637b5e16fdffb9f093dc20f19ca5fcb8884fd6a843eab86292948b418f2b9f67984a531a72db1ed190eddbb60e30e790677296cc2b80d2769312220485bff94363782828184ec1550d41fa4b87abddfcc6c3c716162a9acf3d2bed4a0b0c2e1a934bdb6d367d9da2f0e461c856c28d247a71836b1318542e26ac0fb93259af7579a31a4747307e4fcdbc9566ffa897873781666380d7b521daf94a99252009b4a9477fc9702432da3e391958eecb4b48d15a95f3d499e7aeee4e2f2d163c533658f3ae5a3a9fbd989acc6203e066fdd99b4c84dee332f520400ce9dbe7e1b234e3867ed80beaf07284d05f4d36bd9613a23ec79bd452e809ab347abebeaaf16182e50cbe3041c363e897e58aec2837b753aa1158c83cc6973406021d633a32e9275e5ea48fcab5e6417a8b5f6873fe04060017127ee120e819f9c37eb33625d4e649c4df94380c7eb96d1b2bc89a96ed44484363f7e6bab52f02b8632dcf5b73b66df41782410d4bba3eddd3700a821b8f2481709a60ce68376a325e020701f9c53676522c70e29ad31ec07f354298d0538466a0c47832cba2abc5278e25ac98c02579bb1d05b5646907df288d500cc9281b285a9327ca6765426c79efa0ea7b5d8ef9cdfab1ca38140b7e7732c6dfe0ba50581fc9394c24ca12f25e7bf94558e2c2b42afcf919ff8956cf5502a459ead882fccd7c4c3d924205e10b8fad9144113ab2334a8b8ae0f41c9d6f6e1a3bc920b3bdac7dd4d5cc142f1b44b71aa0e61854210dda5248df08d5843b7b37821e5543f4641b612333fc5a9c7f7bce20e1a34b6b01cf85e3b5076ea1a5ee64153286c71dfed82810f5ace344899542a7fa68a25e4163b1d74e9150f354092987e3c28c1537013aa39fe0457f6dfe0f711b66e23ef34bb9325f551321408fea97696c5b02a1d3ffe776acf623463e2f86fb497cac7eee86cd3f0c9cf74cd36b21735c873c90e5b8d5f38f5652eb35bb6a9f1503895ed830cabb4cc70bc23c7cc465ece1f90ce54fe0f0e524c4b0d0e13b5983d4979f4f488819e16079f20712817dda48263401b21af4f8d3eff4750b580232574c6cf1af277ccc5b5dd0d7dbf5629ea72d87cd3139782e234ab4acc25093bdcf0df84c3a6d6f987733fbaab4f33b339c32043fd07388ecf2b06b1c2e6c65a5d31bff4f0bd4a8035ca8d23c11e1c31f6be63f53b88f8eea822c5f4fdfc6971893854d3f9b8bf98c916e30b1ccfafaa47afb277e29490b55936d568f3b13ae422131a502b721e41a6ba5e7e0fd13781b7df5bdd56ba14b581991d477b4be7eb2303a97dadf7ea0e3c821ebe0d51cca448cdfa465a93bfd41c500241c2eded8e1509fbed1f3038f316d2ac2f5b8d6fac3967423bfa79802257f260eca3e76899c6333257dc8eab30fa6a3faf369b28fdee9755c1881132bc5a7880717b4ab42a253044339b61684fbd8fc7d4582d4811e5ab2df94bc178dbe38d54d70c15652f198742839976a4e83ad9b7c7a8ca20be315eed732995f37828bd6aef5f00dd5fee8c62ffe59d0fcdebb47b210751944e8a1a1984c8d9e17aee567377fcd56f2fed29f31cade9883ab88f19b798ba9e64ad64003221568a028a8d5254b52b3124ec587d67ac60951e1d9cfe98e125a68f136854c0726ea1e3fb6eb20b601deb7c3867ec542b820a9b9f9be7f398ce74545d02e13bfebd52a842751b72e87cf856da3ce42553df8cd4d3519094ea312a164f788a1f97493e3d4b0da29d266d33cdd028abfddf106ee1547c0b6f861a7e2e59f050625643e96aa33ece2297965fb0b8a6863e2e6c120c7bdf45c72392708cadfe4e9fb0ea9a5db4ec33138b021e985a7b98b0f5e776354cafb11c935274333eaa55a7819884f72485d6c5eb6e526e07bb43e1fbbb24098fb7dddc1776de71e241cc7e1194dc8d0ceafbdbe68784b9c340e934773096a730bb53e127530f4992b5a6c630456c7a7f53c9e5ec91e66b558ce8c3d8f8500185ba37fda3e8de6ae81cac7a6ed4ff5449144ec18fa77ff3c0d35d557dccfee7ae789283197c5fe23a9c6d27dd2460b2be6590e5f0023ffd8cb1d6eaf4be462bcf2580383288174ff69ca4c6c9e484d61bb8ba944625154c3959d8a591b59ad4e7998bb26e6dfefbad3c05f2a7e3d5f08a61c376ab7e059132036dfe6a305225fcb1eccb84544a988eb2ece0d1de303e6c8e2108a51110858699db6ddff9ddb120510b8ea0faae580f9cb7832a8609de27bd8c54f40bec3a66710222262cd97f6164251d51045c31055d8cdbf33e678e8200395916cb9103b2268567ef79d49a1cc4bf43f93e997a54f13a24f5e00c8a24859260068c7228d0e549404cd52da744271b72a01d4027ba43000269dc7088cee0a9970e8148cce75b0c92076ea2db08c445462313f", &(0x7f0000000140)=""/222, 0x40000000, 0x10027, 0x2, &(0x7f0000000240)}) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xd9, 0x80) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000340)) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) 10:56:25 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) 10:56:25 executing program 3: socket$inet6(0xa, 0x800, 0xd4e) 10:56:25 