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") 12:19:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6, 0x0}) 12:19:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) [ 1136.078984][T26820] loop4: detected capacity change from 0 to 2048 [ 1136.112186][T26823] loop3: detected capacity change from 0 to 2048 12:19:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7, 0x0}) 12:19:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x8, 0x4) [ 1136.152813][T26820] FAT-fs (loop4): bogus logical sector size 0 [ 1136.169351][T26820] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1136.211145][T26769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:19:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x400448e1, 0x0) 12:19:11 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01020000aabb21fd3d2556b100000800010000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x564}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x4008021) 12:19:11 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:11 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7fe97b6a6ac0dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:11 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000ab40)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000080)='\f', 0x1, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000005a80)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000180)=""/111, 0x6f}, {0x0}], 0x2, &(0x7f0000000280)}}], 0x1, 0x0, 0x0) 12:19:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x8, 0x0}) 12:19:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300, 0x0}) 12:19:11 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x4) [ 1136.619056][T26841] loop4: detected capacity change from 0 to 2048 [ 1136.650290][T26841] FAT-fs (loop4): bogus logical sector size 0 [ 1136.696503][T26841] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1136.734588][T26842] loop3: detected capacity change from 0 to 2048 [ 1136.754001][T26798] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:19:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:12 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc0884123, 0x0) 12:19:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500, 0x0}) 12:19:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000100)) 12:19:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a796b6a6ac0dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") [ 1137.122450][T26856] loop3: detected capacity change from 0 to 2048 [ 1137.162409][T26862] loop4: detected capacity change from 0 to 2048 12:19:12 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01020000aabb21fd3d2556b100000800010000000000"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x564}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x4008021) 12:19:12 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8}]}, 0x2c}}, 0x0) 12:19:12 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1d2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d", 0x0, 0x0, {}, {}, 0xc59, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}) getuid() setreuid(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pidfd_getfd(0xffffffffffffffff, r1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) dup(0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:19:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600, 0x0}) 12:19:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFqE3EcB/Bf2jSNLnYWhwMRnIp1czIiVcSCoGTQyYJ1yYmYLJcs5hF8AB/CR/AxHFzdJVO3k/ROY09tUpp4aD+f5b78v7/jf/9cSJ5fedV78Xrw8tO799HuNGKtE604bMRWrEWM40h5AQD+E4d5Hl/zwqlvfvNhJc8EAKzWmf7/AYB/0pOnzx7eaeztPk6SdsRknHWzbow746xb9Pce7O3eSKZaP901ybLu+o9+Jykc7zfiYtnf/G3fiutXi37a3X20V+k34+3KTw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOfbdpI0IyJJkmRrtjrJsu560W8n31X66bVcKgeO98243Dx574/XGks9CwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA2g+Got5+mB/2jkOd5Pl2drcwJm4sOf7lQ3Wtp4X5EDDcrVcTnxU8xN+xcipg73J5+cq2IWPYBTw6d8k3+1U1rCrfnzpzq21uEW7HAyz1/oc5fJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoE6D4ai3n6YH/cFsrV3nAwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtRsMR739ND3oV0JEbJQj1eoPoVmO/1rVeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgRt8CAAD//4XoH3M=") [ 1137.225720][T26862] FAT-fs (loop4): bogus logical sector size 0 [ 1137.298296][T26862] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:12 executing program 1: mlock(&(0x7f0000fec000/0x14000)=nil, 0x14000) mmap(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x0) 12:19:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700, 0x0}) 12:19:12 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000004580), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000045c0)) 12:19:12 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a7feb6a6ac0dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xb29, 0x0}) 12:19:12 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) 12:19:12 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1137.823680][T26887] loop4: detected capacity change from 0 to 2048 [ 1137.859818][T26887] FAT-fs (loop4): bogus logical sector size 0 [ 1137.866158][T26887] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1137.901829][T26892] loop3: detected capacity change from 0 to 2048 12:19:13 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01020000aabb21fd3d2556b100000800010000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x5c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x564}, @NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x5c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7fff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x4008021) 12:19:13 executing program 0: pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x3000)=nil, 0x930, 0x0, 0x2031, 0xffffffffffffffff, 0x0) 12:19:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1425, 0x0}) 12:19:13 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x22740, 0x0) close(r0) 12:19:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b4a6ac0dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:13 executing program 1: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000000c0)={0x0, 0x2, [{0xffffffffffffffff, 0x0, 0x0, 0x1000000}, {0xffffffffffffffff, 0x0, 0x0, 0x2000}]}) 12:19:13 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) 12:19:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1472, 0x0}) [ 1138.219811][T26903] loop4: detected capacity change from 0 to 2048 12:19:13 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) [ 1138.278421][T26903] FAT-fs (loop4): bogus logical sector size 0 [ 1138.288438][T26907] loop3: detected capacity change from 0 to 2048 [ 1138.301201][T26903] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1f00, 0x0}) 12:19:13 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 12:19:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797fea6ac0dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private, {[@ssrr={0x89, 0x3}]}}}}}) 12:19:14 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, 0x0, 0x4) socket$inet(0x2, 0x6, 0x9629) socket$vsock_stream(0x28, 0x1, 0x0) accept4$inet(r0, 0x0, &(0x7f0000000040), 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000000)={0x2, 'vlan1\x00', 0x4}, 0x18) 12:19:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2514, 0x0}) 12:19:14 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$CAPI_GET_SERIAL(r0, 0xc0104307, 0x0) 12:19:14 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r0, 0x40045108, &(0x7f0000000080)) 12:19:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x290b, 0x0}) 12:19:14 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) [ 1139.172041][T26934] loop4: detected capacity change from 0 to 2048 [ 1139.180113][T26935] loop3: detected capacity change from 0 to 2048 12:19:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="68010065b2ef8dc53655b48af6ae055d7e3f00", @ANYRES16=r2, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x10) 12:19:14 executing program 1: syz_io_uring_setup(0x4a6c, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x7fa5, &(0x7f0000000280), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) 12:19:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7214, 0x0}) [ 1139.213069][T26934] FAT-fs (loop4): bogus logical sector size 0 [ 1139.239460][T26934] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a5ac0dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="68010065b2ef8dc53655b48af6ae055d7e3f00", @ANYRES16=r2, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x10) 12:19:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0xc, 0x0, &(0x7f0000000040)) 12:19:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xff00, 0x0}) 12:19:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x0) setxattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000440)=@known='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) llistxattr(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) 12:19:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) 12:19:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="68010065b2ef8dc53655b48af6ae055d7e3f00", @ANYRES16=r2, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40}, 0x10) 12:19:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:14 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, 0x0) [ 1139.590559][ T26] audit: type=1400 audit(1677586754.874:622): avc: denied { mount } for pid=26961 comm="syz-executor.1" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 12:19:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 12:19:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), r0) syz_usb_connect$uac1(0x5, 0xef, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x58, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdd, 0x3, 0x1, 0x81, 0x70, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x7}, [@processing_unit={0xd, 0x24, 0x7, 0x5, 0x2, 0x3f, "0cb97512e2b8"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x202, 0x3, 0x7, 0x4, 0x3, 0xa0}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x1, 0x80, 0x3, 0x1, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x100, 0x6, 0x40, 0x2d50, 0xfd, 0x8}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x1, "c5f8964e"}, @processing_unit={0x9, 0x24, 0x7, 0x6, 0x5, 0xe0, '\r.'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x7, 0x8, "35fc3b"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xa3, 0x1ff, 0x9, "eb95a374e79d16f7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfd, 0x0, 0x4, {0x7, 0x25, 0x1, 0x81, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xff, 0x8001, 0x8, "77dd9a89"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x1, 0xfb, 0x5, "d0b9b09b17e39fe6f4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x80, 0x79, 0xe5, {0x7, 0x25, 0x1, 0x82, 0x9, 0x4}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0x8, 0xd3, 0x20, 0x7}, 0x3c, &(0x7f0000000180)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x40, 0xa1, 0x8}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x4, 0xf007, 0x9, [0xc03f, 0xc0, 0xc0c0, 0x18f]}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x24, 0x1f, 0x1000, 0x4}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x446}}, {0xf7, &(0x7f0000000200)=@string={0xf7, 0x3, "f8d0c88603ce608d4822772c8735e285d7dcfa7e5d1f319239249d15f9d7638dc39023d892050eb3cc0cdf7a605e75ea20dcddc7f521f479ccc3a22aa0c6f0c60aa34a76c24711c3f9564d72e4bafcc87bf357117408ccaf0ac47beb8959ea91b3674b778a660870cdc72d894a041f6c2c91539689641a2f2c99eb6140ae9d9d7acf43595fe46f4322814bab1582d851e63c87ffd6b23a8bf93a56d2de9fddc207de94ee4d031f5453df97c760e86c5534b6789bd171637371939d3408c38e02f43e746633d80000ebee2c8963e3e601bd06a834864d12096ae5da978f4a23ac192b5bf9c1573a3175be109c99b0a14ad5fea64096"}}]}) [ 1139.718205][ T26] audit: type=1400 audit(1677586754.924:623): avc: denied { unmount } for pid=18833 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 12:19:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="01000000000000000000020000400800010200000000"], 0x1c}}, 0x0) [ 1139.774060][T26964] loop4: detected capacity change from 0 to 2048 [ 1139.828406][T26964] FAT-fs (loop4): bogus logical sector size 0 [ 1139.861832][T26964] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1139.891268][T26972] loop3: detected capacity change from 0 to 2048 12:19:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6feac0dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:15 executing program 1: r0 = socket(0x1e, 0x80001, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast1}}) 12:19:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2000000, 0x0}) 12:19:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="01000000000000000000020000400800010200000000"], 0x1c}}, 0x0) 12:19:15 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:15 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x1, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, 0x0) 12:19:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x3000000, 0x0}) 12:19:15 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r5) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="01000000000000000000020000400800010200000000"], 0x1c}}, 0x0) [ 1140.168289][ T21] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1140.201969][T26986] loop4: detected capacity change from 0 to 2048 12:19:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000500)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x0, @dev}, {0x2, 0x0, @private}, 0x335, 0x0, 0x0, 0x0, 0x1ff, &(0x7f00000004c0)='vlan0\x00', 0x1, 0x3, 0x9}) [ 1140.224111][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1140.226001][T26989] loop3: detected capacity change from 0 to 2048 [ 1140.268836][T26986] FAT-fs (loop4): bogus logical sector size 0 [ 1140.280944][T26986] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:15 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6a50dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1140.408480][ T21] usb 1-1: device descriptor read/64, error 18 [ 1140.648651][T27001] loop4: detected capacity change from 0 to 2048 [ 1140.678261][ T21] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1140.688621][T27001] FAT-fs (loop4): bogus logical sector size 0 [ 1140.708530][T27001] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1140.878579][ T21] usb 1-1: device descriptor read/64, error 18 [ 1141.002261][ T21] usb usb1-port1: attempt power cycle [ 1141.438398][ T21] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1141.558331][ T21] usb 1-1: Invalid ep0 maxpacket: 88 [ 1141.718288][ T21] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1141.858529][ T21] usb 1-1: Invalid ep0 maxpacket: 88 [ 1141.864211][ T21] usb usb1-port1: unable to enumerate USB device 12:19:18 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @rand_addr, @multicast2}, 0xc) 12:19:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x4000000, 0x0}) 12:19:18 executing program 1: syz_open_dev$vcsu(&(0x7f0000000100), 0xffffffffffffffff, 0x20a200) 12:19:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:18 executing program 2: ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'vlan0\x00', {}, 0x9}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x19}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001000000000008000100010000000800010000000000"], 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x9c8f3e1d62054abd}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008801}, 0x40000) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x15, &(0x7f00000011c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0107000000000000000002000000080002000200000008000200020000000900021402000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x880) 12:19:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6fe0dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:18 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000000)={'sit0\x00', 0x0}) 12:19:18 executing program 2: ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'vlan0\x00', {}, 0x9}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x19}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x19}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001000000000008000100010000000800010000000000"], 0x2c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001000000000008000100010000000800010000000000"], 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x9c8f3e1d62054abd}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008801}, 0x40000) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x15, &(0x7f00000011c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0107000000000000000002000000080002000200000008000200020000000900021402000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x880) 12:19:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x5000000, 0x0}) 12:19:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000380), r0) 12:19:18 executing program 0: getitimer(0x0, &(0x7f0000000400)) [ 1143.007478][T27011] loop4: detected capacity change from 0 to 2048 [ 1143.017488][T27008] loop3: detected capacity change from 0 to 2048 [ 1143.040668][T27011] FAT-fs (loop4): bogus logical sector size 0 12:19:18 executing program 2: ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'vlan0\x00', {}, 0x9}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x19}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001000000000008000100010000000800010000000000"], 0x2c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x9c8f3e1d62054abd}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008801}, 0x40000) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x15, &(0x7f00000011c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0107000000000000000002000000080002000200000008000200020000000900021402000000"], 0x2c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x880) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0)={0x0, 'vlan0\x00', {}, 0x9}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SF_ORD={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x19}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x4}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x19}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x4050) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080001000000000008000100010000000800010000000000"], 0x2c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x24, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x9c8f3e1d62054abd}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008801}, 0x40000) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x15, &(0x7f00000011c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0107000000000000000002000000080002000200000008000200020000000900021402000000"], 0x2c}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x880) (async) [ 1143.074292][T27011] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:18 executing program 1: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 12:19:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x6000000, 0x0}) 12:19:18 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) 