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000006480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007200)={0x18, 0x2, &(0x7f00000070c0)=@raw=[@map_val], &(0x7f0000007100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r5, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)=@bridge_newvlan={0x7c, 0x70, 0x8, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10}}}]}, 0x7c}}, 0x4000040) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f00000001c0), 0x4) 10:56:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xa0000, 0x0) waitid$P_PIDFD(0x3, r2, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) 10:56:25 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1a5000, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000280)={0x53, 0xffffffffffffffff, 0x1000, 0x7d, @buffer={0x0, 0x20, &(0x7f0000000100)=""/32}, &(0x7f0000000400)="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", &(0x7f0000000140)=""/222, 0x40000000, 0x10027, 0x2, &(0x7f0000000240)}) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xd9, 0x80) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000340)) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) 10:56:25 executing program 0: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 3: socket$inet6(0xa, 0x0, 0xd4e) 10:56:25 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000006480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007200)={0x18, 0x2, &(0x7f00000070c0)=@raw=[@map_val], &(0x7f0000007100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r7, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) sendmsg$nl_route(r5, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)=@bridge_newvlan={0x7c, 0x70, 0x8, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x30, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10}}}]}, 0x7c}}, 0x4000040) 10:56:25 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xa0000, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1) 10:56:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 3: socket$inet6(0xa, 0x0, 0x0) 10:56:25 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1a5000, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000280)={0x53, 0xffffffffffffffff, 0x1000, 0x7d, @buffer={0x0, 0x20, &(0x7f0000000100)=""/32}, &(0x7f0000000400)="e8fb45aca773078bc80c43e35d77d4c7bcd0e5082f24cc2f4b54a2e68462e47b99db6c7d72631b0e65ea2b79dfde1eaa499f4b56233cbeec2a821d5370ffd050674beb423694b96b0dfcf002e651056e9b789fffed4189e6b4b4cb695c98e9d39c1d5a9a487b3e00077407cd52f5044e5488f17060aa9a15c509345495c5a2d7830c11423b558d923a7bdcd87d7a64e44de60f767958c7bbfb426549242ffe020a4cca1dc2d1664447071e1f27312f61d5aaebc88067f56b0de72e62796afd275372f4310105d3ce8154b48206f78f254b439e98be9abe8c5466abefe401d2fffc6f72262f96afc2276f1b1749960f63786cfe7a50b11e119c29b9817e132255ec95825d38caa6048f160711d2421224a457bce89ad6b36f5758c667b937f7ebbbb6ab01de6df4bfdf969ef890bd598cc964fcc8acaa072a5339b1424c013c254a431fd4ec6b8036319767d30bed708f85c0a64646aae6b0dbfb66c0a8e03a7017ef0cb203aee6d92f219e635ad8c926743c3e10479c1226bea5dfd488e39ceef6a6cfbd0525b4621a651f44356da41160b6b0863cec1706f7acb88501051c60cc0fb78f19ef3960d3b11be8b7c1e67a8b99338ad43596ca2369a468aaaad3dcc472517da4394e74bd77223477c702f8a9a8ac5de8cf0b00b76042e789f2f7800cfcad9f5c10ffdda449abe264ed8db52394d232de1b6ec05adf427521e4c8f6d2818d5b367d540a1f7a398f24311568ece81264f7d0c352e8918fc06c62a37ecaad4505a680edcbdccf0b60fb4ec0bcbe715366063ae4a3301670deb8a0aff4d65cdda7996fdda016d8586875a841b0db2c45dfc4c1f92497d4478885651d598aca6c4eb94e35aebd1fdfc4377ca7f640fcf73cd7d0de322ed20822c63f546302e1bab07363ab7810ea1fbfb2a78ee58e41fcf2fac412dfe538b98f4306be0b5d4bf9e71bf5572503e7af9fd70774b7d96b0ea5d1a2d5ed159f1b7781a1948398e6347b0513369e3e2a36f65eaff92865b6e3b2273f4f147ef2ccb7f9199e8504baebe7b37562457b9339bf62eed644661b7226f723ccfa1f0992cf1162f09802eeb294044560b6c778ff69a651469ea1bd4a0ec22ce961f24dddb2f9225969dae11a1469cb9e45a79c1395b8fb87eec1694504a0640d423187bef061ce4dbd2c309783fcb5fd0c134b2dba74c7042760d5d72e58b88079cacf5ad67c97fe2e465d897da96bc5893a9fe61aca978ac2b047b206256dbe8c07838799fb2f6863adecfed6aacb8fbdc8cccb98df1fcc1dc7ffaa675b7b8efeb1c22c6cc0eecdd829ae16e85e7bfb43764c0cc47db49643cb0392409102a533216aa8578012778ca7e61e1253b77c050eb30276504ac809bfd7f67c181839f5441effbfdafa9eefce3474e9d8dca1697a9d3601259e2bff3cb54127d4cb7c59f134193ac57f4ea3531eab8b1530849fac3bf24a91f7dd7b31357886ca9a0f831f6be1aa14792e0b11f23bee4711a0a7d915815579fc1a0211873f02e375cb56a5e9849c87af7c94ea6e08a1149f42b18bdd6923deef847152fe63769f6b7557ec55c04f9f3dbed6a9ee300eabadc39ff4035e7f079100ea1759c2814e6dbdae1bc95f527d6d15556ff64d598712389a5b13e382e7bcec26d4015204118f6fc0d438ab83398f13a37aa4a644d6381ba4d70a2ba214029fa8046e8ddaaa589f9318bed4912a9a0e210d38524c8ec6b06352002ee0d42809b7899f23f5e232e9aad817d6c9b6a4aecaea7a886adfc3914ae063deb16768e02c31ca276faeeabb86a2332d7a08e3aa884a369c5d1d2bf07f40a1d4f1413a37280f62c47c2eeb1e993fc7b373eb257a766165b17e9a00394eae566240590da293c2f4a4622d96251f99a5cd7b6f18821fbdfd6ff27746ba47e9dfa9e78a5ef4e3af5c94ffc5e09a61ba1eac7b85ce88865f049368bbff213dd0ebbe67a1e6dc5f94f3fcf23a940fb6edd2b658a260fbdbcb316d2c4cedb2654a2e5f174e055cd7beb4faedbe94546a211a034551357919576c844fba0e9c820b02f3204b3db7747851d2fffc57b2e67331e0a7391231e6068dec37456fe1d932fed89f29b45dbf68c03e77b94c53b8e6d9992a103c8cb6a48775cec172f0b177a3afb6e982c175c995e1e3e56ec2430c0ccf9fa034400ada47b385eaa92d32d3aef7aa2e9e26758cdc762e5fc25f11eae9f85403b8c6de0e2d751833abf02d4d423e03beb32e3a4d58e2ca97d3f67d6cad163c3bf7fd70c837dd7c3fcf009fbdd0a7f21a9b17bfd5fe2543bef39fab7c03196e66d90148025ae8aa304980479cac693d72624ab9bcd88b5d03ca8241a8b195d3e1cff2ed52cfe24403db3be8cb6f282f55bd620c620a3451a11843584ecfcbe7c7ca994645c7560f8d0045e0478b3ee235d5a7cb17bbe223bb2f6588d7cc52925d0a136063a85f7eacbff6a7ead2b1e83939fd483fc90f3aa4031dfca39250560d3f0accb5b519c689f1e7afcbca5c81e6fc6361b7f78c875d3032c4ea2327e845fc253b1a70d9b81c0113994d37aee4a140dd457868225ddd893c46f0a83f21453dbf34addf2805f51026b21218c9cc7c0c704f7d3223584a1d56c844240bf4a76c7e19b5d5c2c18e281dd6e04a5f7da51c242e3aefa68b66fb56a2d3ea4aafd6c42462f5725c426faf73e04d51f55ba99d0111abc6d617954fe3bf0e4f205563edd8ac1f6e57255e3c1830970bf2efe08362b5e2f73210db29fad58d98ea9748d7dc1f0ad1fdab975b602d37f7b65645bcad48a3dac71bef286200fef406c3b1bd5c07d0ab249d23dc6d36739634f379396aa8545f9b9913bc75e47aa02b53493414c97aacf55b285768682b02a99e5b6916c981afa3d75ade5c08cacf10aeb76016bbcd3c464696f9b23ec6de437325fd719e8ded6fd50fcee786cb2ddfe8f6d327e4d3649f67ccbf636f44c94768d6a3fc28f4ec56e15249c80d8cab43d90908c315d7f300e5ca3acfcd6cf3daf47669e247af96b9a730506b2ae3b0ea00b2e626ff76ed759135942d2950cb95794efc39b13e6ca0bb05cec05dca45a5f8146f7b103f20de0ac2867c30014d53de08922726040138eef854b985deae482de6def32aecbf7471e0dbc9b7a5358b04326097b21e2f14bc9f3707dd3151661c304704afa28c84f864706fffac67327826fb7719df5b082767a61e15e7096916c26b27bc7737a49f754ea44153a2d08011ab4176d3aefe97746bafb637f7ea7169f4b05b90d8be31d89fbea49308b146835e2c2d77af600176fc828a0b1970a17d395ed447ec6b1c950676d2597d161821f41c66ade29f446beabc0601951f54a7e16fb1de0db2e0d339f894d8e82d29d66d697a0c637b5e16fdffb9f093dc20f19ca5fcb8884fd6a843eab86292948b418f2b9f67984a531a72db1ed190eddbb60e30e790677296cc2b80d2769312220485bff94363782828184ec1550d41fa4b87abddfcc6c3c716162a9acf3d2bed4a0b0c2e1a934bdb6d367d9da2f0e461c856c28d247a71836b1318542e26ac0fb93259af7579a31a4747307e4fcdbc9566ffa897873781666380d7b521daf94a99252009b4a9477fc9702432da3e391958eecb4b48d15a95f3d499e7aeee4e2f2d163c533658f3ae5a3a9fbd989acc6203e066fdd99b4c84dee332f520400ce9dbe7e1b234e3867ed80beaf07284d05f4d36bd9613a23ec79bd452e809ab347abebeaaf16182e50cbe3041c363e897e58aec2837b753aa1158c83cc6973406021d633a32e9275e5ea48fcab5e6417a8b5f6873fe04060017