12:19:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:18 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac08cb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:18 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) 12:19:18 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 12:19:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7000000, 0x0}) 12:19:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8208410}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4004) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000062614019020000000800010000000000e2447bb398ca4d32643bc6a2d02d01213340409e0c6132b63d0289729e15278a625bdfa266c3772dde0519c52102ed53f09e53368748402f5605410e5d619a967e9df0b213189e1de96fa440e85a606814e0b699322ce0946925951c5af604052dfab4a1d36a77f4cebe5828f508801f5eeae0af970649662560cd53762ddbbdfc49b2e34341ff3dca67f0d2536c37bae01f2b066edc0fe8bd29086fa5da322e9f5f56292193e0fccc6bb6038d7403028ad2055f448331"], 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000009}, 0x4004090) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 12:19:18 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1b1u01AYBuAvbZoGFjojBkssnSrKxkQQKghRCQmUASYqEZYYIZLFyUIugQvgIrgcBlZ2lKmbUWpDqPlJqiZY0OdZ/Oq8n3V84ih5fu1V/8Xr4cuP795Hu9OIjU604rgRO7ERMYkT5QUA+E8c53l8yQtnvvnNh7U8EwCwXuf6/wcA/klPnj57eKdxePA4SdoR00nWzbox6UyybtHfe3B4cCOZaf1w1zTLupvf+/2kcLrfistlf/OXfSt2rxf9rLv76LDSb8fbtZ8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAutr0kaUZEkiTJznx1mmXdzaLfS76p9LNruVQOnO6bcbW5YPPdxiqPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzTcDTuH6Vpb3AS8jzPZ6vzlQVhe9nhz5eqe60s3I+I0Xalivi0/CkWhv0rEQuH27NPrhURqz7gn0OnfJN/ddOawu2FM2f69hbhVizxci9eqPNXCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNNwNO4fpWlvMJyvtet8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgdsPRuH+Upr1BJUTEVjlSrX4TmuX4z1WNxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABq9DUAAP//58Aetg==") 12:19:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x8000000, 0x0}) 12:19:18 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) 12:19:18 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x7, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) [ 1143.508933][T27040] loop4: detected capacity change from 0 to 2048 12:19:18 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8208410}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4004) (async) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000062614019020000000800010000000000e2447bb398ca4d32643bc6a2d02d01213340409e0c6132b63d0289729e15278a625bdfa266c3772dde0519c52102ed53f09e53368748402f5605410e5d619a967e9df0b213189e1de96fa440e85a606814e0b699322ce0946925951c5af604052dfab4a1d36a77f4cebe5828f508801f5eeae0af970649662560cd53762ddbbdfc49b2e34341ff3dca67f0d2536c37bae01f2b066edc0fe8bd29086fa5da322e9f5f56292193e0fccc6bb6038d7403028ad2055f448331"], 0x1c}}, 0x0) (async) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000009}, 0x4004090) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1143.605392][T27040] FAT-fs (loop4): bogus logical sector size 0 [ 1143.618256][T27040] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:18 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) 12:19:19 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x48}, 0x4) 12:19:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0ccb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x14720000, 0x0}) 12:19:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8208410}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4004) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r2) (async) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01000000000000000062614019020000000800010000000000e2447bb398ca4d32643bc6a2d02d01213340409e0c6132b63d0289729e15278a625bdfa266c3772dde0519c52102ed53f09e53368748402f5605410e5d619a967e9df0b213189e1de96fa440e85a606814e0b699322ce0946925951c5af604052dfab4a1d36a77f4cebe5828f508801f5eeae0af970649662560cd53762ddbbdfc49b2e34341ff3dca67f0d2536c37bae01f2b066edc0fe8bd29086fa5da322e9f5f56292193e0fccc6bb6038d7403028ad2055f448331"], 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) (async) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000009}, 0x4004090) (async) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000009}, 0x4004090) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1143.751369][T27053] loop3: detected capacity change from 0 to 2048 12:19:19 executing program 0: read$sequencer(0xffffffffffffffff, &(0x7f0000000100)=""/31, 0x1f) 12:19:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01wYBuAvbZrm/xc6IwZLLJ0qysZEECoIUQkJlAEmKhGWGCGSxclCLoEL4CK4HAZWdpSpm1FqQ6iBJlUTLOjzLH513s86PnGUPL/2qv/i9fDlx3fvo91pxEYnWnHciJ3YiJjEifICAPwjjvM8vuSFc9/85sNangkAWK8L/f8DAH+lJ0+fPbzTODx4nCTtiOkk62bdmHQmWbfo7z04PLiRzLR+uGuaZd3N7/1+Ujjdb8X/ZX/zl30rdq8X/ay7++iw0m/H27WfHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALre9JGlGRJIkyc58dZpl3c2i30u+qfSza7lUDpzum3G1efbend3GSs8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXMxwNO4fpWlvcBLyPM9nq/OVBWF72eHP/1X3Wlm4HxGj7UoV8Wn5UywM+1ciFg63Z59cKyJWfcCzQ6d8k39005rC7YUz5/r2FuFWLPFyL1+o81cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo03A07h+laW8wnK+163wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB2w9G4f5SmvUElRMRWOVKtfhOa5fjPVY3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGr0NQAA///8yB72") 12:19:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x0, 'macvlan0\x00'}, 0x18) 12:19:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1f000000, 0x0}) 12:19:19 executing program 0: read$sequencer(0xffffffffffffffff, &(0x7f0000000100)=""/31, 0x1f) 12:19:19 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000006540)='[', 0x1) 12:19:19 executing program 2: r0 = landlock_create_ruleset(&(0x7f0000000000)={0x200}, 0x8, 0x0) fchmod(r0, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1144.013182][T27072] loop4: detected capacity change from 0 to 2048 [ 1144.045149][T27072] FAT-fs (loop4): bogus logical sector size 0 12:19:19 executing program 0: read$sequencer(0xffffffffffffffff, &(0x7f0000000100)=""/31, 0x1f) 12:19:19 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) 12:19:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0ecb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x25140000, 0x0}) 12:19:19 executing program 2: r0 = landlock_create_ruleset(&(0x7f0000000000)={0x200}, 0x8, 0x0) fchmod(r0, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x200}, 0x8, 0x0) (async) fchmod(r0, 0x88) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) [ 1144.089721][T27072] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1144.101904][T27082] loop3: detected capacity change from 0 to 2048 12:19:19 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2800, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) 12:19:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:19 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x7, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) 12:19:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x290b0000, 0x0}) 12:19:19 executing program 2: r0 = landlock_create_ruleset(&(0x7f0000000000)={0x200}, 0x8, 0x0) fchmod(r0, 0x88) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) (async) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1144.360643][T27097] loop4: detected capacity change from 0 to 2048 [ 1144.395462][T27097] FAT-fs (loop4): bogus logical sector size 0 12:19:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) 12:19:19 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2800, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) [ 1144.406513][T27097] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff, 0x0}) 12:19:19 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0fcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:19 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) 12:19:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0xb, 0x0, &(0x7f0000000280)) 12:19:19 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x2800, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) [ 1144.522575][T27107] loop3: detected capacity change from 0 to 2048 12:19:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xff000000, 0x0}) 12:19:19 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r0, 0x4004510f, &(0x7f0000000240)) 12:19:19 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:20 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) 12:19:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) 12:19:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffdfd, 0x0}) 12:19:20 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x1, 0x0, 0x0, [{}]}, 0x88) 12:19:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x400, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0) [ 1144.796197][T27124] loop4: detected capacity change from 0 to 2048 [ 1144.857758][T27124] FAT-fs (loop4): bogus logical sector size 0 [ 1144.882927][T27124] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1144.883612][T27131] loop3: detected capacity change from 0 to 2048 [ 1144.909418][T26769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:19:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac10cb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:20 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) 12:19:20 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) 12:19:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffff7f, 0x0}) 12:19:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) 12:19:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0) 12:19:20 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$sequencer(r0, &(0x7f0000000100)=""/31, 0x1f) 12:19:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x100000000000000, 0x0}) 12:19:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01000000000000002b00020000000800010000000000c80b2122ced2e20dfd0dd18d40ae8949230bd83f4e6e1854659305b22287d93acb8e42c5d9f661f2a219bdf708d6cf9c6ecf9024f8096dd70d409e844f9b9c80e171be93b51f59fc764f79aa3ecaab531046f2ee998c3071aaf09bc0c9658e20f451b245b72b17bc51049f1699ab0d513e948dd4aa64ba044674d5f828e44063d65da9a9189a23488f9a5041f53925b582713aa088ecc4b2704f160acdff1ea40fc36cbb1a6801017839279f3b945b9223d7d0becfbbfe5a2c4adda91fad4756af9be5c7fa5637a94ab23f598863a373b8db07abf031195032e6f36544acc5245403a1e0a1401a3fc486c2090a0fbbbc8f19e2eaea66362f39454b0efe2c4dbfc89a1723df7d019d741c50dbb2003ba2e42c03d9e158b26b8e9e301110b49d564b9835171cdce900af6726cede2911b62fddf9ed26b1c1467b230af47d87e2e1355aa8c9386911bbc0b4cc7f8ae71067093411b1c78d4d177e329d1fc097c11cca25e169b83fab0380af63d285161a825f65ea73e8722ccdc8b02eb886532ad4104a74e2ceb579964179440b2402d6dd1571ca9de4de25b55f395c9c2d284d6fec06deafe8b0c730c4158757009e71a124fbdd92e208a812972472c2b17f7d723ff2e7fca0b89dec083f6ee3cce401d69dc2d7dadf2b89a2b5f6957ae3536a99f1b7bd844904e7d3539f981cc68eca5e257b5212dd26b2b8816eba20df1a710f8c71b24bc80a6b228cd37356714d965502082103fd3ad9756d726fc9b3d7b9a50ea85c2719e7843ac41b295a102649c00eef06aa1d7ac69198a09b8da2450abebdca9db533473336f27c4c9662c5998365b1508c48ef75315c5ae75769f2a40a6982d1b3b86ca5135a5eb3b6131cf9af4af5855cfa6a577d58bd0e938c8296"], 0x1c}}, 0x0) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) 12:19:20 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f0000000100)=""/31, 0x1f) [ 1145.216165][T27153] loop3: detected capacity change from 0 to 2048 [ 1145.247460][T27156] loop4: detected capacity change from 0 to 2048 [ 1145.254458][T27161] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 12:19:20 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000000)) [ 1145.286987][T27156] FAT-fs (loop4): bogus logical sector size 0 [ 1145.313245][T27156] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:20 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac12cb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x200000000000000, 0x0}) 12:19:20 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:20 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f0000000100)=""/31, 0x1f) 12:19:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[], 0x14}}, 0x0) 12:19:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x300000000000000, 0x0}) 12:19:20 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(0xffffffffffffffff, &(0x7f0000000100)=""/31, 0x1f) 12:19:20 executing program 1: socketpair(0x25, 0x5, 0x9, &(0x7f00000002c0)) [ 1145.582521][T27175] loop3: detected capacity change from 0 to 2048 [ 1145.603577][T27178] loop4: detected capacity change from 0 to 2048 12:19:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000080) 12:19:20 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(r0, 0x0, 0x0) [ 1145.646906][T27178] FAT-fs (loop4): bogus logical sector size 0 12:19:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x400000000000000, 0x0}) [ 1145.689957][T27178] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac3ecb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:21 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(r0, 0x0, 0x0) 12:19:21 executing program 1: syz_open_dev$vcsu(&(0x7f0000000180), 0x0, 0x1a9443) 12:19:21 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) read$sequencer(r0, 0x0, 0x0) 12:19:21 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r0, &(0x7f0000000000)='R', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 12:19:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x500000000000000, 0x0}) [ 1145.966694][T27193] loop3: detected capacity change from 0 to 2048 12:19:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:21 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0xff, 0xffffffffffffffff, 0x1}) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x24}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000041) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x3) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r10}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x0, 0x6, 0x4, 0x2, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x40, 0x8000, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x7, 0x7, 0x58, @private0, @local, 0x10, 0x40, 0xffffffff, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x4, 0x38, 0x1f, 0x40, 0x2, @private0, @remote, 0x4c4e929878f11d2a, 0x8000, 0x5, 0xd01}}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r15, &(0x7f0000000000)={0x1d, r16}, 0x10) r17 = socket$inet_udplite(0x2, 0x2, 0x88) r18 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r17, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r18, &(0x7f0000000000)={0x1d, r19}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000b80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1ec, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4040}, 0x8001) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 12:19:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x600000000000000, 0x0}) 12:19:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'gretap0\x00', 0x0}) 12:19:21 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000080)={"a0a19d17c97829bfffc9b42b661491e1aefcca01b10681049eaeb5372ce3", 0x80000001}) [ 1146.113470][T27200] loop4: detected capacity change from 0 to 2048 [ 1146.133903][T27200] FAT-fs (loop4): bogus logical sector size 0 [ 1146.174474][T27200] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x700000000000000, 0x0}) 12:19:21 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac5dcb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:21 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1b1u01AYBuAvbZoGFjojBkssiKGibEwEoYIQlZBAGWCiEmGJESJZnCzkErgALoLLYWBlR5m6GaU2hJqfpGqCBX2exa/O+1nHJ46S51de9V+8Hr78+O59tDuN2OhEK44asRMbEZM4Vl4AgP/EUZ7Hl7xw6pvffFjLMwEA63Wm/38A4J/05Omzh3caB/uPk6QdMZ1k3awbk84k6xb9vQcH+zeSmdYPd02zrLv5vd9LCif7rbhY9jd/2bfi2tWin3V3Hx1U+u14u/bTAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+babJM2ISJIk2ZmvTrOsu1n0u8k3lX52LZfKgZN9My43F2x+vbHKowAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnNByN+4dp2hschzzP89nqfGVB2F52+POF6l4rC/cjYrRdqSI+LX+KhWHvUsTC4fbsk2tFxKoP+OfQKd/kX920pnB74cypvr1FuBVLvNzzF+r8VQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOo0HI37h2naGwzna+06HwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqN1wNO4fpmlvUAkRsVWOVKvfhGY5/nNV4/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAGn0NAAD//6hqHrg=") 12:19:21 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001280)={0x2, 0x4e20, @multicast2}, 0x10) 12:19:21 executing program 1: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) 12:19:21 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}}) 12:19:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x800000000000000, 0x0}) [ 1146.519620][T27223] loop3: detected capacity change from 0 to 2048 [ 1146.544718][T27227] loop4: detected capacity change from 0 to 2048 [ 1146.572437][T27227] FAT-fs (loop4): bogus logical sector size 0 [ 1146.583827][T26769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1146.621550][T27227] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0xff, 0xffffffffffffffff, 0x1}) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x24}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000041) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x3) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x3) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r10}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x0, 0x6, 0x4, 0x2, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x40, 0x8000, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x7, 0x7, 0x58, @private0, @local, 0x10, 0x40, 0xffffffff, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x4, 0x38, 0x1f, 0x40, 0x2, @private0, @remote, 0x4c4e929878f11d2a, 0x8000, 0x5, 0xd01}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r15, &(0x7f0000000000)={0x1d, r16}, 0x10) (async) bind$can_raw(r15, &(0x7f0000000000)={0x1d, r16}, 0x10) r17 = socket$inet_udplite(0x2, 0x2, 0x88) r18 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r17, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r17, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r18, &(0x7f0000000000)={0x1d, r19}, 0x10) (async) bind$can_raw(r18, &(0x7f0000000000)={0x1d, r19}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000b80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1ec, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4040}, 0x8001) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 12:19:22 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter, 0x48) 12:19:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f00000005c0)={0x2, 0x4e23, @remote}, 0x10) 12:19:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01wYBuAvbZrm/xc6IwZLLIihomxMBKGCEJWQQBlgohJhiREiWZws5BK4AC6Cy2FgZUeZuhmlNoQaaFI1wYI+z+JX5/2s4xNHyfMrr/ovXg9ffnz3PtqdRmx0ohVHjdiJjYhJHCsvAMA/4ijP40teOPPNbz6s5ZkAgPU61/8/APBXevL02cM7jYP9x0nSjphOsm7WjUlnknWL/t6Dg/0byUzrh7umWdbd/N7vJYWT/Vb8X/Y3f9m34trVop91dx8dVPrteLv20wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMW2myTNiEiSJNmZr06zrLtZ9LvJN5V+di2XyoGTfTMuN0/fu3O9sdKzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOczHI37h2naGxyHPM/z2ep8ZUHYXnb483/VvVYW7kfEaLtSRXxa/hQLw96liIXD7dkn14qIVR/w9NAp3+Qf3bSmcHvhzJm+vUW4FUu83IsX6vxVAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6jQcjfuHadobDOdr7TofCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo3XA07h+maW9QCRGxVY5Uq9+EZjn+c1Xj8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAafQ0AAP//vXIe+A==") 