127ee120e819f9c37eb33625d4e649c4df94380c7eb96d1b2bc89a96ed44484363f7e6bab52f02b8632dcf5b73b66df41782410d4bba3eddd3700a821b8f2481709a60ce68376a325e020701f9c53676522c70e29ad31ec07f354298d0538466a0c47832cba2abc5278e25ac98c02579bb1d05b5646907df288d500cc9281b285a9327ca6765426c79efa0ea7b5d8ef9cdfab1ca38140b7e7732c6dfe0ba50581fc9394c24ca12f25e7bf94558e2c2b42afcf919ff8956cf5502a459ead882fccd7c4c3d924205e10b8fad9144113ab2334a8b8ae0f41c9d6f6e1a3bc920b3bdac7dd4d5cc142f1b44b71aa0e61854210dda5248df08d5843b7b37821e5543f4641b612333fc5a9c7f7bce20e1a34b6b01cf85e3b5076ea1a5ee64153286c71dfed82810f5ace344899542a7fa68a25e4163b1d74e9150f354092987e3c28c1537013aa39fe0457f6dfe0f711b66e23ef34bb9325f551321408fea97696c5b02a1d3ffe776acf623463e2f86fb497cac7eee86cd3f0c9cf74cd36b21735c873c90e5b8d5f38f5652eb35bb6a9f1503895ed830cabb4cc70bc23c7cc465ece1f90ce54fe0f0e524c4b0d0e13b5983d4979f4f488819e16079f20712817dda48263401b21af4f8d3eff4750b580232574c6cf1af277ccc5b5dd0d7dbf5629ea72d87cd3139782e234ab4acc25093bdcf0df84c3a6d6f987733fbaab4f33b339c32043fd07388ecf2b06b1c2e6c65a5d31bff4f0bd4a8035ca8d23c11e1c31f6be63f53b88f8eea822c5f4fdfc6971893854d3f9b8bf98c916e30b1ccfafaa47afb277e29490b55936d568f3b13ae422131a502b721e41a6ba5e7e0fd13781b7df5bdd56ba14b581991d477b4be7eb2303a97dadf7ea0e3c821ebe0d51cca448cdfa465a93bfd41c500241c2eded8e1509fbed1f3038f316d2ac2f5b8d6fac3967423bfa79802257f260eca3e76899c6333257dc8eab30fa6a3faf369b28fdee9755c1881132bc5a7880717b4ab42a253044339b61684fbd8fc7d4582d4811e5ab2df94bc178dbe38d54d70c15652f198742839976a4e83ad9b7c7a8ca20be315eed732995f37828bd6aef5f00dd5fee8c62ffe59d0fcdebb47b210751944e8a1a1984c8d9e17aee567377fcd56f2fed29f31cade9883ab88f19b798ba9e64ad64003221568a028a8d5254b52b3124ec587d67ac60951e1d9cfe98e125a68f136854c0726ea1e3fb6eb20b601deb7c3867ec542b820a9b9f9be7f398ce74545d02e13bfebd52a842751b72e87cf856da3ce42553df8cd4d3519094ea312a164f788a1f97493e3d4b0da29d266d33cdd028abfddf106ee1547c0b6f861a7e2e59f050625643e96aa33ece2297965fb0b8a6863e2e6c120c7bdf45c72392708cadfe4e9fb0ea9a5db4ec33138b021e985a7b98b0f5e776354cafb11c935274333eaa55a7819884f72485d6c5eb6e526e07bb43e1fbbb24098fb7dddc1776de71e241cc7e1194dc8d0ceafbdbe68784b9c340e934773096a730bb53e127530f4992b5a6c630456c7a7f53c9e5ec91e66b558ce8c3d8f8500185ba37fda3e8de6ae81cac7a6ed4ff5449144ec18fa77ff3c0d35d557dccfee7ae789283197c5fe23a9c6d27dd2460b2be6590e5f0023ffd8cb1d6eaf4be462bcf2580383288174ff69ca4c6c9e484d61bb8ba944625154c3959d8a591b59ad4e7998bb26e6dfefbad3c05f2a7e3d5f08a61c376ab7e059132036dfe6a305225fcb1eccb84544a988eb2ece0d1de303e6c8e2108a51110858699db6ddff9ddb120510b8ea0faae580f9cb7832a8609de27bd8c54f40bec3a66710222262cd97f6164251d51045c31055d8cdbf33e678e8200395916cb9103b2268567ef79d49a1cc4bf43f93e997a54f13a24f5e00c8a24859260068c7228d0e549404cd52da744271b72a01d4027ba43000269dc7088cee0a9970e8148cce75b0c92076ea2db08c445462313f", &(0x7f0000000140)=""/222, 0x40000000, 0x10027, 0x2, &(0x7f0000000240)}) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xd9, 0x80) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000340)) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f00000000c0)) 10:56:25 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000006480)={'wg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000007200)={0x18, 0x2, &(0x7f00000070c0)=@raw=[@map_val], &(0x7f0000007100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 10:56:25 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xa0000, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) 10:56:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1a5000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x53, 0xffffffffffffffff, 0x1000, 0x7d, @buffer={0x0, 0x20, &(0x7f0000000100)=""/32}, &(0x7f0000000400)="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", &(0x7f0000000140)=""/222, 0x40000000, 0x10027, 0x2, &(0x7f0000000240)}) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xd9, 