12:19:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1472000000000000, 0x0}) [ 1146.735275][T26799] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1146.766343][T26799] Buffer I/O error on dev loop4, logical block 1, async page read 12:19:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6acfecb0a5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:22 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0xfffffff8, 0x220, 0x9, 0x8, 0x5, 0x7fffffff], 0x6, 0x800, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f00000000c0)={"77da5ff0c1304e23aa3e5bc810d0a4ca773a7153e94445be4c5df2c9d411", 0x6, 0x2, 0x9, [0x5c6, 0x80000000, 0xfffffffd, 0x1, 0x8001, 0x6, 0x6, 0x9, 0xfffff607, 0x0, 0x7, 0x1, 0x8, 0x81, 0x4, 0xc3, 0x0, 0x9]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) getresuid(&(0x7f0000004180), &(0x7f00000041c0), &(0x7f0000004200)=0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000004280)={0x1, 'veth1_to_hsr\x00', 0x2}, 0x18) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000180)={0x90, 0xfffffffffffffffe, 0x0, {0x5, 0x1, 0xfffffffffffffff7, 0x0, 0x2, 0x9, {0x0, 0x3, 0x80, 0xfffffffffffffffc, 0x0, 0x700, 0x0, 0x200, 0x401, 0x1000, 0x1, r3, 0xee00, 0x2}}}, 0x90) read$FUSE(r0, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f00000041c0)={0x90, 0x0, r2, {0x6, 0x2, 0x3ff, 0x6, 0x2c0, 0x1, {0x1, 0x5, 0x800, 0x9, 0xfffffffffffffff7, 0x5, 0x3, 0xffff6aa8, 0x49b94cf4, 0xc000, 0x8, r3, r4, 0xbe1, 0x1260}}}, 0x90) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000000)={0x48}, 0x4) [ 1146.813321][T26799] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 12:19:22 executing program 1: socketpair(0x3, 0x0, 0xcc1, &(0x7f00000002c0)) [ 1146.873339][T26799] Buffer I/O error on dev loop4, logical block 2, async page read [ 1146.935286][T26799] I/O error, dev loop4, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1146.973513][T27238] loop3: detected capacity change from 0 to 2048 12:19:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1f00000000000000, 0x0}) [ 1147.006364][T26799] Buffer I/O error on dev loop4, logical block 3, async page read [ 1147.016926][T26769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1147.038627][T26799] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 12:19:22 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:22 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x0, 0x1) read$FUSE(r0, 0x0, 0x0) [ 1147.060038][T27252] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 2, id = 0 12:19:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, &(0x7f0000000140)) [ 1147.123584][T26799] Buffer I/O error on dev loop4, logical block 4, async page read [ 1147.130700][T27246] loop4: detected capacity change from 0 to 2048 12:19:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0xff, 0xffffffffffffffff, 0x1}) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x24}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000041) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r8, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x3) socket$can_raw(0x1d, 0x3, 0x1) (async) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r9, &(0x7f0000000000)={0x1d, r10}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6gre0\x00', 0x0, 0x0, 0x6, 0x4, 0x2, 0x21, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x40, 0x8000, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x7, 0x7, 0x58, @private0, @local, 0x10, 0x40, 0xffffffff, 0x800}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x2f, 0x1, 0x7, 0x7, 0x58, @private0, @local, 0x10, 0x40, 0xffffffff, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0x4, 0x38, 0x1f, 0x40, 0x2, @private0, @remote, 0x4c4e929878f11d2a, 0x8000, 0x5, 0xd01}}) socket$inet_udplite(0x2, 0x2, 0x88) (async) r14 = socket$inet_udplite(0x2, 0x2, 0x88) r15 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r15, &(0x7f0000000000)={0x1d, r16}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) r17 = socket$inet_udplite(0x2, 0x2, 0x88) socket$can_raw(0x1d, 0x3, 0x1) (async) r18 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r17, 0x8933, &(0x7f0000000700)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r17, 0x8933, &(0x7f0000000700)={'vcan0\x00', 0x0}) bind$can_raw(r18, &(0x7f0000000000)={0x1d, r19}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000b80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x1ec, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x4040}, 0x8001) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1147.191622][T27246] FAT-fs (loop4): bogus logical sector size 0 12:19:22 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb025d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1147.278503][T27246] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:22 executing program 1: r0 = syz_io_uring_setup(0x129e, &(0x7f0000000000), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) write$FUSE_WRITE(r0, 0x0, 0x0) 12:19:22 executing program 0: syz_io_uring_setup(0x3bc6, &(0x7f0000000040)={0x0, 0x8561, 0x2, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 12:19:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x2514000000000000, 0x0}) [ 1147.455974][T27265] loop3: detected capacity change from 0 to 2048 [ 1147.463229][T26798] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1147.463360][T26798] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 12:19:22 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1147.541535][ T26] audit: type=1400 audit(1677586762.824:624): avc: denied { sqpoll } for pid=27271 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 12:19:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) 12:19:22 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f00000007c0)=ANY=[]}) 12:19:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x290b000000000000, 0x0}) [ 1147.623414][T26798] Buffer I/O error on dev loop3, logical block 0, async page read 12:19:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1147.730075][T27282] loop4: detected capacity change from 0 to 2048 [ 1147.757030][ T26] audit: type=1400 audit(1677586763.034:625): avc: denied { bind } for pid=27285 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 12:19:23 executing program 0: socketpair(0x25, 0x5, 0x0, &(0x7f00000002c0)) 12:19:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf2506000000080011000000000005"], 0x24}}, 0x0) [ 1147.781343][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:19:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1147.866062][T27282] FAT-fs (loop4): bogus logical sector size 0 [ 1147.909964][T27282] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb035d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfdfdffff00000000, 0x0}) 12:19:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 12:19:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}) 12:19:23 executing program 0: syz_io_uring_setup(0x2eea, &(0x7f0000000000)={0x0, 0x0, 0x4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 12:19:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xff00000000000000, 0x0}) 12:19:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f00000022c0)) 12:19:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 12:19:23 executing program 0: socketpair(0x1d, 0x0, 0x0, &(0x7f00000002c0)) [ 1148.276834][T27307] loop4: detected capacity change from 0 to 2048 [ 1148.313962][T27307] FAT-fs (loop4): bogus logical sector size 0 12:19:23 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcf) [ 1148.323287][T27308] loop3: detected capacity change from 0 to 2048 [ 1148.340901][T27307] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 12:19:23 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb045d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffff7f00000000, 0x0}) 12:19:23 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:23 executing program 1: socket$inet(0x2, 0x8080f, 0x0) [ 1148.533827][ T26] audit: type=1400 audit(1677586763.814:626): avc: denied { read } for pid=27320 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 12:19:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffffff00000000, 0x0}) 12:19:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) [ 1148.665322][T27330] loop4: detected capacity change from 0 to 2048 [ 1148.692130][T26769] Buffer I/O error on dev loop4, logical block 0, async page read [ 1148.697822][T27332] loop3: detected capacity change from 0 to 2048 12:19:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @private}}}}) [ 1148.713556][T26798] Buffer I/O error on dev loop3, logical block 0, async page read [ 1148.746838][T27330] FAT-fs (loop4): bogus logical sector size 0 12:19:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x40) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x2000c000) [ 1148.781296][T27330] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1148.872093][T27322] can: request_module (can-proto-0) failed. 12:19:24 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) 12:19:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000007c0)={&(0x7f00000006c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf250600000008"], 0x24}}, 0x0) 12:19:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb055d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x40) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x2000c000) 12:19:24 executing program 0: getresuid(&(0x7f0000004180), 0x0, &(0x7f0000004200)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x4014013, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3bc6, &(0x7f0000000040)={0x0, 0x8561, 0x2, 0x1, 0x5d}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) [ 1149.087976][T27351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 12:19:24 executing program 1: r0 = syz_open_dev$vcsu(&(0x7f0000000880), 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) [ 1149.158939][T27346] loop3: detected capacity change from 0 to 2048 12:19:24 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x40) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) (async) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x2000c000) (async) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x811}, 0x2000c000) [ 1149.252489][T27352] loop4: detected capacity change from 0 to 2048 12:19:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1149.295520][T26769] Buffer I/O error on dev loop4, logical block 0, async page read 12:19:24 executing program 1: getresuid(&(0x7f0000004180), &(0x7f0000000000), &(0x7f0000000080)) 12:19:24 executing program 0: io_uring_setup(0x56ff, &(0x7f0000001140)={0x0, 0x0, 0x200}) [ 1149.342525][T27352] FAT-fs (loop4): bogus logical sector size 0 [ 1149.359356][T27352] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb065d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r0, 0x0, 0x0, 0x80c00) 12:19:24 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7f}]}) 12:19:24 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1b1u01AYBuAvbZoGFjojBkssDKiibEwEoYIQlZBAGWCiEmGJESJZnCzkErgALoLLYWBlR5m6GaU2hJqfpGqCBX2exa/O+1nHJ46S51de9V+8Hr78+O59tDuN2OhEK44asRMbEZM4Vl4AgP/EUZ7Hl7xw6pvffFjLMwEA63Wm/38A4J/05Omzh3caB/uPk6QdMZ1k3awbk84k6xb9vQcH+zeSmdYPd02zrLv5vd9LCif7rbhY9jd/2bfi2tWin3V3Hx1U+u14u/bTAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA+babJM2ISJIk2ZmvTrOsu1n0u8k3lX52LZfKgZN9My43F2x+vbHKowAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnNByN+4dp2hschzzP89nqfGVB2F52+POF6l4rC/cjYrRdqSI+LX+KhWHvUsTC4fbsk2tFxKoP+OfQKd/kX920pnB74cypvr1FuBVLvNzzF+r8VQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOo0HI37h2naGwzna+06HwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqN1wNO4fpmlvUAkRsVWOVKvfhGY5/nNV4/EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAGn0NAAD//2kUHro=") 12:19:24 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x3, 0xed, 0x5}, 0xc) 12:19:25 executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='netdevsim0\x00'}) [ 1149.696441][T27372] loop4: detected capacity change from 0 to 2048 [ 1149.727661][T27372] FAT-fs (loop4): bogus logical sector size 0 12:19:25 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom$inet(r0, 0x0, 0x8c, 0x10040, 0x0, 0x0) [ 1149.750452][T27372] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1149.756982][T27378] loop3: detected capacity change from 0 to 2048 12:19:25 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) 12:19:25 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb075d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:25 executing program 0: syz_io_uring_setup(0x4a6c, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 12:19:25 executing program 1: socketpair(0x23, 0x0, 0x1029a213, &(0x7f0000000380)) 12:19:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8890}, 0x2a6a7f622a957dc3) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x44200, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 12:19:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x32, 0x0, &(0x7f00000000c0)) 12:19:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x44}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8890}, 0x2a6a7f622a957dc3) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x44200, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r5) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x44}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8890}, 0x2a6a7f622a957dc3) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x44200, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) [ 1150.097491][T27396] loop3: detected capacity change from 0 to 2048 [ 1150.112260][T27391] loop4: detected capacity change from 0 to 2048 [ 1150.121153][T26769] blk_print_req_error: 6 callbacks suppressed [ 1150.121176][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1150.144769][T26798] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1150.158376][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1150.167572][T26769] Buffer I/O error on dev loop4, logical block 0, async page read 12:19:25 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x2, 0x0, @remote}, 0x10) 12:19:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1150.258255][T27391] FAT-fs (loop4): bogus logical sector size 0 12:19:25 executing program 1: socketpair(0x5, 0x80000, 0x4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x8400}, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000140)={'sit0\x00', 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'veth1_vlan\x00', 0x4}, 0x18) getresuid(&(0x7f0000004180), &(0x7f00000041c0), &(0x7f0000004200)=0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000180)={0x90, 0xfffffffffffffffe, 0x0, {0x5, 0x1, 0xfffffffffffffff7, 0x0, 0x2, 0x9, {0x0, 0x3, 0x80, 0xfffffffffffffffc, 0x0, 0x700, 0x0, 0x200, 0x401, 0x1000, 0x1, r2, 0xee00, 0x2}}}, 0x90) [ 1150.319193][T27391] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:25 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb085d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:25 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x44}}, 0x0) (async, rerun: 64) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:groupadd_exec_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8890}, 0x2a6a7f622a957dc3) (async, rerun: 64) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) (async) r7 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040), 0x44200, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80800008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1150.460882][T27407] loop3: detected capacity change from 0 to 2048 [ 1150.471492][ T26] audit: type=1400 audit(1677586765.754:627): avc: denied { create } for pid=27409 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 12:19:25 executing program 0: syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x941c0) [ 1150.507891][T27415] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_vlan, syncid = 4, id = 0 12:19:25 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) syz_open_dev$vcsu(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r1, &(0x7f0000000500)="0595cac192100842fa0003bff2895023cf02d9d0b6c1e45baf757e67daeb5409dcef68f2af92a4dedf2db0028f074901b69016481b0ec2c1dee4a959af789dd7cc5eaa281bec1e2e43d0776db783d1a5a535d084de37dae322891affb2c9b71e77d5d572f99c6470c26b13efea16f2bbcac993802683aa46f0b794427c3a834bac5a9f5934b9e7f9df379c695cb56183db4098966e", 0x95, 0x800, &(0x7f00000005c0)={0x2, 0x4e23, @remote}, 0x10) [ 1150.683578][T27418] loop4: detected capacity change from 0 to 2048 [ 1150.732146][T27418] FAT-fs (loop4): bogus logical sector size 0 [ 1150.770103][T27418] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000004280)={0x1, 'veth1_to_hsr\x00'}, 0x18) 12:19:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:26 executing program 0: socketpair(0x29, 0x5, 0x0, &(0x7f00000000c0)) 12:19:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb095d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:26 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1150.948389][T27432] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0 12:19:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @private}}}}) [ 1151.007159][T27430] loop3: detected capacity change from 0 to 2048 12:19:26 executing program 0: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x3f9c42, 0x0) 12:19:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1151.200960][T27437] loop4: detected capacity change from 0 to 2048 [ 1151.238308][T27437] FAT-fs (loop4): bogus logical sector size 0 12:19:26 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), 0xffffffffffffffff) [ 1151.264923][T27437] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:26 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x2002) 12:19:26 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0b5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1151.400045][T27444] loop3: detected capacity change from 0 to 2048 12:19:26 executing program 0: syz_open_dev$vim2m(&(0x7f0000000100), 0x8000000000000001, 0x2) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=@ipv4_getaddr={0x20, 0x16, 0x20, 0x70bd27, 0x25dfdbfb, {0x2, 0x20, 0x94, 0xfd}, [@IFA_FLAGS={0x8, 0x8, 0x82}]}, 0x20}, 0x1, 0x0, 0x0, 0x6020090}, 0x8000) socketpair(0x1f, 0x5, 0x10000, &(0x7f0000000b80)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000c40), 0x105000, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, 0x0, &(0x7f0000000ec0)) socketpair(0x20, 0x0, 0x1, &(0x7f0000000f80)) 12:19:26 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1151.595742][T27450] loop4: detected capacity change from 0 to 2048 [ 1151.631659][T27450] FAT-fs (loop4): bogus logical sector size 0 [ 1151.650399][ T26] audit: type=1400 audit(1677586766.934:628): avc: denied { create } for pid=27452 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1 [ 1151.651984][T27450] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) r6 