0x80) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000340)) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) 10:56:25 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000006480)={'wg0\x00'}) 10:56:25 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1a5000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x53, 0xffffffffffffffff, 0x1000, 0x7d, @buffer={0x0, 0x20, &(0x7f0000000100)=""/32}, &(0x7f0000000400)="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", &(0x7f0000000140)=""/222, 0x40000000, 0x10027, 0x2, &(0x7f0000000240)}) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xd9, 0x80) 10:56:25 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 3: socket$inet6(0xa, 0x0, 0x0) 10:56:25 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 5: syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) 10:56:25 executing program 0: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:25 executing program 3: socket$inet6(0xa, 0x0, 0x0) 10:56:25 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 10:56:25 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1a5000, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000280)={0x53, 0xffffffffffffffff, 0x1000, 0x7d, @buffer={0x0, 0x20, &(0x7f0000000100)=""/32}, &(0x7f0000000400)="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", &(0x7f0000000140)=""/222, 0x40000000, 0x10027, 0x2, &(0x7f0000000240)}) 10:56:26 executing program 0: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000039c0)='/dev/ubi_ctrl\x00', 0x400, 0x0) 10:56:26 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x1a5000, 0x0) 10:56:26 executing program 3: socket$inet6(0xa, 0x0, 0x0) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x40000000, &(0x7f0000000100)) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 10:56:26 executing program 0: perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) 10:56:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0xa0000, 0x0) waitid$P_PIDFD(0x3, r1, &(0x7f0000000080), 0x40000000, &(0x7f0000000100)) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)=0x1) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)) 10:56:26 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) 10:56:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000200)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000240)={"066012df17252fb755202715340a3455", r2, r2, {0x3f, 0x8}, {0x20, 0x6}, 0x80000001, [0x9, 0x0, 0x7, 0x1f, 0x4, 0xba, 0x1f, 0xfffffffffffffff7, 0x0, 0x4faf, 0x7fff, 0x10000, 0x4, 0xcb0, 0x7, 0x35a9]}) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000001c0)={0xfffffffe, 0xfffffffd, 0x8b46, 0x0, 0x3, 0x2}) 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) 10:56:26 executing program 4: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) 10:56:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000200)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000240)={"066012df17252fb755202715340a3455", r2, r2, {0x3f, 0x8}, {0x20, 0x6}, 0x80000001, [0x9, 0x0, 0x7, 0x1f, 0x4, 0xba, 0x1f, 0xfffffffffffffff7, 0x0, 0x4faf, 0x7fff, 0x10000, 0x4, 0xcb0, 0x7, 0x35a9]}) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000001c0)={0xfffffffe, 0xfffffffd, 0x8b46, 0x0, 0x3, 0x2}) 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 10:56:26 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x140, 0x0) 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000200)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000240)={"066012df17252fb755202715340a3455", r2, r2, {0x3f, 0x8}, {0x20, 0x6}, 0x80000001, [0x9, 0x0, 0x7, 0x1f, 0x4, 0xba, 0x1f, 0xfffffffffffffff7, 0x0, 0x4faf, 0x7fff, 0x10000, 0x4, 0xcb0, 0x7, 0x35a9]}) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000001c0)={0xfffffffe, 0xfffffffd, 0x8b46, 0x0, 0x3, 0x2}) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) 10:56:26 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x140, 0x0) 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000200)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000240)={"066012df17252fb755202715340a3455", r2, r2, {0x3f, 0x8}, {0x20, 0x6}, 0x80000001, [0x9, 0x0, 0x7, 0x1f, 0x4, 0xba, 0x1f, 0xfffffffffffffff7, 0x0, 0x4faf, 0x7fff, 0x10000, 0x4, 0xcb0, 0x7, 0x35a9]}) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) 10:56:26 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f00000002c0)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x140, 0x0) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)=0x0) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r4, 0x8018456f, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000200)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000240)={"066012df17252fb755202715340a3455", r2, r2, {0x3f, 0x8}, {0x20, 0x6}, 0x80000001, [0x9, 0x0, 0x7, 0x1f, 0x4, 0xba, 0x1f, 0xfffffffffffffff7, 0x0, 0x4faf, 0x7fff, 0x10000, 0x4, 0xcb0, 0x7, 0x35a9]}) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x140, 0x0) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000140)={0x0, 0x80, 0x3d4e, 0x6, 0x8, 0x5, 0x1000, 0x6, 0x1, 0x10000, 0x83, 0x1}) 10:56:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000200)) 10:56:26 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r3, 0x8018456f, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0]}) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGABS2F(r2, 0x8018456f, 0x0) 10:56:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:26 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:26 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) 10:56:26 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000002c0)) 10:56:26 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:26 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:26 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:26 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) pidfd_getfd(0xffffffffffffffff, r0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x14002) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000180)=0x15a5, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 1: syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x4, 0x98, &(0x7f0000000400)="dda127b9b9c1c472554164fd93d90e610051e56ffa4a1ac0eb084b32b192e9ba53fa72001bcea36da6539e70a495f22176202409e8fb39f67d79ae1795c1ffdc387ccd60edc809c72805f10bf654fa7ffcee3b8c160227ab19bed721e371d448e9e8ff5d4a0d903fe6c39b7e03edc83bc6bb70110f5e7d8941d5b323545e37c4af0850e390c4a4407543fd09ece2870f44618daaa5b1642f"}) 10:56:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3, 0x400c01) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 1: syz_open_procfs$namespace(0x0, 0x0) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0)=0x20, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 1: syz_open_procfs$namespace(0x0, 0x0) 10:56:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)='/de\x8b/sg#\x00'}, 0x30) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:27 executing program 1: syz_open_procfs$namespace(0x0, 0x0) 10:56:27 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid\x00') 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 5: syz_open_procfs$namespace(0x0, 0x0) 10:56:27 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:27 executing program 5: syz_open_procfs$namespace(0x0, 0x0) 10:56:27 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) syz_open_dev$sg(&(0x7f00000003c0)='/dev/sg#\x00', 0x7, 0x2042) 10:56:27 executing program 5: syz_open_procfs$namespace(0x0, 0x0) 10:56:27 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7d0}, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 5: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x4810, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:27 