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x11ed9454) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r6}, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xd0, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x6, 0x0, 0x7}, @fda={0x66646185, 0x7, 0x0, 0x3f}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x69, 0x0, &(0x7f0000000340)="1b924a5cbf0b8cc2da39383b0ec7791e8f41e119dfae9236de8d6aef90033586246ab5714bdb33aa2b33af1c0470c201faa8b88922b960a0ae840d6c353fe59611c27e1a059aec25cc9c477eb7dc119827a5acb08adac606a12cbb5951124da7577a96e9a308e5fb03"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1151.734511][T27453] loop3: detected capacity change from 0 to 2048 12:19:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0f5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = dup2(r2, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) (async) move_mount(r5, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x11ed9454) (async) r6 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x11ed9454) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r6}, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r6}, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xd0, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x6, 0x0, 0x7}, @fda={0x66646185, 0x7, 0x0, 0x3f}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x69, 0x0, &(0x7f0000000340)="1b924a5cbf0b8cc2da39383b0ec7791e8f41e119dfae9236de8d6aef90033586246ab5714bdb33aa2b33af1c0470c201faa8b88922b960a0ae840d6c353fe59611c27e1a059aec25cc9c477eb7dc119827a5acb08adac606a12cbb5951124da7577a96e9a308e5fb03"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000680)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 12:19:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:27 executing program 0: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002a80), 0x141441, 0x0) 12:19:27 executing program 1: io_uring_setup(0x8005c6f, &(0x7f0000000100)) 12:19:27 executing program 0: openat$incfs(0xffffffffffffffff, 0x0, 0x48100, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000740)=""/14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) io_uring_setup(0x33de, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x3, 0x136}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) 12:19:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) r6 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x11ed9454) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r6}, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xd0, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x6, 0x0, 0x7}, @fda={0x66646185, 0x7, 0x0, 0x3f}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x69, 0x0, &(0x7f0000000340)="1b924a5cbf0b8cc2da39383b0ec7791e8f41e119dfae9236de8d6aef90033586246ab5714bdb33aa2b33af1c0470c201faa8b88922b960a0ae840d6c353fe59611c27e1a059aec25cc9c477eb7dc119827a5acb08adac606a12cbb5951124da7577a96e9a308e5fb03"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r5, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) (async) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x11ed9454) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r6}, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xd0, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086303, r6}, @acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x6, 0x0, 0x7}, @fda={0x66646185, 0x7, 0x0, 0x3f}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @increfs_done={0x40106308, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd, @flat=@weak_handle={0x77682a85, 0x1, 0x2}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x69, 0x0, &(0x7f0000000340)="1b924a5cbf0b8cc2da39383b0ec7791e8f41e119dfae9236de8d6aef90033586246ab5714bdb33aa2b33af1c0470c201faa8b88922b960a0ae840d6c353fe59611c27e1a059aec25cc9c477eb7dc119827a5acb08adac606a12cbb5951124da7577a96e9a308e5fb03"}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) [ 1152.077563][T27460] loop4: detected capacity change from 0 to 2048 [ 1152.132852][T27460] FAT-fs (loop4): bogus logical sector size 0 12:19:27 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {0x0}}, 0x18) [ 1152.188572][T27460] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:27 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb105d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:27 executing program 0: sched_rr_get_interval(0x0, &(0x7f0000000780)) 12:19:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) [ 1152.337504][T27480] binder: BINDER_SET_CONTEXT_MGR already set [ 1152.343419][T27474] loop3: detected capacity change from 0 to 2048 12:19:27 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r4, 0xb9ad1852e55040a7, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r8, 0xb9ad1852e55040a7, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x200080c0) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1152.388990][T27480] binder: 27473:27480 ioctl 40046207 0 returned -16 12:19:27 executing program 0: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 12:19:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304e91308ea406c30c9450000a05b7340"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup3(r3, 0xffffffffffffffff, 0x80000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1152.472553][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 12:19:27 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8914, 0x0) 12:19:27 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01AUBuCTNk0DC50RgyUWpoqyMRGECkJUQgJlgIlKhCVGiGRxspBH4AF4CB6HgZUdZepmlNoQaqBJ1QQL+n2Lf93/WNc3jpIX1173X74Zvvr0/kO0O43Y6EQrjhqxExsRkzhWXgCA/8RRnsfXvHDmm99+XMszAQDrda7/fwDgn/T02fNHdxsH+0+SpB0xnWTdrBuTziTrFv39hwf7N5OZ1k93TbOsu/mj30sKJ/utuFz2t37bt+LG9aKfdfceH1T67Xi39tMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFtpskzYhIkiTZma9Os6y7WfS7yXeVfnYtl8qBk30zrjZP37uz21jpWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDzGY7G/cM07Q2OQ57n+Wx1vrIgbC87/OVSda+VhQcRMdquVBGflz/FwrB3JWLhcHv2ybUiYtUHPD10yjf5VzetKdxZOHOmb28RbscSL/fihTp/lQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDoNR+P+YZr2BsP5WrvOBwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAajccjfuHadobVEJEbJUj1eoPoVmO/1rVeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgRt8CAAD//z7GHvw=") [ 1152.584018][T27490] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1152.610800][T27496] binder: 27494:27496 unknown command 3909378820 [ 1152.620961][T27491] loop4: detected capacity change from 0 to 2048 [ 1152.662702][T27491] FAT-fs (loop4): bogus logical sector size 0 [ 1152.692355][T27496] binder: 27494:27496 ioctl c0306201 20000080 returned -22 12:19:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000140)={0x2, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000c80)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0xf}}], 0x1, 0x0) 12:19:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0x10}}, 0x0) 12:19:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) (rerun: 32) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r4, 0xb9ad1852e55040a7, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) (rerun: 64) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r8, 0xb9ad1852e55040a7, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x200080c0) (async) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1152.713379][T27491] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:28 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb145d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:28 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304e91308ea406c30c9450000a05b7340"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) dup3(r3, 0xffffffffffffffff, 0x80000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304e91308ea406c30c9450000a05b7340"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) dup3(r3, 0xffffffffffffffff, 0x80000) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) [ 1152.817185][T27500] loop3: detected capacity change from 0 to 2048 12:19:28 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4240, 0x0) 12:19:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r2) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r4, 0xb9ad1852e55040a7, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x20, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) (async) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), r1) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r8, 0xb9ad1852e55040a7, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r8, 0xb9ad1852e55040a7, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r8, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x200080c0) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 12:19:28 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x655a, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) [ 1152.945206][T27513] binder: 27512:27513 unknown command 3909378820 [ 1152.978367][T27513] binder: 27512:27513 ioctl c0306201 20000080 returned -22 [ 1153.047931][ T26] audit: type=1400 audit(1677586768.324:629): avc: denied { write } for pid=27517 comm="syz-executor.0" name="fb0" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1153.088009][T27513] binder: BINDER_SET_CONTEXT_MGR already set 12:19:28 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:28 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}}, 0x20}}, 0x0) 12:19:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffff7f00000000, 0x0}) [ 1153.108817][T27515] loop4: detected capacity change from 0 to 2048 [ 1153.150344][T27515] FAT-fs (loop4): bogus logical sector size 0 [ 1153.151270][T27520] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1153.170079][T27513] binder: 27512:27513 ioctl 40046207 0 returned -16 [ 1153.191333][T27515] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1153.199740][T27522] binder: BINDER_SET_CONTEXT_MGR already set [ 1153.258860][T27522] binder: 27512:27522 ioctl 40046207 0 returned -16 [ 1153.266010][ T26] audit: type=1400 audit(1677586768.544:630): avc: denied { create } for pid=27529 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1153.288362][T26769] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 12:19:28 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304e91308ea406c30c9450000a05b7340"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) dup3(r3, 0xffffffffffffffff, 0x80000) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1153.315267][T27524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1153.324217][T26769] Buffer I/O error on dev loop4, logical block 1, async page read [ 1153.352246][T27527] loop3: detected capacity change from 0 to 2048 12:19:28 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb1d5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffff7f00000000, 0x0}) 12:19:28 executing program 0: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x8000000, 0x0}) [ 1153.377445][ T26] audit: type=1400 audit(1677586768.564:631): avc: denied { write } for pid=27529 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1153.430816][T26769] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1153.467272][T26769] Buffer I/O error on dev loop4, logical block 2, async page read 12:19:28 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xffffff7f00000000, 0x0}) [ 1153.507648][T27539] binder: 27534:27539 unknown command 3909378820 [ 1153.528910][T26769] I/O error, dev loop4, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1153.587737][T26769] Buffer I/O error on dev loop4, logical block 3, async page read [ 1153.624724][T27539] binder: 27534:27539 ioctl c0306201 20000080 returned -22 12:19:28 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1153.637119][T26769] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1153.638731][T27543] loop4: detected capacity change from 0 to 2048 12:19:28 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r7) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r8, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000eccb971f7333ff581a040529369cdac1795a358e97d7f7d160f87629d4c5e14d0fc0a2d136530d3ab01fed1b78b5864b92f3de149556aec10797626e08112261ceb2f10fff0037d5c1e8f40c68190031d675fd40dca3b202214be07deaac151a1e3dfaea651eaa2a0006fe0817c0e97033c42e3a4a3bca0e3889de696dd8756775bc68a68476eee3201647e9b0251c64ce5d61d0525495b1d2ca0b40b89fd1f7e29bd260ab63732fb0884f3b5a0f3f86619d9cc4bbe14e137be7413db17ee81a4b6e62896250d2cad72fb5f618eb10785bbbe15b747dc02bd1c8116a91d7dc714b4e8279b065d8413486d90921184df2050ee51c1c7e85761d081de6bfd9db43f8957a05cc8f", @ANYRES16=r6, @ANYBLOB="01000000000000000000020000400800010200000000"], 0x1c}}, 0x0) 12:19:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000140)="ef9a73f66c9c201ea94c698a678b9187f9f5da63745e520d", 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1153.704847][T26769] Buffer I/O error on dev loop4, logical block 4, async page read [ 1153.727138][T27543] FAT-fs (loop4): bogus logical sector size 0 [ 1153.740213][T27543] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7214, 0x0}) 12:19:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb255d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1153.849590][T27553] binder: 27550:27553 ioctl 80047c05 20000180 returned -22 12:19:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) [ 1153.892447][T27553] binder: BINDER_SET_CONTEXT_MGR already set 12:19:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7214, 0x0}) 12:19:29 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) tkill(0xffffffffffffffff, 0x1f) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x440900, 0x0) write$binfmt_aout(r4, 0x0, 0x1d2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d", 0x0, 0x0, {0x4000000004}, {}, 0xc59, [0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) r5 = getuid() setreuid(0x0, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='oom_score\x00') syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="0f20d835080000000f22d8f22e650f40460566b871000f00d83e430f01c9260f66cc6664660f3882a9527b0000c7442400b6440000c7442402b09d0000c7442406000000000f011424c4817b1032b9100800000f3248b800000000008000000f23c80f21f835040090000f23f8", 0x6d}], 0x1, 0x0, 0x0, 0x0) pidfd_getfd(r6, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ftruncate(r1, 0x1) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) dup(r8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) signalfd4(r3, &(0x7f0000000280), 0x8, 0x0) 12:19:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1153.941623][T27553] binder: 27550:27553 ioctl 40046207 0 returned -16 [ 1153.982533][T27553] binder_alloc: 27550: binder_alloc_buf, no vma 12:19:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 12:19:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) setsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000140)="ef9a73f66c9c201ea94c698a678b9187f9f5da63745e520d", 0x18) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1154.053642][T27559] loop4: detected capacity change from 0 to 2048 [ 1154.081573][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:19:29 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x7214, 0x0}) [ 1154.160162][T27559] FAT-fs (loop4): bogus logical sector size 0 [ 1154.219711][T27559] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1154.243373][T27565] loop3: detected capacity change from 0 to 2048 12:19:29 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb3e5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1154.341719][T27579] binder: 27572:27579 ioctl 80047c05 20000180 returned -22 12:19:29 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01wYBuAvbZrm/xc6IwZLLEyFsjERhApCVEICZYCJSoQlRohkcbKQS+ACuAguh4GVHWXqZpTaEGqgSdUEC/o8i1+d97OOTxwlz6+86r94PXz58d37aHcasdGJVhw1Yic2IiZxrLwAAP+IozyPL3nhzDe/+bCWZwIA1utc//8AwF/pydNnD+80DvYfJ0k7YjrJulk3Jp1J1i36ew8O9m8kM60f7ppmWXfze7+XFE72W/F/2d/8Zd+Ka1eLftbdfXRQ6bfj7dpPDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9tukjQjIkmSZGe+Os2y7mbR7ybfVPrZtVwqB072zbjcPH3vzvXGSs8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnM9wNO4fpmlvcBzyPM9nq/OVBWF72eHP/1X3Wlm4HxGj7UoV8Wn5UywMe5ciFg63Z59cKyJWfcDTQ6d8k39005rC7YUzZ/r2FuFWLPFyL16o81cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo03A07h+maW8wnK+163wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB2w9G4f5imvUElRMRWOVKtfhOa5fjPVY3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGr0NQAA//8fGx79") 12:19:29 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, 0x0, 0xa00) [ 1154.420440][T27576] binder: BINDER_SET_CONTEXT_MGR already set [ 1154.459506][T27576] binder: 27572:27576 ioctl 40046207 0 returned -16 12:19:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000180)=0xffffffffffffffff) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) setsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000140)="ef9a73f66c9c201ea94c698a678b9187f9f5da63745e520d", 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000180)) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) setsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000140)="ef9a73f66c9c201ea94c698a678b9187f9f5da63745e520d", 0x18) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) [ 1154.515183][T27580] loop4: detected capacity change from 0 to 2048 [ 1154.538621][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1154.609304][T27580] FAT-fs (loop4): bogus logical sector size 0 [ 1154.630374][T27580] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1154.712994][T27589] binder: 27587:27589 ioctl 80047c05 20000180 returned -22 12:19:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c1c"], 0x2c}}, 0x0) 12:19:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb635d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1154.766117][T27585] loop3: detected capacity change from 0 to 2048 [ 1154.785702][T27589] binder: BINDER_SET_CONTEXT_MGR already set [ 1154.833311][T27589] binder: 27587:27589 ioctl 40046207 0 returned -16 12:19:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x4008000) [ 1154.913517][T27590] binder_alloc: 27587: binder_alloc_buf, no vma [ 1154.975360][T27590] binder: BINDER_SET_CONTEXT_MGR already set [ 1155.030965][T27595] binder: 27587:27595 ioctl 80047c05 20000180 returned -22 [ 1155.078109][T27590] binder: 27587:27590 ioctl 40046207 0 returned -16 [ 1155.085313][T27594] loop4: detected capacity change from 0 to 2048 [ 1155.102462][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1155.148998][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1155.195567][T26769] Buffer I/O error on dev loop4, logical block 0, async page read [ 1155.238942][T27594] FAT-fs (loop4): bogus logical sector size 0 [ 1155.253150][T27594] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:30 executing program 0: r0 = io_uring_setup(0x614b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x17, 0x0, 0x0) 12:19:30 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r1, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r2) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r6, 0x303, 0x0, 0x0, {0x7}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r8, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r9, 0x303, 0x0, 0x0, {0x7}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000003800)=ANY=[@ANYBLOB="2859328ecbb7ee5083b9017b3e3495fa611c73bf59b462bdb323193787374676053c4b4897fd9d838a6dc4a5", @ANYRES16=r9, @ANYBLOB="00022bad7000fedbdf2512000000080039000000010008003b000100000004df2d0000000000080032003f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r9, 0x701, 0x0, 0x4, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00042abd7000f5dbdf250a00000008123100fdffffff05012f000100000005002db201e7ffff07002b0001010000"], 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c1}, 0x460416250536e982) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000003800)=ANY=[@ANYBLOB="2859328ecbb7ee5083b9017b3e3495fa611c73bf59b462bdb323193787374676053c4b4897fd9d838a6dc4a5", @ANYRES16=r6, @ANYBLOB="00022bad7000fedbdf2512000000080039000000010008003b000100000004df2d0000000000080032003f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010700000000040000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="03ac5f15", @ANYRES8=0x0, @ANYBLOB="00042abd7000f5dbdf250a00000008123100fdffffff05012f000100000005002db201e7ffff07002b0001010000"], 0x34}, 0x1, 0x0, 0x0, 0x1de3603507907aaa}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6326}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x91c0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x9c6888822c8f5e8}, 0x4044) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8008000) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000c2e00"/22], 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESDEC=r4, @ANYRESOCT=r5, @ANYRES16=r4, @ANYBLOB="84fd346c0287c8e9bcc8a2d758451d8de05f860e7c78c130d2b7c25cc92dd55465ce4ad60e657a3bde2626142b110efce7a149cd8a5244524c6676ca921be1805576f051f7c2fba6b60d5ca646db0ad0d59c0f2d4b745b599dfdf529634f1507ac2505b9390baed7044fc6cb47f91b14d05446ac408d91a107f48b6d76d1c6c4dbc6933ad4b826aef4399e0df96ca2015c5e4117b21cff7961babf6c00b1268123920336bdb2f10ef2b48108eec1eaea471245ca9a93e4a12540", @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES8=r4, @ANYRES64=r1, @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) 12:19:30 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r5, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r8, r0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newnexthop={0x20, 0x68, 0x400, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x6}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x34040894}, 0x81) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r11 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r11, 0x400, 0x0) fremovexattr(r11, &(0x7f0000000180)=@known='system.posix_acl_default\x00') ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x40, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @request_death, @increfs_done={0x40106308, 0x1}], 0x6c, 0x0, &(0x7f0000000140)="0d0585b882fecced2f80354426681d0eb6041d3c26d41c897e4f75a1df9688e9ed6a6c7730061bcdcceedae0099bf26521dfd61f703d225c8ced38299cde78d504c5a4caee841b2c4603c5ac9d95f2b300ad8df2b86bbb99a860bd1b2b72aa5fa0852c863dd436148e44678f"}) 12:19:30 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r1, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r1, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r2) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r6, 0x303, 0x0, 0x0, {0x7}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r8, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r9, 0x303, 0x0, 0x0, {0x7}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000003800)=ANY=[@ANYBLOB="2859328ecbb7ee5083b9017b3e3495fa611c73bf59b462bdb323193787374676053c4b4897fd9d838a6dc4a5", @ANYRES16=r9, @ANYBLOB="00022bad7000fedbdf2512000000080039000000010008003b000100000004df2d0000000000080032003f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000003800)=ANY=[@ANYBLOB="2859328ecbb7ee5083b9017b3e3495fa611c73bf59b462bdb323193787374676053c4b4897fd9d838a6dc4a5", @ANYRES16=r9, @ANYBLOB="00022bad7000fedbdf2512000000080039000000010008003b000100000004df2d0000000000080032003f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r9, 0x701, 0x0, 0x4, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00042abd7000f5dbdf250a00000008123100fdffffff05012f000100000005002db201e7ffff07002b0001010000"], 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00042abd7000f5dbdf250a00000008123100fdffffff05012f000100000005002db201e7ffff07002b0001010000"], 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c1}, 0x460416250536e982) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000003800)=ANY=[@ANYBLOB="2859328ecbb7ee5083b9017b3e3495fa611c73bf59b462bdb323193787374676053c4b4897fd9d838a6dc4a5", @ANYRES16=r6, @ANYBLOB="00022bad7000fedbdf2512000000080039000000010008003b000100000004df2d0000000000080032003f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010700000000040000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="03ac5f15", @ANYRES8=0x0, @ANYBLOB="00042abd7000f5dbdf250a00000008123100fdffffff05012f000100000005002db201e7ffff07002b0001010000"], 0x34}, 0x1, 0x0, 0x0, 0x1de3603507907aaa}, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6326}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x91c0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x9c6888822c8f5e8}, 0x4044) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x9c6888822c8f5e8}, 0x4044) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8008000) (async) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8008000) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000c2e00"/22], 0x1c}}, 0x0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000c2e00"/22], 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESDEC=r4, @ANYRESOCT=r5, @ANYRES16=r4, @ANYBLOB="84fd346c0287c8e9bcc8a2d758451d8de05f860e7c78c130d2b7c25cc92dd55465ce4ad60e657a3bde2626142b110efce7a149cd8a5244524c6676ca921be1805576f051f7c2fba6b60d5ca646db0ad0d59c0f2d4b745b599dfdf529634f1507ac2505b9390baed7044fc6cb47f91b14d05446ac408d91a107f48b6d76d1c6c4dbc6933ad4b826aef4399e0df96ca2015c5e4117b21cff7961babf6c00b1268123920336bdb2f10ef2b48108eec1eaea471245ca9a93e4a12540", @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES8=r4, @ANYRES64=r1, @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (async) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESDEC=r4, @ANYRESOCT=r5, @ANYRES16=r4, @ANYBLOB="84fd346c0287c8e9bcc8a2d758451d8de05f860e7c78c130d2b7c25cc92dd55465ce4ad60e657a3bde2626142b110efce7a149cd8a5244524c6676ca921be1805576f051f7c2fba6b60d5ca646db0ad0d59c0f2d4b745b599dfdf529634f1507ac2505b9390baed7044fc6cb47f91b14d05446ac408d91a107f48b6d76d1c6c4dbc6933ad4b826aef4399e0df96ca2015c5e4117b21cff7961babf6c00b1268123920336bdb2f10ef2b48108eec1eaea471245ca9a93e4a12540", @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES8=r4, @ANYRES64=r1, @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) 12:19:30 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcbfe5d47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:30 executing program 1: syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x2002) [ 1155.576063][T27607] loop3: detected capacity change from 0 to 2048 [ 1155.600908][T27608] binder: 27604:27608 unknown command 0 12:19:30 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) request_key(&(0x7f0000000340)='logon\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='logon\x00', 0x0) [ 1155.625741][T27608] binder: 27604:27608 ioctl c0306201 20000000 returned -22 12:19:31 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f00000011c0)={0x300, 0x0, 0x0, 'queue1\x00'}) 12:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r1, 0x1, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) (async) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r2) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r6, 0x303, 0x0, 0x0, {0x7}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r8, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r9, 0x303, 0x0, 0x0, {0x7}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x3, 0x2}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000003800)=ANY=[@ANYBLOB="2859328ecbb7ee5083b9017b3e3495fa611c73bf59b462bdb323193787374676053c4b4897fd9d838a6dc4a5", @ANYRES16=r9, @ANYBLOB="00022bad7000fedbdf2512000000080039000000010008003b000100000004df2d0000000000080032003f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r9, 0x701, 0x0, 0x4, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00042abd7000f5dbdf250a00000008123100fdffffff05012f000100000005002db201e7ffff07002b0001010000"], 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r9, 0x2, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80c1}, 0x460416250536e982) (async) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000003800)=ANY=[@ANYBLOB="2859328ecbb7ee5083b9017b3e3495fa611c73bf59b462bdb323193787374676053c4b4897fd9d838a6dc4a5", @ANYRES16=r6, @ANYBLOB="00022bad7000fedbdf2512000000080039000000010008003b000100000004df2d0000000000080032003f000000"], 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x84) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010700000000040000000600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="03ac5f15", @ANYRES8=0x0, @ANYBLOB="00042abd7000f5dbdf250a00000008123100fdffffff05012f000100000005002db201e7ffff07002b0001010000"], 0x34}, 0x1, 0x0, 0x0, 0x1de3603507907aaa}, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, r6, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6326}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x91c0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async, rerun: 64) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000005c0), 0xffffffffffffffff) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r11, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r4, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x9c6888822c8f5e8}, 0x4044) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x4c, r10, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8008000) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100000000000c2e00"/22], 0x1c}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) (async, rerun: 32) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRESDEC=r4, @ANYRESOCT=r5, @ANYRES16=r4, @ANYBLOB="84fd346c0287c8e9bcc8a2d758451d8de05f860e7c78c130d2b7c25cc92dd55465ce4ad60e657a3bde2626142b110efce7a149cd8a5244524c6676ca921be1805576f051f7c2fba6b60d5ca646db0ad0d59c0f2d4b745b599dfdf529634f1507ac2505b9390baed7044fc6cb47f91b14d05446ac408d91a107f48b6d76d1c6c4dbc6933ad4b826aef4399e0df96ca2015c5e4117b21cff7961babf6c00b1268123920336bdb2f10ef2b48108eec1eaea471245ca9a93e4a12540", @ANYRES64=r4, @ANYRESDEC=r1, @ANYRES8=r4, @ANYRES64=r1, @ANYRESDEC=r1], 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) (rerun: 32) 12:19:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r5, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r8, r0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newnexthop={0x20, 0x68, 0x400, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x6}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x34040894}, 0x81) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r11 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r11, 0x400, 0x0) fremovexattr(r11, &(0x7f0000000180)=@known='system.posix_acl_default\x00') ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x40, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @request_death, @increfs_done={0x40106308, 0x1}], 0x6c, 0x0, &(0x7f0000000140)="0d0585b882fecced2f80354426681d0eb6041d3c26d41c897e4f75a1df9688e9ed6a6c7730061bcdcceedae0099bf26521dfd61f703d225c8ced38299cde78d504c5a4caee841b2c4603c5ac9d95f2b300ad8df2b86bbb99a860bd1b2b72aa5fa0852c863dd436148e44678f"}) (async) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x40, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @request_death, @increfs_done={0x40106308, 0x1}], 0x6c, 0x0, &(0x7f0000000140)="0d0585b882fecced2f80354426681d0eb6041d3c26d41c897e4f75a1df9688e9ed6a6c7730061bcdcceedae0099bf26521dfd61f703d225c8ced38299cde78d504c5a4caee841b2c4603c5ac9d95f2b300ad8df2b86bbb99a860bd1b2b72aa5fa0852c863dd436148e44678f"}) 12:19:31 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000ec0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) 12:19:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1TFu02AYBuAvbZoGFjojBkssTIWyMRGECkJUQgJlgIlKlCVGiGRxspAjcAAOwRE4BgMrO8rUzSi1IdRAk6oJFvR5Fr/638/6/cdR8vzKq96L14OXn969j3anEWudaMVhI7ZiLWIcR8oLAPCfOMzz+JoXTn3zmw8reSYAYLXO9P8PAPyTnjx99vBOY2/3cZK0IybjrJt1Y9wZZ92iv/dgb/dGMtX66a5JlnXXf/Q7SeF4vxEXy/7mb/tWXLta9NPu7qO9Sr8Zb1d+egAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAON+2k6QZEUmSJFuz1UmWddeLfjv5rtJPr+VSOXC8b8bl5sl7f7zeWOpZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLMZDEe9/TQ96B+FPM/z6epsZU7YXHT4y4XqXksL9yNiuFmpIj4vfoq5YedSxNzh9vSTa0XEsg94cuiUb/KvblpTuD135lTf3iLcigVe7vkLdf4qAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdRoMR739ND3oD2Zr7TofCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo3WA46u2n6UG/EiJioxypVn8IzXL816rG4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1+hYAAP//SSsffQ==") [ 1155.785275][T27619] loop4: detected capacity change from 0 to 2048 12:19:31 executing program 1: r0 = io_uring_setup(0x614b, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, r0, 0x8000000) [ 1155.844818][T27624] binder: 27622:27624 unknown command 0 12:19:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_NAT_SRC={0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x30}}, 0x0) [ 1155.909711][T27626] binder: 27622:27626 unknown command 0 [ 1155.915347][T27626] binder: 27622:27626 ioctl c0306201 20000000 returned -22 [ 1155.949476][T27619] FAT-fs (loop4): bogus logical sector size 0 12:19:31 executing program 1: r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000a80)='.pending_reads\x00', 0x48100, 0x0) ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, &(0x7f0000000740)=""/14) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000400), 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x38) io_uring_setup(0x33de, &(0x7f0000000240)={0x0, 0xc6bf, 0x2, 0x0, 0x136}) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x0, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x0, 0x200, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x38) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000500)=""/127) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x1) [ 1155.972011][T27619] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1156.005938][T27624] binder: 27622:27624 ioctl c0306201 20000000 returned -22 12:19:31 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 1156.027687][T27633] loop3: detected capacity change from 0 to 2048 12:19:31 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a0a47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) 12:19:31 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x60, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, {0x6}}) 12:19:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r5, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r8, r0) (async) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x440, 0x0) sendmsg$nl_route(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_newnexthop={0x20, 0x68, 0x400, 0x70bd2b, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x6}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x34040894}, 0x81) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) r11 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r11, 0x400, 0x0) (async) fremovexattr(r11, &(0x7f0000000180)=@known='system.posix_acl_default\x00') (async) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000001c0)={0x40, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x2}, @increfs_done={0x40106308, 0x2}, @request_death, @increfs_done={0x40106308, 0x1}], 0x6c, 0x0, &(0x7f0000000140)="0d0585b882fecced2f80354426681d0eb6041d3c26d41c897e4f75a1df9688e9ed6a6c7730061bcdcceedae0099bf26521dfd61f703d225c8ced38299cde78d504c5a4caee841b2c4603c5ac9d95f2b300ad8df2b86bbb99a860bd1b2b72aa5fa0852c863dd436148e44678f"}) 12:19:31 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 12:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) (async) 12:19:31 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1b1u01AYBuAvbZoGFjojBkssTFXLxkQQKghRCQmUASYqEZYYIZLFyUIugQvgIrgcBlZ2lKmbUWpDqPlJqiZY0OdZ/Oq8n3V84ih5fu1V/8Xr4cuP795Hu9OIjU604rgRO7ERMYkT5QUA+E8c53l8yQtnvvnNh7U8EwCwXuf6/wcA/klPnj57eKdxePA4SdoR00nWzbox6UyybtHfe3B4sJfMtH64a5pl3c3v/X5SON1vxeWyv/nLvhU3rhf9rLv76LDSb8fbtZ8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAutt0kaUZEkiTJznx1mmXdzaLfTb6p9LNruVQOnO6bcbW5YPO9xiqPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzTcDTuH6Vpb3AS8jzPZ6vzlQVhe9nhz5eqe60s3I+I0Xalivi0/CkWhv0rEQuH27NPrhURqz7gn0OnfJN/ddOawu2FM2f69hbhVizxci9eqPNXCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNNwNO4fpWlvMJyvtet8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgdsPRuH+Upr1BJUTEVjlSrX4TmuX4z1WNxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABq9DUAAP//6lkevg==") [ 1156.424193][T27652] binder: 27648:27652 unknown command 0 12:19:31 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r0, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0xf}], 0x10}}], 0x1, 0x0) [ 1156.465630][T27652] binder: 27648:27652 ioctl c0306201 20000000 returned -22 12:19:31 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) 12:19:31 executing program 1: syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), 0x0) syz_io_uring_setup(0x3622, &(0x7f0000000740)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) 12:19:31 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r2) (async) [ 1156.551376][T27654] binder: 27648:27654 unknown command 1768304430 [ 1156.577117][T27654] binder: 27648:27654 ioctl c0306201 20001480 returned -22 12:19:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2b637fa5"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x50) [ 1156.644252][T27659] loop3: detected capacity change from 0 to 2048 [ 1156.691008][T27662] loop4: detected capacity change from 0 to 2048 [ 1156.733014][T27662] FAT-fs (loop4): bogus logical sector size 0 [ 1156.764600][T27679] binder: 27676:27679 unknown command 2776589099 [ 1156.772496][T27662] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1156.790107][T27679] binder: 27676:27679 ioctl c0306201 20001480 returned -22 12:19:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a2547a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:32 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x0) 12:19:32 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000840), 0x200040, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0) 12:19:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2b637fa5"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x50) 12:19:32 executing program 0: add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "df0898438d506d701b7d31bcb826e8cc059618c5f05e6f427359a77101c3f5caa0898b0373088188ea62ec6bfacf5cd37fcd97ddc47c9894ff74c3157cf7b24f"}, 0x48, 0xfffffffffffffffb) keyctl$read(0xb, r0, 0x0, 0x0) 12:19:32 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000880), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x0, 0x0) [ 