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:27 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffff7fffffff, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:27 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:27 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:28 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:28 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:28 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 3: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) 10:56:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 10:56:28 executing program 1: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:56:28 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 3: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) 10:56:28 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:28 executing program 4: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:28 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:28 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) 10:56:28 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) 10:56:28 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 4: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xa) 10:56:28 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 0: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 10:56:28 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 1: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 0: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 5: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 5: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)) 10:56:28 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 1: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0) read$hidraw(r0, &(0x7f0000000000)=""/254, 0xfe) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140)) 10:56:28 executing program 3: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 0: openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x40082, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') 10:56:28 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 10:56:28 executing program 2: syz_open_procfs$namespace(0xffffffffffffffff, 0x0) [ 332.395249][T10858] ================================================================== [ 332.403332][T10858] BUG: KCSAN: data-race in dput / select_collect [ 332.409643][T10858] [ 332.411951][T10858] write to 0xffff88802207d240 of 4 bytes by task 8450 on cpu 1: [ 332.419569][T10858] select_collect+0xaf/0x2a0 [ 332.424151][T10858] d_walk+0x298/0x4c0 [ 332.428117][T10858] shrink_dcache_parent+0x85/0x3c0 [ 332.433218][T10858] d_invalidate+0x70/0x1b0 [ 332.437622][T10858] proc_invalidate_siblings_dcache+0x1e3/0x2d0 [ 332.443768][T10858] proc_flush_pid+0x16/0x20 [ 332.448278][T10858] release_task+0xb01/0xd30 [ 332.452766][T10858] wait_consider_task+0xf89/0x1820 [ 332.457864][T10858] do_wait+0x1b1/0x4e0 [ 332.461920][T10858] kernel_wait4+0x13c/0x1a0 [ 332.466420][T10858] __x64_sys_wait4+0x7a/0x100 [ 332.471100][T10858] do_syscall_64+0x39/0x80 [ 332.475514][T10858] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.481394][T10858] [ 332.483704][T10858] read to 0xffff88802207d240 of 4 bytes by task 10858 on cpu 0: [ 332.491324][T10858] dput+0x2f/0x420 10:56:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) [ 332.495033][T10858] proc_invalidate_siblings_dcache+0x1eb/0x2d0 [ 332.501190][T10858] proc_flush_pid+0x16/0x20 [ 332.505692][T10858] release_task+0xc1e/0xd30 [ 332.510192][T10858] do_exit+0xf11/0x1690 [ 332.514344][T10858] do_group_exit+0xc8/0x170 [ 332.518851][T10858] get_signal+0xd5e/0x1440 [ 332.523258][T10858] arch_do_signal_or_restart+0x2a/0x270 [ 332.528803][T10858] exit_to_user_mode_prepare+0x109/0x1a0 [ 332.534425][T10858] syscall_exit_to_user_mode+0x20/0x40 [ 332.539872][T10858] do_syscall_64+0x45/0x80 10:56:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:28 executing program 1: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/user\x00') ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140)) [ 332.544277][T10858] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.550156][T10858] [ 332.552460][T10858] Reported by Kernel Concurrency Sanitizer on: [ 332.558588][T10858] CPU: 0 PID: 10858 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 332.567335][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.577377][T10858] ================================================================== [ 332.585418][T10858] Kernel panic - not syncing: panic_on_warn set ... 10:56:28 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4, 0x8, 0xffff, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0xa) 10:56:28 executing program 1: syz_open_procfs$namespace(0x0, 0x0) [ 332.591992][T10858] CPU: 0 PID: 10858 Comm: syz-executor.2 Not tainted 5.11.0-rc3-syzkaller #0 [ 332.600740][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.610782][T10858] Call Trace: [ 332.614050][T10858] dump_stack+0x116/0x15d [ 332.618379][T10858] panic+0x1e7/0x5fa [ 332.622271][T10858] ? vprintk_emit+0x2e2/0x360 [ 332.626943][T10858] kcsan_report+0x67b/0x680 [ 332.631444][T10858] ? kcsan_setup_watchpoint+0x47b/0x4e0 [ 332.637002][T10858] ? dput+0x2f/0x420 [ 332.640888][T10858] ? proc_invalidate_siblings_dcache+0x1eb/0x2d0 [ 332.647233][T10858] ? proc_flush_pid+0x16/0x20 [ 332.651904][T10858] ? release_task+0xc1e/0xd30 [ 332.656575][T10858] ? do_exit+0xf11/0x1690 [ 332.660894][T10858] ? do_group_exit+0xc8/0x170 [ 332.665587][T10858] ? get_signal+0xd5e/0x1440 [ 332.670171][T10858] ? arch_do_signal_or_restart+0x2a/0x270 [ 332.675880][T10858] ? exit_to_user_mode_prepare+0x109/0x1a0 [ 332.681683][T10858] ? syscall_exit_to_user_mode+0x20/0x40 [ 332.687311][T10858] ? do_syscall_64+0x45/0x80 [ 332.691895][T10858] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.697962][T10858] ? sched_setscheduler_nocheck+0x30/0xb0 [ 332.703675][T10858] ? __rcu_read_unlock+0x51/0x250 [ 332.708692][T10858] ? _raw_spin_unlock+0x22/0x40 [ 332.713528][T10858] ? __rcu_read_unlock+0x51/0x250 [ 332.718538][T10858] ? d_walk+0x480/0x4c0 [ 332.722672][T10858] kcsan_setup_watchpoint+0x47b/0x4e0 [ 332.728047][T10858] ? d_invalidate+0x1b0/0x1b0 [ 332.732713][T10858] dput+0x2f/0x420 [ 332.736413][T10858] proc_invalidate_siblings_dcache+0x1eb/0x2d0 [ 332.742552][T10858] proc_flush_pid+0x16/0x20 [ 332.747037][T10858] release_task+0xc1e/0xd30 [ 332.751527][T10858] do_exit+0xf11/0x1690 [ 332.755667][T10858] do_group_exit+0xc8/0x170 [ 332.760161][T10858] get_signal+0xd5e/0x1440 [ 332.764567][T10858] arch_do_signal_or_restart+0x2a/0x270 [ 332.770108][T10858] ? __se_sys_futex+0x2a8/0x390 [ 332.774948][T10858] exit_to_user_mode_prepare+0x109/0x1a0 [ 332.780571][T10858] syscall_exit_to_user_mode+0x20/0x40 [ 332.786022][T10858] do_syscall_64+0x45/0x80 [ 332.790423][T10858] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 332.796297][T10858] RIP: 0033:0x45e219 [ 332.800169][T10858] Code: Unable to access opcode bytes at RIP 0x45e1ef. [ 332.806985][T10858] RSP: 002b:00007f440ac3acf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 332.815373][T10858] RAX: fffffffffffffe00 RBX: 000000000119bf88 RCX: 000000000045e219 [ 332.823320][T10858] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000119bf88 [ 332.831271][T10858] RBP: 000000000119bf80 R08: 0000000000000000 R09: 0000000000000000 [ 332.839219][T10858] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000119bf8c [ 332.847179][T10858] R13: 00007fff2af845ef R14: 00007f440ac3b9c0 R15: 000000000119bf8c [ 332.855817][T10858] Kernel Offset: disabled [ 332.860173][T10858] Rebooting in 86400 seconds..