1156.979801][T27690] binder: 27687:27690 unknown command 2776589099 [ 1157.008625][T27690] binder: 27687:27690 ioctl c0306201 20001480 returned -22 12:19:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), 0xffffffffffffffff) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r5, 0x400, 0x0) fremovexattr(r5, &(0x7f0000000180)=@known='system.posix_acl_default\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x240481, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0xad, 0xffff, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x7, 0xff, {{0x15, 0x4, 0x1, 0x33, 0x54, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, {[@generic={0x44, 0x7, "2d0cd96345"}, @timestamp={0x44, 0x20, 0xa3, 0x0, 0x3, [0xac2a, 0xe0a, 0xffff8000, 0x0, 0x928e, 0x925, 0xff]}, @lsrr={0x83, 0x7, 0xe3, [@broadcast]}, @rr={0x7, 0x7, 0x33, [@rand_addr=0x64010102]}, @generic={0x88, 0xb, "e9286e54803aadcdee"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}}, 0x40000) 12:19:32 executing program 1: openat$vsock(0xffffffffffffff9c, &(0x7f0000000c40), 0x105000, 0x0) 12:19:32 executing program 0: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003040), 0x320, 0x0) [ 1157.036940][T27688] loop3: detected capacity change from 0 to 2048 12:19:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2b637fa5"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x50) [ 1157.149090][T27693] loop4: detected capacity change from 0 to 2048 12:19:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), 0xffffffffffffffff) (async) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r5, 0x400, 0x0) fremovexattr(r5, &(0x7f0000000180)=@known='system.posix_acl_default\x00') (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x240481, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0xad, 0xffff, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @multicast2, {[@noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x7, 0xff, {{0x15, 0x4, 0x1, 0x33, 0x54, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, {[@generic={0x44, 0x7, "2d0cd96345"}, @timestamp={0x44, 0x20, 0xa3, 0x0, 0x3, [0xac2a, 0xe0a, 0xffff8000, 0x0, 0x928e, 0x925, 0xff]}, @lsrr={0x83, 0x7, 0xe3, [@broadcast]}, @rr={0x7, 0x7, 0x33, [@rand_addr=0x64010102]}, @generic={0x88, 0xb, "e9286e54803aadcdee"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}}, 0x40000) [ 1157.212030][T27706] binder: 27703:27706 unknown command 2776589099 [ 1157.225777][T27693] FAT-fs (loop4): bogus logical sector size 0 [ 1157.247748][T27706] binder: 27703:27706 ioctl c0306201 20001480 returned -22 [ 1157.262558][T27693] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:32 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5a47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:32 executing program 1: r0 = io_uring_setup(0x614b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x18, 0x0, 0x0) 12:19:32 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "df0898438d506d701b7d31bcb826e8cc059618c5f05e6f427359a77101c3f5caa0898b0373088188ea62ec6bfacf5cd37fcd97ddc47c9894ff74c3157cf7b24f"}, 0x48, 0xfffffffffffffffb) keyctl$unlink(0x17, r0, 0xfffffffffffffffd) 12:19:32 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x2000000, 0x110, r1, 0x95098000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), 0xffffffffffffffff) (async) r5 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r5, 0x400, 0x0) fremovexattr(r5, &(0x7f0000000180)=@known='system.posix_acl_default\x00') (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010101}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000080) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:pam_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) r8 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140), 0x240481, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x34, r10, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x7800, 0x20, 0xad, 0xffff, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x64, 0x0, 0x5, 0x4, 0x0, @local, @multicast2, {[@noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7800, 0x20, 0x7, 0xff, {{0x15, 0x4, 0x1, 0x33, 0x54, 0x67, 0x0, 0x6, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010101, {[@generic={0x44, 0x7, "2d0cd96345"}, @timestamp={0x44, 0x20, 0xa3, 0x0, 0x3, [0xac2a, 0xe0a, 0xffff8000, 0x0, 0x928e, 0x925, 0xff]}, @lsrr={0x83, 0x7, 0xe3, [@broadcast]}, @rr={0x7, 0x7, 0x33, [@rand_addr=0x64010102]}, @generic={0x88, 0xb, "e9286e54803aadcdee"}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xcc, r10, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xcc}}, 0x40000) 12:19:32 executing program 0: syz_open_dev$dri(&(0x7f0000001040), 0x7, 0x20000) 12:19:32 executing program 1: r0 = io_uring_setup(0x614b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xb, 0x0, 0x0) 12:19:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x2000000, 0x110, r1, 0x95098000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8922, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}) [ 1157.539838][T27718] loop3: detected capacity change from 0 to 2048 12:19:32 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000d0dd4a24d9b67ab366fa000800010000000000"], 0x1c}}, 0x0) 12:19:32 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0xd) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000000000000000000000009000100730000000000000040000000160a0198d600000000000000010000000900010005e90000000000000900020073797a300000000014000380080001400000000008100240000000003c000000160a01080000000000000000010000000900010073797a30000000001c000380180003801400010067656e65766531000000000000000000140000001000010000000000000000000000000a60c52a57430b"], 0xc4}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8815}}], 0x1, 0x0) r2 = syz_io_uring_setup(0x3efe, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "0b9ee17cf4f4ea9402aae71b1cc506df5c646b515438b8a5e23f6217fdf5b844fe681f623a977ec42310bb94d85a3c47bbd0538129ff1686a9b259cfb33a2d881ee31824964951b665bee005ef152c7ef74e6e2d95ccea32d7bd623e6b0ad1da63828c6d03c493be5a6d2e6443347f8065a533470ed2564e2859964a77e9a7ba3a0aaec7cac6796b23b5ad2815d54777402332209f581535663c6ee4b543032cfdf72d775086eead8916a62e127e28327631e31112654fa48eaf626ddc9558d9dead2c0590e49d8703bd8c6b58fe315fbde68297557fa7f162f12162310b128ea469b4b68fcde7af194cc5d7a2138aba6b36c21bd1a1f49d7fe4593f1225cd5d5008900f7a3f4cdb9245705f0ea7e78da1230ffd9b013fa27a5898f1c8fd2f08ce49675475e81c969686d81fd7927bcbc890a6ef038eb0254f2c770d1d67275402c1f566b493ac241e0a3a0249661aaff34d8decffcac1562d8b9809bdc0812d593eef3aef9191e23040f569109a9b82da47cd070eaac78bc9f0fb3e8d8368dd8cd6c6138e21106c37c482a58e501ef76dfdf1cf14f869d22b055adc1453d5526320bfff2b24d4ff0cfb54044d0d7580a8d898535296c4ef3afc9245df222af37db09250b8961dd4234a4ec9091e271a2e89a928f97edad97f0f0062ca94c432540068c7194f9d1492773589f6debff9c9aab3c9832ab16c6514b7867168b1133202dd23781d126a72ba083338fd1aec3e9ea3585b31a4e977e51918ee1230252dcbc04a6845b9b063ee2176eacb6f74aed96faf65860d37ece433094105b47d1325006cb69c75a5bb0e0da9df94f1f7264ed4ca82e0e95ec40015a7b4cec4a0dd91c4904472a83773229258f35ec9de9aeaf9a9089e8c6feb9c8585d399caca23aee057f013a4a7b91e919435e0bbd93dda8522881966afce900b0a49f141d2cda0d24d55d59cb3e4889059f2f357a127201d1602efb793597a2ab848818df6e54e0bdf6225ed12179492ddbdc9cae42e875e5a1a7f0f89f8d9f876dedf669e5b52bbcac851940f40bc7de4170e97f02f4b2ee017a03d4b9da81e649c7407f16ffa8dc4dce87955fa1476256206c08bf1e02fe3b35dba9a6e2f46738b372f7aaa24213baddbd8964b69067b49fa25beca977f77d9352d68caafb3f819fe562ae0e49b8a80067aabb6d03d721c67d212cd1cb60fe7f6e95038017f6cb7877c7f98495dd26683208bd91c990670b2fecc6e27f919052c8f3ecef9fab22f86da94a72b91e9ac964eb2bf171392a33bc11ecce4a3470b84bfc9c6c35993dd9bfa6bcd8b67722152dbbcdd5a2915c809736e2b0b900c3de7667ee3257ef96a8c8fda7c6eed2425adb7435d4a766846cbe96a83bc141f6e8335594adb16386b0de7c2522b792e6f13e8e1b4fd33d48b32b4b8027b12c57b495f5e3e5b43666bdfd23581d94a5a04eca04a46f1ad6b7112f5b0ca084ee05ba0d7b4518c5a56478dfa3e3c8430e879d031dee5bcf84f91b3525e03534d1ab988b458a54ccbd10f0d2d79bf325e99c6774abfe0ff39a9d7d8f71fd493ae1fb43172dfbf6e57afdbce7a0415ab3f2f2cfa615b0b4034b76ad273ba1e3ca2b8030a6c9771f2358719a0d72b982f71615fbfdcf22def70e57d9ffa886d16daf66fbacd3b96f221559758b8d444cc515ae481297bd8d36d3928ce9221b9a256e9520ab19fbcf302dee38caa50fff09cd47fe51fdaa1767e7158336b2ac57617f6c2b21ca2dfe2cf490211960d1963130532122bee78db704b1826e7259cd74e0147d5c2b672c0077dc6cc048159d4c9679b17fd44e7cfb4365ac380f9569ef04d4abb7ff9c570aaf5edfe09dafed6e7b00548b2ef49e469171f127229c59ade4b67885929b8dd32d72ff852adb0bf1d156c4e98f4152230e3dfa7fe5cc5ee12763a04c2e868ff63d61edeca671a62588a072e876df43593b9b69c5a6ce4448ef28ce694cf8a51b3c0ef994c1edf3f775093dca0b801786d7f823e5fa2c217a64b978c28a7a2e0e889e3d3c9db00000000fdea65830bd4643dbd6a6b86f0fbdc3850cdd2617c574024c0a54d2b6b1674bc6d72968abc55fa7290e2591877f909a2010f24edd49b28aef732c71355565fc48c1164dcbaf3757384c33062f1bcab1f89f2dcf1b1d16e4de71392b4b004496f532291a0119bd5cf87393a308de9e1064f0196e16965c91ec3e99dfd6744c216fa01ffdd433bd9f1c0d7698c9712f555333aa2fccb5f1cd52507d4c4543fc84d5f4f6a0e26ecb2be09e3b15529c385995fcbadd74f59889cc2b1dd7f3610481762da4e09d9156ad5e8138e956f6842b42adfe3d9f94e8cdb47b1da96f0152c07c3bdc5798c83a1457441f850712c5a31d847354504cc497d8dafb81fd520b16cc2e14c08a6dc89bf62daf39d6e1a28568d70c925f26384400c386e80312f2a0833b228dda1b10faaf7345f6b670dcf78c7d90a077cf2dd1313680df148e95a6861dd0251dc4580a64df2bb3529304dcf7e5a4cfbcedb480ccb3c97742f43168fa0b26db4c41f0a961b7a344b5607ee9c7a04c24e931379b95c318a3a212abe61ec6edc3757e8d621522e1462737f3a85c817a3dfbf1385db0256e482f0aa1828685f291ad73bab35fb0c2c719ba34010222105dccf2e4a788a0e650a29f22b20b05c1094a6048fe35f43ab331e265d93d3e1d31479840a58d3f2ee8c6b561847fcddcf2cbd6366abeeb9daa030cf6193901de77d57bf5ad03dc6efa90f8e41c77f713c4b6835b029258c0c7d0de796eb7185c9b4070ab2a89d2c420dffc7a5308414ddbe5b851c3adc66a453c5c021b67f000000000000004443523eabde5d635468920b7fea726052730ad009ef35f1f58984a432c4ce647917cd273ecb8b4bb9e4de58cf3319067636c3876f0b7c675c7213ea0b0543cb3b69a59f62cbc35b0f118e7fa48d850a9bb54a01342bccbf70105bb0d38096ce54194169b9d344c6972df35dd23486099f32b9d63e9bc9a11a4450dbeb468892488dc1dd75e5129333b4c21778a5fef0b2c53ef3f40bf87a22473d79f96f2353cdfc401278e03c5894d2be17505376cb2f3d7e859f61ac4c829fd99a8bda388bb2c27d2fdff91dc0e3fb2b0e69097d64b4ee1b186c9428a0932c488ba4f1d172db020b428d56fff9c5bf8ea3c972df9bbb2cc2b175417bd01067edd70de76164ecb6fc9569f2c8e574b4410e37cf9ae6403d93c36b060f36abff0196d8c967ff0f0a92dff1ba5cf8d342922b80bb83313f6db43c42672118bb8309d0bb5473253ee5b7f4b69a14af19854fb59b1bb03aff9bd50cad32438b3419190b7282a19972a9a792eb8e932e9d726238f55427e4c10f4f6b9907a3c220e328c2391b41524636a7e919552a695388f915faf6dda40c7cd917e463818d98f602552af15e5a213c00601eb26ce5e8fe7f9562d0917581e15fb491b266057038b17e2bd52f782213bf6f2fb78914acabb9b1d5360f3498df3418d21f0a40e2e9d8fb3cd38207721af9450a97b5d9fda3c1ef9034d430b686362968ebead2db99d40828d4cbb38da9b92d078e8978addf93aa3a73924f1dc6562d64ca8659025c3299cd92a0d7ad2fe6a352acce8fa7e7d516cc88f38d8b1c88a0c788a6cd7d9df69a353264215d817ab404e898a52d98416456d88f4f8be3397cb5d85103779b387e090e1af47e52da81eb0b9598f3c62598f5e4e2f30c7d79b082208089b8221694fcc4b8a0fb8f378d3625525ca7fe3bf8f55221b88809be17f495bd87dc6772051b3ec1190eb21c3ce3a8be909e2775a7e3b0fbfa106c3d348bea72dcf644af5216f89fe68ec34a1988d678fd32639684b3b2dfcfabdbeafe0af959a459fc86a4f85ec957c259bda9fde5b33df4a40050a03bc334cdb10eed500312d7203b1dba5fb387a12df799ae0aa5437ea49ab0245c9e9ffaf00b2e598fb4db0b1787791f8573ff45129af63527828a69542e6a9ca34af654c6c94852387a4d61bbf07379079dfbcf90975e15f7c6816b8d0b41c00d15cd1f4e1f32eff67fb8a80d1a6f4e4bb73c7b068878a36f7dbdc6b7b8aa6f4ea3f45a3111164587fb414022a15dfe625de3f2fe9f5c6a6bde1954cb4a4d975080f5f70eafcc7af5583e0de0b0cff74c6978609e40fe75b10945d70c2b1c0e20cb78c1b5e3bfca6e2734f3aab732e72984496ea4b7fe180f4f587ca5a63ddc61f6dd2fe4212b9899e05a25cf9ff404260552c503543563ac2c5212809bd503d6d49b71a20d7f724b33f7f92a42ff96e570cd112c9fbde8fad69fd07f8bf02809828dab2b6170aab3b75618dbfa8b17c10eaf7b5e1118c887b7d0384f5694a7972546b3c95531c26c522c29a76f2552686fbf0e52eaed534a047ddf03aedbceb156c7c0c700e1985c0461146994d8c85ac8084d3a7e7ff76587a0c5aac2de065a425db5dd6ef5d6c022ea527702ee7ba28a17b569f2568ae927f8b8298656ea6f0e864024f311ac96f1c2e583cab4a253788864d0628dfd6ba6221525cfdbb90443d8bcb34d020cbc7345aa251c3abff7138f64aad503bf27bad05027cc0b7756eb1d67814a43a8d031666176615fded7f12e6b660a748840981c521b22c0ad8d2fc369ba9911bd3f139e572dbe5def1188f1d7544bcc101172a99eddda3ef9a751ae029c16129ade3f85f2e6782bd7b6cdcda73301da6edc174ddacb8dd95ac29df8ae86576abd21833e7531ad1feb6af0e2f0b1ae086fb711537cc9e2335a1f197dac5f55fcc5748522383eb6367dfca8ef75cb6c44603df6b586700834d3b866f761dcee598b0fed00c0421dc12418f43892dc60f85f2bee8c86f5c1f843416bd26aede440b746d99b71bfc782257a066d9c37eb747d39a23282f39998d3f173ab785a501b350b86167161dc0c56bf8cbc7b2c310bc8c4751db5f8c91195f1092ad5eca51644e2c917ceb384b0fe76f54888d35f6398741b7ffd3df95f56ec87bda861be488268f067149e849a214bcd2e391bc3dee8ca6b2fad77f8371ea4f447bb467b7fbfbac9a491c76124ac9d5e50d8c5bb2f21e936bb2a9924548ccd94fdb1c95f9a734f363d1d79c092ff601462fc02bbba16e97496be1106b0f6c0056185fd312153a2ae0a7dbfc87918cbed2ba94c1c3ef79b1456a1c32fde3fff8a541ad63c16f817930f9080fc1ff6e268e15572f5b7e042e0264f16dfc558495ea801e80e2265b1571833f51b1461b201792555db378bbcc3b99e209b96337b41c7349d1983d1829bb79c17cb61f29cf9c1e5f6da4880bcac4cc0333fe266981c419ae92108cbeaaec794b7e645b31f09be93c84230006cda824055096f1f0cfc356c7be40bfa89360103c7f29cb3cf74ec8e0beebcb4288b068de4793d9f65238ae2861dcf9b5c0f1555c9b2b82f323459f290493ba7798b19cc5dd3d97a98bbc6d122096400534f243494f8022c7dfb0064bc3de7da0c6c89583f3a6d1f2f247e1c961479fa2a88cbc47d6ef5c17fb1ddb6d0c94132c64c4de858fdc2206a7af0c7bf5eb61c3620063d19ef06950dcc32881cb1aaf30f656ddb1e5a57e194db1767addcb3d964805657fd36ca2f492c4e5ab0f07dd97605d4e2162875337a2fadd97a51a0ac11defbf755561892dc6ab792a0e179c1c8372127a44b9f1a59945a9ed44f66576ebd6c96ddf563fb5bd1af1efae28033ba7734bc56b02a871ef174ac7709fa76da074c4108d72fe92579996d57f062459dbcb9f49c6000"}) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x2) [ 1157.650670][T27734] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.659904][T27727] loop4: detected capacity change from 0 to 2048 [ 1157.693733][T27727] FAT-fs (loop4): bogus logical sector size 0 [ 1157.703090][T27734] binder: 27730:27734 ioctl 40046207 0 returned -16 [ 1157.728579][T27727] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:33 executing program 0: syz_io_uring_setup(0xdff, &(0x7f0000000cc0), &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000d40), &(0x7f0000000d80)) 12:19:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x2000000, 0x110, r1, 0x95098000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) mmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000, 0x2000000, 0x110, r1, 0x95098000) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) 12:19:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0afe47a4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000d0dd4a24d9b67ab366fa000800010000000000"], 0x1c}}, 0x0) 12:19:33 executing program 0: setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0x10, &(0x7f00000001c0)={0x0}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 12:19:33 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000d0dd4a24d9b67ab366fa000800010000000000"], 0x1c}}, 0x0) 12:19:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) [ 1157.983053][T27751] binder: BINDER_SET_CONTEXT_MGR already set [ 1158.053594][T27751] binder: 27745:27751 ioctl 40046207 0 returned -16 [ 1158.076772][T27749] loop3: detected capacity change from 0 to 2048 12:19:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) tee(r1, r0, 0x7f, 0xd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0xf4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000040)={0x1, 0xf, "574de76a01cc05b7a311abe395a90b"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0xc00, 0x0) 12:19:33 executing program 0: r0 = io_uring_setup(0x614b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x2, 0x0, 0x0) 12:19:33 executing program 1: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, {0x3}}, 0x0) r1 = syz_io_uring_setup(0x4fc9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x379}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0x0, 0x200, 0x0, 0x0, 0x0, r1}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) renameat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}}, 0x0) r2 = syz_io_uring_setup(0x5a75, &(0x7f0000000640)={0x0, 0x9891, 0x440}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) syz_io_uring_setup(0x3622, &(0x7f0000000740)={0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000007c0), 0x0) syz_io_uring_setup(0x50ee, &(0x7f0000000880)={0x0, 0x0, 0x20, 0x1, 0xc0, 0x0, r2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000900), &(0x7f0000000940)) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) 12:19:33 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa20920, 0x8, '\x00', @ptr=0x1}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c534beb6", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25010000000c00060000000000000000000c00030008000000000000000c00080006000000000000000c00040001000000000000000c00060002000000000000000c000200ffffff7f00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x804) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) 12:19:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1158.221449][T27756] loop4: detected capacity change from 0 to 2048 12:19:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) tee(r1, r0, 0x7f, 0xd) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = fsmount(0xffffffffffffffff, 0x0, 0xf4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000040)={0x1, 0xf, "574de76a01cc05b7a311abe395a90b"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0xc00, 0x0) 12:19:33 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2}}, 0x20) [ 1158.278776][T27756] FAT-fs (loop4): bogus logical sector size 0 [ 1158.316487][T27756] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:33 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d3ca4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:33 executing program 1: mmap$fb(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x1832, 0xffffffffffffffff, 0x0) 12:19:33 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa20920, 0x8, '\x00', @ptr=0x1}}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c534beb6", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25010000000c00060000000000000000000c00030008000000000000000c00080006000000000000000c00040001000000000000000c00060002000000000000000c000200ffffff7f00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x804) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) [ 1158.441924][T27772] loop3: detected capacity change from 0 to 2048 12:19:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) tee(r1, r0, 0x7f, 0xd) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0xf4) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000040)={0x1, 0xf, "574de76a01cc05b7a311abe395a90b"}) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (rerun: 64) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0xc00, 0x0) 12:19:33 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$incfs(r0, &(0x7f0000000380)='.pending_reads\x00', 0x0, 0x0) 12:19:33 executing program 2: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa20920, 0x8, '\x00', @ptr=0x1}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c534beb6", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25010000000c00060000000000000000000c00030008000000000000000c00080006000000000000000c00040001000000000000000c00060002000000000000000c000200ffffff7f00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x804) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0xffffffff, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0xa20920, 0x8, '\x00', @ptr=0x1}}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c534beb6", @ANYRES16=0x0, @ANYBLOB="000428bd7000fddbdf25010000000c00060000000000000000000c00030008000000000000000c00080006000000000000000c00040001000000000000000c00060002000000000000000c000200ffffff7f00000000"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) (async) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='\f\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) (async) 12:19:33 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x640, 0x360, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:19:33 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1158.670426][T27790] binder: BINDER_SET_CONTEXT_MGR already set 12:19:34 executing program 0: linkat(0xffffffffffffff9c, &(0x7f0000002a40)='./file0\x00', 0xffffffffffffffff, &(0x7f0000002ac0)='./file0\x00', 0x1000) 12:19:34 executing program 1: io_uring_setup(0x0, &(0x7f0000000340)) [ 1158.727649][T27789] loop4: detected capacity change from 0 to 2048 [ 1158.762082][T27790] binder: 27787:27790 ioctl 40046207 0 returned -16 [ 1158.787355][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:19:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024e2de1459f324de61c13523a5b80240eef5c4191e6df180742568692a1817586a05933f984ae278ece99e742c021c5ba703b6c7ea78731c2b12525abc3639dd370aa4b0d1d75f870ecc5b33c2d54067162c32d6106031f674a3102c321b7cb869d7206e91d5df84ac7d977afee2a3226857893a1b8ea9db94eca49ea03c4dca8a4d2b2adfea803cf8c8d1bd0f040cc710194a00"/164, @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x4811) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan1\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000010) [ 1158.830048][T27789] FAT-fs (loop4): bogus logical sector size 0 [ 1158.836322][T27789] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f00000011c0)={0x2000000, 0x0, 0x0, 'queue1\x00'}) 12:19:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5dfea4b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:34 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) [ 1158.943648][T27799] loop3: detected capacity change from 0 to 2048 12:19:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024e2de1459f324de61c13523a5b80240eef5c4191e6df180742568692a1817586a05933f984ae278ece99e742c021c5ba703b6c7ea78731c2b12525abc3639dd370aa4b0d1d75f870ecc5b33c2d54067162c32d6106031f674a3102c321b7cb869d7206e91d5df84ac7d977afee2a3226857893a1b8ea9db94eca49ea03c4dca8a4d2b2adfea803cf8c8d1bd0f040cc710194a00"/164, @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x4811) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan1\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000010) 12:19:34 executing program 0: syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 12:19:34 executing program 1: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 12:19:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}}, 0x0) 12:19:34 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001140), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024e2de1459f324de61c13523a5b80240eef5c4191e6df180742568692a1817586a05933f984ae278ece99e742c021c5ba703b6c7ea78731c2b12525abc3639dd370aa4b0d1d75f870ecc5b33c2d54067162c32d6106031f674a3102c321b7cb869d7206e91d5df84ac7d977afee2a3226857893a1b8ea9db94eca49ea03c4dca8a4d2b2adfea803cf8c8d1bd0f040cc710194a00"/164, @ANYRES16=r3, @ANYBLOB="01000000000000000000020000000800010000000000"], 0x1c}}, 0x4811) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wpan1\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000010) [ 1159.234050][T27818] loop4: detected capacity change from 0 to 2048 [ 1159.280981][T27818] FAT-fs (loop4): bogus logical sector size 0 12:19:34 executing program 0: socketpair(0x1e, 0x0, 0x4, &(0x7f0000000040)) 12:19:34 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="0216784702004d"], 0x10}}, 0x0) 12:19:34 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000100)={0x16, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) [ 1159.321468][T27818] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1159.379720][T27827] loop3: detected capacity change from 0 to 2048 12:19:34 executing program 0: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x105102, 0x0) 12:19:34 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d4796b7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:34 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x3efe, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "0b9ee17cf4f4ea9402aae71b1cc506df5c646b515438b8a5e23f6217fdf5b844fe681f623a977ec42310bb94d85a3c47bbd0538129ff1686a9b259cfb33a2d881ee31824964951b665bee005ef152c7ef74e6e2d95ccea32d7bd623e6b0ad1da63828c6d03c493be5a6d2e6443347f8065a533470ed2564e2859964a77e9a7ba3a0aaec7cac6796b23b5ad2815d54777402332209f581535663c6ee4b543032cfdf72d775086eead8916a62e127e28327631e31112654fa48eaf626ddc9558d9dead2c0590e49d8703bd8c6b58fe315fbde68297557fa7f162f12162310b128ea469b4b68fcde7af194cc5d7a2138aba6b36c21bd1a1f49d7fe4593f1225cd5d5008900f7a3f4cdb9245705f0ea7e78da1230ffd9b013fa27a5898f1c8fd2f08ce49675475e81c969686d81fd7927bcbc890a6ef038eb0254f2c770d1d67275402c1f566b493ac241e0a3a0249661aaff34d8decffcac1562d8b9809bdc0812d593eef3aef9191e23040f569109a9b82da47cd070eaac78bc9f0fb3e8d8368dd8cd6c6138e21106c37c482a58e501ef76dfdf1cf14f869d22b055adc1453d5526320bfff2b24d4ff0cfb54044d0d7580a8d898535296c4ef3afc9245df222af37db09250b8961dd4234a4ec9091e271a2e89a928f97edad97f0f0062ca94c432540068c7194f9d1492773589f6debff9c9aab3c9832ab16c6514b7867168b1133202dd23781d126a72ba083338fd1aec3e9ea3585b31a4e977e51918ee1230252dcbc04a6845b9b063ee2176eacb6f74aed96faf65860d37ece433094105b47d1325006cb69c75a5bb0e0da9df94f1f7264ed4ca82e0e95ec40015a7b4cec4a0dd91c4904472a83773229258f35ec9de9aeaf9a9089e8c6feb9c8585d399caca23aee057f013a4a7b91e919435e0bbd93dda8522881966afce900b0a49f141d2cda0d24d55d59cb3e4889059f2f357a127201d1602efb793597a2ab848818df6e54e0bdf6225ed12179492ddbdc9cae42e875e5a1a7f0f89f8d9f876dedf669e5b52bbcac851940f40bc7de4170e97f02f4b2ee017a03d4b9da81e649c7407f16ffa8dc4dce87955fa1476256206c08bf1e02fe3b35dba9a6e2f46738b372f7aaa24213baddbd8964b69067b49fa25beca977f77d9352d68caafb3f819fe562ae0e49b8a80067aabb6d03d721c67d212cd1cb60fe7f6e95038017f6cb7877c7f98495dd26683208bd91c990670b2fecc6e27f919052c8f3ecef9fab22f86da94a72b91e9ac964eb2bf171392a33bc11ecce4a3470b84bfc9c6c35993dd9bfa6bcd8b67722152dbbcdd5a2915c809736e2b0b900c3de7667ee3257ef96a8c8fda7c6eed2425adb7435d4a766846cbe96a83bc141f6e8335594adb16386b0de7c2522b792e6f13e8e1b4fd33d48b32b4b8027b12c57b495f5e3e5b43666bdfd23581d94a5a04eca04a46f1ad6b7112f5b0ca084ee05ba0d7b4518c5a56478dfa3e3c8430e879d031dee5bcf84f91b3525e03534d1ab988b458a54ccbd10f0d2d79bf325e99c6774abfe0ff39a9d7d8f71fd493ae1fb43172dfbf6e57afdbce7a0415ab3f2f2cfa615b0b4034b76ad273ba1e3ca2b8030a6c9771f2358719a0d72b982f71615fbfdcf22def70e57d9ffa886d16daf66fbacd3b96f221559758b8d444cc515ae481297bd8d36d3928ce9221b9a256e9520ab19fbcf302dee38caa50fff09cd47fe51fdaa1767e7158336b2ac57617f6c2b21ca2dfe2cf490211960d1963130532122bee78db704b1826e7259cd74e0147d5c2b672c0077dc6cc048159d4c9679b17fd44e7cfb4365ac380f9569ef04d4abb7ff9c570aaf5edfe09dafed6e7b00548b2ef49e469171f127229c59ade4b67885929b8dd32d72ff852adb0bf1d156c4e98f4152230e3dfa7fe5cc5ee12763a04c2e868ff63d61edeca671a62588a072e876df43593b9b69c5a6ce4448ef28ce694cf8a51b3c0ef994c1edf3f775093dca0b801786d7f823e5fa2c217a64b978c28a7a2e0e889e3d3c9db00000000fdea65830bd4643dbd6a6b86f0fbdc3850cdd2617c574024c0a54d2b6b1674bc6d72968abc55fa7290e2591877f909a2010f24edd49b28aef732c71355565fc48c1164dcbaf3757384c33062f1bcab1f89f2dcf1b1d16e4de71392b4b004496f532291a0119bd5cf87393a308de9e1064f0196e16965c91ec3e99dfd6744c216fa01ffdd433bd9f1c0d7698c9712f555333aa2fccb5f1cd52507d4c4543fc84d5f4f6a0e26ecb2be09e3b15529c385995fcbadd74f59889cc2b1dd7f3610481762da4e09d9156ad5e8138e956f6842b42adfe3d9f94e8cdb47b1da96f0152c07c3bdc5798c83a1457441f850712c5a31d847354504cc497d8dafb81fd520b16cc2e14c08a6dc89bf62daf39d6e1a28568d70c925f26384400c386e80312f2a0833b228dda1b10faaf7345f6b670dcf78c7d90a077cf2dd1313680df148e95a6861dd0251dc4580a64df2bb3529304dcf7e5a4cfbcedb480ccb3c97742f43168fa0b26db4c41f0a961b7a344b5607ee9c7a04c24e931379b95c318a3a212abe61ec6edc3757e8d621522e1462737f3a85c817a3dfbf1385db0256e482f0aa1828685f291ad73bab35fb0c2c719ba34010222105dccf2e4a788a0e650a29f22b20b05c1094a6048fe35f43ab331e265d93d3e1d31479840a58d3f2ee8c6b561847fcddcf2cbd6366abeeb9daa030cf6193901de77d57bf5ad03dc6efa90f8e41c77f713c4b6835b029258c0c7d0de796eb7185c9b4070ab2a89d2c420dffc7a5308414ddbe5b851c3adc66a453c5c021b67f000000000000004443523eabde5d635468920b7fea726052730ad009ef35f1f58984a432c4ce647917cd273ecb8b4bb9e4de58cf3319067636c3876f0b7c675c7213ea0b0543cb3b69a59f62cbc35b0f118e7fa48d850a9bb54a01342bccbf70105bb0d38096ce54194169b9d344c6972df35dd23486099f32b9d63e9bc9a11a4450dbeb468892488dc1dd75e5129333b4c21778a5fef0b2c53ef3f40bf87a22473d79f96f2353cdfc401278e03c5894d2be17505376cb2f3d7e859f61ac4c829fd99a8bda388bb2c27d2fdff91dc0e3fb2b0e69097d64b4ee1b186c9428a0932c488ba4f1d172db020b428d56fff9c5bf8ea3c972df9bbb2cc2b175417bd01067edd70de76164ecb6fc9569f2c8e574b4410e37cf9ae6403d93c36b060f36abff0196d8c967ff0f0a92dff1ba5cf8d342922b80bb83313f6db43c42672118bb8309d0bb5473253ee5b7f4b69a14af19854fb59b1bb03aff9bd50cad32438b3419190b7282a19972a9a792eb8e932e9d726238f55427e4c10f4f6b9907a3c220e328c2391b41524636a7e919552a695388f915faf6dda40c7cd917e463818d98f602552af15e5a213c00601eb26ce5e8fe7f9562d0917581e15fb491b266057038b17e2bd52f782213bf6f2fb78914acabb9b1d5360f3498df3418d21f0a40e2e9d8fb3cd38207721af9450a97b5d9fda3c1ef9034d430b686362968ebead2db99d40828d4cbb38da9b92d078e8978addf93aa3a73924f1dc6562d64ca8659025c3299cd92a0d7ad2fe6a352acce8fa7e7d516cc88f38d8b1c88a0c788a6cd7d9df69a353264215d817ab404e898a52d98416456d88f4f8be3397cb5d85103779b387e090e1af47e52da81eb0b9598f3c62598f5e4e2f30c7d79b082208089b8221694fcc4b8a0fb8f378d3625525ca7fe3bf8f55221b88809be17f495bd87dc6772051b3ec1190eb21c3ce3a8be909e2775a7e3b0fbfa106c3d348bea72dcf644af5216f89fe68ec34a1988d678fd32639684b3b2dfcfabdbeafe0af959a459fc86a4f85ec957c259bda9fde5b33df4a40050a03bc334cdb10eed500312d7203b1dba5fb387a12df799ae0aa5437ea49ab0245c9e9ffaf00b2e598fb4db0b1787791f8573ff45129af63527828a69542e6a9ca34af654c6c94852387a4d61bbf07379079dfbcf90975e15f7c6816b8d0b41c00d15cd1f4e1f32eff67fb8a80d1a6f4e4bb73c7b068878a36f7dbdc6b7b8aa6f4ea3f45a3111164587fb414022a15dfe625de3f2fe9f5c6a6bde1954cb4a4d975080f5f70eafcc7af5583e0de0b0cff74c6978609e40fe75b10945d70c2b1c0e20cb78c1b5e3bfca6e2734f3aab732e72984496ea4b7fe180f4f587ca5a63ddc61f6dd2fe4212b9899e05a25cf9ff404260552c503543563ac2c5212809bd503d6d49b71a20d7f724b33f7f92a42ff96e570cd112c9fbde8fad69fd07f8bf02809828dab2b6170aab3b75618dbfa8b17c10eaf7b5e1118c887b7d0384f5694a7972546b3c95531c26c522c29a76f2552686fbf0e52eaed534a047ddf03aedbceb156c7c0c700e1985c0461146994d8c85ac8084d3a7e7ff76587a0c5aac2de065a425db5dd6ef5d6c022ea527702ee7ba28a17b569f2568ae927f8b8298656ea6f0e864024f311ac96f1c2e583cab4a253788864d0628dfd6ba6221525cfdbb90443d8bcb34d020cbc7345aa251c3abff7138f64aad503bf27bad05027cc0b7756eb1d67814a43a8d031666176615fded7f12e6b660a748840981c521b22c0ad8d2fc369ba9911bd3f139e572dbe5def1188f1d7544bcc101172a99eddda3ef9a751ae029c16129ade3f85f2e6782bd7b6cdcda73301da6edc174ddacb8dd95ac29df8ae86576abd21833e7531ad1feb6af0e2f0b1ae086fb711537cc9e2335a1f197dac5f55fcc5748522383eb6367dfca8ef75cb6c44603df6b586700834d3b866f761dcee598b0fed00c0421dc12418f43892dc60f85f2bee8c86f5c1f843416bd26aede440b746d99b71bfc782257a066d9c37eb747d39a23282f39998d3f173ab785a501b350b86167161dc0c56bf8cbc7b2c310bc8c4751db5f8c91195f1092ad5eca51644e2c917ceb384b0fe76f54888d35f6398741b7ffd3df95f56ec87bda861be488268f067149e849a214bcd2e391bc3dee8ca6b2fad77f8371ea4f447bb467b7fbfbac9a491c76124ac9d5e50d8c5bb2f21e936bb2a9924548ccd94fdb1c95f9a734f363d1d79c092ff601462fc02bbba16e97496be1106b0f6c0056185fd312153a2ae0a7dbfc87918cbed2ba94c1c3ef79b1456a1c32fde3fff8a541ad63c16f817930f9080fc1ff6e268e15572f5b7e042e0264f16dfc558495ea801e80e2265b1571833f51b1461b201792555db378bbcc3b99e209b96337b41c7349d1983d1829bb79c17cb61f29cf9c1e5f6da4880bcac4cc0333fe266981c419ae92108cbeaaec794b7e645b31f09be93c84230006cda824055096f1f0cfc356c7be40bfa89360103c7f29cb3cf74ec8e0beebcb4288b068de4793d9f65238ae2861dcf9b5c0f1555c9b2b82f323459f290493ba7798b19cc5dd3d97a98bbc6d122096400534f243494f8022c7dfb0064bc3de7da0c6c89583f3a6d1f2f247e1c961479fa2a88cbc47d6ef5c17fb1ddb6d0c94132c64c4de858fdc2206a7af0c7bf5eb61c3620063d19ef06950dcc32881cb1aaf30f656ddb1e5a57e194db1767addcb3d964805657fd36ca2f492c4e5ab0f07dd97605d4e2162875337a2fadd97a51a0ac11defbf755561892dc6ab792a0e179c1c8372127a44b9f1a59945a9ed44f66576ebd6c96ddf563fb5bd1af1efae28033ba7734bc56b02a871ef174ac7709fa76da074c4108d72fe92579996d57f062459dbcb9f49c6000"}) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x2) 12:19:34 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:34 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "df0898438d506d701b7d31bcb826e8cc059618c5f05e6f427359a77101c3f5caa0898b0373088188ea62ec6bfacf5cd37fcd97ddc47c9894ff74c3157cf7b24f"}, 0x48, 0xfffffffffffffffb) keyctl$unlink(0x16, r0, 0xfffffffffffffffd) 12:19:34 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40086602, &(0x7f00000011c0)={0xf, 0x0, 0x0, 'queue1\x00'}) 12:19:34 executing program 2: r0 = syz_open_dev$vivid(&(0x7f0000000e40), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ee08b7dc"}}) 12:19:35 executing program 0: syz_io_uring_setup(0x4fc9, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) syz_io_uring_setup(0x50ee, &(0x7f0000000880), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000900), &(0x7f0000000940)) [ 1159.704141][T27842] loop4: detected capacity change from 0 to 2048 [ 1159.719123][ T26] audit: type=1400 audit(1677586775.004:632): avc: denied { setattr } for pid=27848 comm="syz-executor.0" path="/dev/snd/seq" dev="devtmpfs" ino=1087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 12:19:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1b1u01AYBuAvbZoGFjojBkssTBXtxkQQKghRCQmUASYqEZYYIZLFyUIugQvgIrgcBlZ2lKmbUWpDqPlJqiZY0OdZ/Oq8n3V84ih5fu1V/8Xr4cuP795Hu9OIjU604rgRO7ERMYkT5QUA+E8c53l8yQtnvvnNh7U8EwCwXuf6/wcA/klPnj57eKdxePA4SdoR00nWzbox6UyybtHfe3B4cDOZaf1w1zTLupvf+72kcLrfistlv//LvhU3rhf9rLv76LDSb8fbtZ8eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAutt0kaUZEkiTJznx1mmXdzaLfTb6p9LNruVQOnO6bcbW5YPP9xiqPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzTcDTuH6Vpb3AS8jzPZ6vzlQVhe9nhz5eqe60s3I+I0Xalivi0/CkWhr0rEQuH27NPrhURqz7gn0OnfJN/ddOawu2FM2f69hbhVizxci9eqPNXCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNNwNO4fpWlvMJyvtet8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgdsPRuH+Upr1BJUTEVjlSrX4TmuX4z1WNxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABq9DUAAP//qwMewA==") [ 1159.809268][T27842] FAT-fs (loop4): bogus logical sector size 0 [ 1159.830310][ T26] audit: type=1400 audit(1677586775.064:633): avc: denied { ioctl } for pid=27850 comm="syz-executor.2" path="/dev/video1" dev="devtmpfs" ino=848 ioctlcmd=0x5609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 12:19:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x0) 12:19:35 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000300)=""/19, 0x13}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "0b9ee17cf4f4ea9402aae71b1cc506df5c646b515438b8a5e23f6217fdf5b844fe681f623a977ec42310bb94d85a3c47bbd0538129ff1686a9b259cfb33a2d881ee31824964951b665bee005ef152c7ef74e6e2d95ccea32d7bd623e6b0ad1da63828c6d03c493be5a6d2e6443347f8065a533470ed2564e2859964a77e9a7ba3a0aaec7cac6796b23b5ad2815d54777402332209f581535663c6ee4b543032cfdf72d775086eead8916a62e127e28327631e31112654fa48eaf626ddc9558d9dead2c0590e49d8703bd8c6b58fe315fbde68297557fa7f162f12162310b128ea469b4b68fcde7af194cc5d7a2138aba6b36c21bd1a1f49d7fe4593f1225cd5d5008900f7a3f4cdb9245705f0ea7e78da1230ffd9b013fa27a5898f1c8fd2f08ce49675475e81c969686d81fd7927bcbc890a6ef038eb0254f2c770d1d67275402c1f566b493ac241e0a3a0249661aaff34d8decffcac1562d8b9809bdc0812d593eef3aef9191e23040f569109a9b82da47cd070eaac78bc9f0fb3e8d8368dd8cd6c6138e21106c37c482a58e501ef76dfdf1cf14f869d22b055adc1453d5526320bfff2b24d4ff0cfb54044d0d7580a8d898535296c4ef3afc9245df222af37db09250b8961dd4234a4ec9091e271a2e89a928f97edad97f0f0062ca94c432540068c7194f9d1492773589f6debff9c9aab3c9832ab16c6514b7867168b1133202dd23781d126a72ba083338fd1aec3e9ea3585b31a4e977e51918ee1230252dcbc04a6845b9b063ee2176eacb6f74aed96faf65860d37ece433094105b47d1325006cb69c75a5bb0e0da9df94f1f7264ed4ca82e0e95ec40015a7b4cec4a0dd91c4904472a83773229258f35ec9de9aeaf9a9089e8c6feb9c8585d399caca23aee057f013a4a7b91e919435e0bbd93dda8522881966afce900b0a49f141d2cda0d24d55d59cb3e4889059f2f357a127201d1602efb793597a2ab848818df6e54e0bdf6225ed12179492ddbdc9cae42e875e5a1a7f0f89f8d9f876dedf669e5b52bbcac851940f40bc7de4170e97f02f4b2ee017a03d4b9da81e649c7407f16ffa8dc4dce87955fa1476256206c08bf1e02fe3b35dba9a6e2f46738b372f7aaa24213baddbd8964b69067b49fa25beca977f77d9352d68caafb3f819fe562ae0e49b8a80067aabb6d03d721c67d212cd1cb60fe7f6e95038017f6cb7877c7f98495dd26683208bd91c990670b2fecc6e27f919052c8f3ecef9fab22f86da94a72b91e9ac964eb2bf171392a33bc11ecce4a3470b84bfc9c6c35993dd9bfa6bcd8b67722152dbbcdd5a2915c809736e2b0b900c3de7667ee3257ef96a8c8fda7c6eed2425adb7435d4a766846cbe96a83bc141f6e8335594adb16386b0de7c2522b792e6f13e8e1b4fd33d48b32b4b8027b12c57b495f5e3e5b43666bdfd23581d94a5a04eca04a46f1ad6b7112f5b0ca084ee05ba0d7b4518c5a56478dfa3e3c8430e879d031dee5bcf84f91b3525e03534d1ab988b458a54ccbd10f0d2d79bf325e99c6774abfe0ff39a9d7d8f71fd493ae1fb43172dfbf6e57afdbce7a0415ab3f2f2cfa615b0b4034b76ad273ba1e3ca2b8030a6c9771f2358719a0d72b982f71615fbfdcf22def70e57d9ffa886d16daf66fbacd3b96f221559758b8d444cc515ae481297bd8d36d3928ce9221b9a256e9520ab19fbcf302dee38caa50fff09cd47fe51fdaa1767e7158336b2ac57617f6c2b21ca2dfe2cf490211960d1963130532122bee78db704b1826e7259cd74e0147d5c2b672c0077dc6cc048159d4c9679b17fd44e7cfb4365ac380f9569ef04d4abb7ff9c570aaf5edfe09dafed6e7b00548b2ef49e469171f127229c59ade4b67885929b8dd32d72ff852adb0bf1d156c4e98f4152230e3dfa7fe5cc5ee12763a04c2e868ff63d61edeca671a62588a072e876df43593b9b69c5a6ce4448ef28ce694cf8a51b3c0ef994c1edf3f775093dca0b801786d7f823e5fa2c217a64b978c28a7a2e0e889e3d3c9db00000000fdea65830bd4643dbd6a6b86f0fbdc3850cdd2617c574024c0a54d2b6b1674bc6d72968abc55fa7290e2591877f909a2010f24edd49b28aef732c71355565fc48c1164dcbaf3757384c33062f1bcab1f89f2dcf1b1d16e4de71392b4b004496f532291a0119bd5cf87393a308de9e1064f0196e16965c91ec3e99dfd6744c216fa01ffdd433bd9f1c0d7698c9712f555333aa2fccb5f1cd52507d4c4543fc84d5f4f6a0e26ecb2be09e3b15529c385995fcbadd74f59889cc2b1dd7f3610481762da4e09d9156ad5e8138e956f6842b42adfe3d9f94e8cdb47b1da96f0152c07c3bdc5798c83a1457441f850712c5a31d847354504cc497d8dafb81fd520b16cc2e14c08a6dc89bf62daf39d6e1a28568d70c925f26384400c386e80312f2a0833b228dda1b10faaf7345f6b670dcf78c7d90a077cf2dd1313680df148e95a6861dd0251dc4580a64df2bb3529304dcf7e5a4cfbcedb480ccb3c97742f43168fa0b26db4c41f0a961b7a344b5607ee9c7a04c24e931379b95c318a3a212abe61ec6edc3757e8d621522e1462737f3a85c817a3dfbf1385db0256e482f0aa1828685f291ad73bab35fb0c2c719ba34010222105dccf2e4a788a0e650a29f22b20b05c1094a6048fe35f43ab331e265d93d3e1d31479840a58d3f2ee8c6b561847fcddcf2cbd6366abeeb9daa030cf6193901de77d57bf5ad03dc6efa90f8e41c77f713c4b6835b029258c0c7d0de796eb7185c9b4070ab2a89d2c420dffc7a5308414ddbe5b851c3adc66a453c5c021b67f000000000000004443523eabde5d635468920b7fea726052730ad009ef35f1f58984a432c4ce647917cd273ecb8b4bb9e4de58cf3319067636c3876f0b7c675c7213ea0b0543cb3b69a59f62cbc35b0f118e7fa48d850a9bb54a01342bccbf70105bb0d38096ce54194169b9d344c6972df35dd23486099f32b9d63e9bc9a11a4450dbeb468892488dc1dd75e5129333b4c21778a5fef0b2c53ef3f40bf87a22473d79f96f2353cdfc401278e03c5894d2be17505376cb2f3d7e859f61ac4c829fd99a8bda388bb2c27d2fdff91dc0e3fb2b0e69097d64b4ee1b186c9428a0932c488ba4f1d172db020b428d56fff9c5bf8ea3c972df9bbb2cc2b175417bd01067edd70de76164ecb6fc9569f2c8e574b4410e37cf9ae6403d93c36b060f36abff0196d8c967ff0f0a92dff1ba5cf8d342922b80bb83313f6db43c42672118bb8309d0bb5473253ee5b7f4b69a14af19854fb59b1bb03aff9bd50cad32438b3419190b7282a19972a9a792eb8e932e9d726238f55427e4c10f4f6b9907a3c220e328c2391b41524636a7e919552a695388f915faf6dda40c7cd917e463818d98f602552af15e5a213c00601eb26ce5e8fe7f9562d0917581e15fb491b266057038b17e2bd52f782213bf6f2fb78914acabb9b1d5360f3498df3418d21f0a40e2e9d8fb3cd38207721af9450a97b5d9fda3c1ef9034d430b686362968ebead2db99d40828d4cbb38da9b92d078e8978addf93aa3a73924f1dc6562d64ca8659025c3299cd92a0d7ad2fe6a352acce8fa7e7d516cc88f38d8b1c88a0c788a6cd7d9df69a353264215d817ab404e898a52d98416456d88f4f8be3397cb5d85103779b387e090e1af47e52da81eb0b9598f3c62598f5e4e2f30c7d79b082208089b8221694fcc4b8a0fb8f378d3625525ca7fe3bf8f55221b88809be17f495bd87dc6772051b3ec1190eb21c3ce3a8be909e2775a7e3b0fbfa106c3d348bea72dcf644af5216f89fe68ec34a1988d678fd32639684b3b2dfcfabdbeafe0af959a459fc86a4f85ec957c259bda9fde5b33df4a40050a03bc334cdb10eed500312d7203b1dba5fb387a12df799ae0aa5437ea49ab0245c9e9ffaf00b2e598fb4db0b1787791f8573ff45129af63527828a69542e6a9ca34af654c6c94852387a4d61bbf07379079dfbcf90975e15f7c6816b8d0b41c00d15cd1f4e1f32eff67fb8a80d1a6f4e4bb73c7b068878a36f7dbdc6b7b8aa6f4ea3f45a3111164587fb414022a15dfe625de3f2fe9f5c6a6bde1954cb4a4d975080f5f70eafcc7af5583e0de0b0cff74c6978609e40fe75b10945d70c2b1c0e20cb78c1b5e3bfca6e2734f3aab732e72984496ea4b7fe29c31f180f4f587ca5a63ddc61f6dd2fe4212b9899e05a25cf9ff404260552c503543563ac2c5212809bd503d6d49b71a20d7f724b33f7f92a42ff96e570cd112c9fbde8fad69fd07f8bf02809828dab2b6170aab3b75618dbfa8b17c10eaf7b5e1118c887b7d0384f5694a7972546b3c95531c26c522c29a76f2552686fbf0e52eaed534a047ddf03aedbceb156c7c0c700e1985c0461146994d8c85ac8084d3a7e7ff76587a0c5aac2de065a425db5dd6ef5d6c022ea527702ee7ba28a17b569f2568ae927f8b8298656ea6f0e864024f311ac96f1c2e583cab4a253788864d0628dfd6ba6221525cfdbb90443d8bcb34d020cbc7345aa251c3abff7138f64aad503bf27bad05027cc0b7756eb1d67814a43a8d03166ed79695fded7f12e6b660a748840981c521b22c0ad8d2fc369ba9911bd3f139e572dbe5def1188f1d7544bcc101172a99eddda3ef9a751ae029c16129ade3f85f2e6782bd7b6cdcda73301da6edc174ddacb8dd95ac29df8ae86576abd21833e7531ad1feb6af0e2f0b1ae086fb711537cc9e2335a1f197dac5f55fcc5748522383eb6367dfca8ef75cb6c44603df6b586700834d3b866f761dcee598b0fed00c0421dc12418f43892dc60f85f2bee8c86f5c1f843416bd26aede440b746d99b71bfc782257a066d9c37eb747d39a23282f39998d3f173ab785a501b350b86167161dc0c56bf8cbc7b2c310bc8c4751db5f8c91195f1092ad5eca51644e2c917ceb384b0fe76f54888d35f6398741b7ffd3df95f56ec87bda861be488268f067149e849a214bcd2e391bc3dee8ca6b2fad77f8371ea4f447bb467b7fbfbac9a491c76124ac9d5e50d8c5bb2f21e936bb2a9924548ccd94fdb1c95f9a734f363d1d79c092ff601462fc02bbba16e97496be1106b0f6c0056185fd312153a2ae0a7dbfc87918cbed2ba94c1c3ef79b1456a1c32fde3fff8a541ad63c16f817930f9080fc1ff6e268e15572f5b7e042e0264f16dfc558495ea801e80e2265b1571833f51b1461b201792555db378bbcc3b99e209b96337b41c7349d1983d1829bb79c17cb61f29cf9c1e5f6da4880bcac4cc0333fe266981c419ae92108cbeaaec794b7e645b31f09be93c84230006cda824055096f1f0cfc356c7be40bfa89360103c7f29cb3cf74ec8e0beebcb4288b068de4793d9f65238ae2861dcf9b5c0f1555c9b2b82f323459f290493ba7798b19cc5dd3d97a98bbc6d122096400534f243494f8022c7dfb0064bc3de7da0c6c89583f3a6d1f2f247e1c961479fa2a88cbc47d6ef5c17fb1ddb6d0c94132c64c4de858fdc2206a7af0c7bf5eb61c3620063d19ef06950dcc32881cb1aaf30f656ddb1e5a57e194db1767addcb3d964805657fd36ca2f492c4e5ab0f07dd97605d4e2162875337a2fadd97a51a0ac11defbf755561892dc6ab792a0e179c1c8372127a44b9f1a59945a9ed44f66576ebd6c96ddf563fb5bd1af1efae28033ba7734bc56b02a871ef174ac7709fa76da074c4108d72fe92579996d57f062459dbcb9f49c6000"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14) [ 1159.847378][T27842] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:35 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0xa}, 0xc, &(0x7f0000000100)={0x0}}, 0x0) 12:19:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47feb7b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1159.988084][T27854] loop3: detected capacity change from 0 to 2048 12:19:35 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000500)={0xfffff6f6}, 0x8) 12:19:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_ZONE={0x6}, @CTA_NAT_SRC={0x4}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0x30}}, 0x0) 12:19:35 executing program 0: syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) [ 1160.313369][T27866] loop4: detected capacity change from 0 to 2048 [ 1160.369653][T27866] FAT-fs (loop4): bogus logical sector size 0 [ 1160.385246][T27866] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:35 executing program 1: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000300)=""/19, 0x13}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14) 12:19:35 executing program 0: mlock(&(0x7f0000fec000/0x14000)=nil, 0x14000) munmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000) [ 1160.514030][T27870] loop3: detected capacity change from 0 to 2048 12:19:35 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:35 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b4b45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:36 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001c00), 0x0, 0x0) 12:19:36 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "df0898438d506d701b7d31bcb826e8cc059618c5f05e6f427359a77101c3f5caa0898b0373088188ea62ec6bfacf5cd37fcd97ddc47c9894ff74c3157cf7b24f"}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x11, r0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000040)=@secondary) 12:19:36 executing program 2: r0 = io_uring_setup(0x614b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0xc, 0x0, 0x0) 12:19:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="04630940c439c013750a44bbf40c2a8d3c"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r2, 0x400, 0x0) fremovexattr(r2, &(0x7f0000000180)=@known='system.posix_acl_default\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001000)={0x7c, 0x0, &(0x7f0000000ec0)=[@register_looper, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000e00)={@ptr={0x70742a85, 0x0, &(0x7f0000000dc0), 0x0, 0x2, 0x16}, @fda={0x66646185, 0x3, 0x1, 0x4}, @flat=@weak_binder={0x77622a85, 0x100b}}, &(0x7f0000000e80)={0x0, 0x28, 0x48}}}, @decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x2}, @exit_looper, @increfs={0x40046304, 0x1}], 0x8a, 0x0, &(0x7f0000000f40)="3fffd6e010128eae606486d0f8f53c360f629fcb16a609c25bc56706397d40e0230da35c090a04c69e14708154a990a1b45f8e2e18fe4354cfd552ff67bd8dddf9fdeff88b7363bb27f385ea1d0bc93c27c51fee8754db05cb8f616feb51dfd5084dc874f9941a1bd131a69d07c93908bbd6f5843e1d2c09dbfd5957ffafec4aa75267a57dc09c29799f"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r3, r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000580)={0x7, 'rose0\x00', {0x4}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) r8 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x11ed9454) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r8}, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000d80)={0xfc, 0x0, &(0x7f0000000b80)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/56, 0x38, 0xaef, 0x2e}, @fda={0x66646185, 0x1, 0x1, 0x19}, @flat=@weak_binder={0x77622a85, 0x3d3ea6832b6d67b9, 0x1}}, &(0x7f00000006c0)={0x0, 0x28, 0x48}}, 0x400}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000900)={@ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/205, 0xcd, 0x2, 0x2e}, @fda={0x66646185, 0x1, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/235, 0xeb, 0x2, 0x22}}, &(0x7f0000000980)={0x0, 0x28, 0x48}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000ac0)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000009c0)=""/26, 0x1a, 0x2, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000a00)=""/145, 0x91, 0x2, 0x1e}}, &(0x7f0000000b40)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r8}, @acquire_done={0x40106309, 0x2}], 0xd9, 0x0, &(0x7f0000000c80)="f037cf2c9dc0918933dc08c3b26c2b03db4e4a82945c90a316353dad7c369bfe7f63481bd5a4d731add7718c53caf31248b55f4ec01d773f6ebef29b0d12179f350ba9bc9f869b6db66cc7d42893bde06040e9670d4bf71fa14bc673be66ad5d47d8d932046305dca5ef621753d2dbcdbefa141973fac2dfd0e967198073d31047f1c97fe03b019c8bd7b2a6a2fecce76b54659197cb1e70731abb965b64795bb9d616da592eec6ecf7b0b6d9090403025c1f487cec4cb8ea1500ba65961cfe18524409f1b57aa1cc2f2e00bbd7136ef58fec506cc4de63f74"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0xc0, 0x0, &(0x7f0000000440)=[@dead_binder_done, @acquire_done={0x40106309, 0x1}, @release, @decrefs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x100, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/184, 0xb8, 0x1, 0x6}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/26, 0x1a, 0x0, 0x27}, @flat=@handle={0x73682a85, 0x10a, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}], 0x2f, 0x0, &(0x7f0000000380)="d911417c300989f3dde5388b8f79e3f779e82c95f7f3a63fd0aa78995f159bdb6f379ad1f103c1d7fd157e7270a36b"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1160.945626][T27883] loop4: detected capacity change from 0 to 2048 [ 1160.953491][T27882] loop3: detected capacity change from 0 to 2048 [ 1160.962714][T27883] FAT-fs (loop4): bogus logical sector size 0 12:19:36 executing program 0: open$dir(0x0, 0x210400, 0x0) 12:19:36 executing program 2: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f00000011c0)={0xbf, 0x0, 0x0, 'queue1\x00'}) [ 1160.998368][T27883] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1161.028921][T27888] binder: 27887:27888 unknown command 1074356996 12:19:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1161.078331][T27888] binder: 27887:27888 ioctl c0306201 20000080 returned -22 12:19:36 executing program 1: openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) 12:19:36 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4feb45a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1161.150173][T27888] binder: 27887:27888 ioctl 8983 20000580 returned -22 12:19:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="04630940c439c013750a44bbf40c2a8d3c"], 0x0, 0x0, 0x0}) (async) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r2, 0x400, 0x0) (async) fremovexattr(r2, &(0x7f0000000180)=@known='system.posix_acl_default\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001000)={0x7c, 0x0, &(0x7f0000000ec0)=[@register_looper, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000e00)={@ptr={0x70742a85, 0x0, &(0x7f0000000dc0), 0x0, 0x2, 0x16}, @fda={0x66646185, 0x3, 0x1, 0x4}, @flat=@weak_binder={0x77622a85, 0x100b}}, &(0x7f0000000e80)={0x0, 0x28, 0x48}}}, @decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x2}, @exit_looper, @increfs={0x40046304, 0x1}], 0x8a, 0x0, &(0x7f0000000f40)="3fffd6e010128eae606486d0f8f53c360f629fcb16a609c25bc56706397d40e0230da35c090a04c69e14708154a990a1b45f8e2e18fe4354cfd552ff67bd8dddf9fdeff88b7363bb27f385ea1d0bc93c27c51fee8754db05cb8f616feb51dfd5084dc874f9941a1bd131a69d07c93908bbd6f5843e1d2c09dbfd5957ffafec4aa75267a57dc09c29799f"}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r3, r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000580)={0x7, 'rose0\x00', {0x4}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) (async) r8 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x11ed9454) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r8}, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000d80)={0xfc, 0x0, &(0x7f0000000b80)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/56, 0x38, 0xaef, 0x2e}, @fda={0x66646185, 0x1, 0x1, 0x19}, @flat=@weak_binder={0x77622a85, 0x3d3ea6832b6d67b9, 0x1}}, &(0x7f00000006c0)={0x0, 0x28, 0x48}}, 0x400}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000900)={@ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/205, 0xcd, 0x2, 0x2e}, @fda={0x66646185, 0x1, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/235, 0xeb, 0x2, 0x22}}, &(0x7f0000000980)={0x0, 0x28, 0x48}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000ac0)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000009c0)=""/26, 0x1a, 0x2, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000a00)=""/145, 0x91, 0x2, 0x1e}}, &(0x7f0000000b40)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r8}, @acquire_done={0x40106309, 0x2}], 0xd9, 0x0, &(0x7f0000000c80)="f037cf2c9dc0918933dc08c3b26c2b03db4e4a82945c90a316353dad7c369bfe7f63481bd5a4d731add7718c53caf31248b55f4ec01d773f6ebef29b0d12179f350ba9bc9f869b6db66cc7d42893bde06040e9670d4bf71fa14bc673be66ad5d47d8d932046305dca5ef621753d2dbcdbefa141973fac2dfd0e967198073d31047f1c97fe03b019c8bd7b2a6a2fecce76b54659197cb1e70731abb965b64795bb9d616da592eec6ecf7b0b6d9090403025c1f487cec4cb8ea1500ba65961cfe18524409f1b57aa1cc2f2e00bbd7136ef58fec506cc4de63f74"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0xc0, 0x0, &(0x7f0000000440)=[@dead_binder_done, @acquire_done={0x40106309, 0x1}, @release, @decrefs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x100, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/184, 0xb8, 0x1, 0x6}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/26, 0x1a, 0x0, 0x27}, @flat=@handle={0x73682a85, 0x10a, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}], 0x2f, 0x0, &(0x7f0000000380)="d911417c300989f3dde5388b8f79e3f779e82c95f7f3a63fd0aa78995f159bdb6f379ad1f103c1d7fd157e7270a36b"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:36 executing program 0: r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) 12:19:36 executing program 2: mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x6044, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}}, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x3f00000000000000) 12:19:36 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000c40)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 12:19:36 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x6044, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2143}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3f00000000000000) [ 1161.392741][T27907] binder: 27904:27907 unknown command 1074356996 [ 1161.415801][T27901] loop4: detected capacity change from 0 to 2048 12:19:36 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000100)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3efe, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"}) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2) [ 1161.461228][T27901] FAT-fs (loop4): bogus logical sector size 0 [ 1161.483696][T27902] loop3: detected capacity change from 0 to 2048 [ 1161.495453][T27907] binder: 27904:27907 ioctl c0306201 20000080 returned -22 [ 1161.520781][T27901] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="04630940c439c013750a44bbf40c2a8d3c"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r2, 0x400, 0x0) fremovexattr(r2, &(0x7f0000000180)=@known='system.posix_acl_default\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001000)={0x7c, 0x0, &(0x7f0000000ec0)=[@register_looper, @dead_binder_done, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000e00)={@ptr={0x70742a85, 0x0, &(0x7f0000000dc0), 0x0, 0x2, 0x16}, @fda={0x66646185, 0x3, 0x1, 0x4}, @flat=@weak_binder={0x77622a85, 0x100b}}, &(0x7f0000000e80)={0x0, 0x28, 0x48}}}, @decrefs={0x40046307, 0x1}, @acquire_done={0x40106309, 0x2}, @exit_looper, @increfs={0x40046304, 0x1}], 0x8a, 0x0, &(0x7f0000000f40)="3fffd6e010128eae606486d0f8f53c360f629fcb16a609c25bc56706397d40e0230da35c090a04c69e14708154a990a1b45f8e2e18fe4354cfd552ff67bd8dddf9fdeff88b7363bb27f385ea1d0bc93c27c51fee8754db05cb8f616feb51dfd5084dc874f9941a1bd131a69d07c93908bbd6f5843e1d2c09dbfd5957ffafec4aa75267a57dc09c29799f"}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r3, r0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000580)={0x7, 'rose0\x00', {0x4}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x4, 0x0) (async) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x11) (async) r8 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x11ed9454) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000580)={0x40, 0x0, &(0x7f0000000400)=[@acquire, @release, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r8}, @release={0x40046306, 0x2}, @free_buffer], 0x9e, 0x0, &(0x7f00000004c0)="79912a8446c8f7de735ea6a030075cd11552cd339443100785e2b6cfceb6d3037607513df0dc38d0bfd150088a3a51370c0773eb83f9f98038ea772fb7e57b912ffc190b6cf049675835fe4096d8fd4f976906ad3b92bbde74fd2e59e57723fc6f25a657d8f0533f20a32970618266474838a5197b872c2e03893d875be92d276aa34f708e652e483734a51d3b74526353df54631312fbe68014a86264d3"}) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000d80)={0xfc, 0x0, &(0x7f0000000b80)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/56, 0x38, 0xaef, 0x2e}, @fda={0x66646185, 0x1, 0x1, 0x19}, @flat=@weak_binder={0x77622a85, 0x3d3ea6832b6d67b9, 0x1}}, &(0x7f00000006c0)={0x0, 0x28, 0x48}}, 0x400}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000900)={@ptr={0x70742a85, 0x0, &(0x7f0000000700)=""/205, 0xcd, 0x2, 0x2e}, @fda={0x66646185, 0x1, 0x0, 0x3c}, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/235, 0xeb, 0x2, 0x22}}, &(0x7f0000000980)={0x0, 0x28, 0x48}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000ac0)={@fd, @ptr={0x70742a85, 0x1, &(0x7f00000009c0)=""/26, 0x1a, 0x2, 0x3a}, @ptr={0x70742a85, 0x1, &(0x7f0000000a00)=""/145, 0x91, 0x2, 0x1e}}, &(0x7f0000000b40)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r8}, @acquire_done={0x40106309, 0x2}], 0xd9, 0x0, &(0x7f0000000c80)="f037cf2c9dc0918933dc08c3b26c2b03db4e4a82945c90a316353dad7c369bfe7f63481bd5a4d731add7718c53caf31248b55f4ec01d773f6ebef29b0d12179f350ba9bc9f869b6db66cc7d42893bde06040e9670d4bf71fa14bc673be66ad5d47d8d932046305dca5ef621753d2dbcdbefa141973fac2dfd0e967198073d31047f1c97fe03b019c8bd7b2a6a2fecce76b54659197cb1e70731abb965b64795bb9d616da592eec6ecf7b0b6d9090403025c1f487cec4cb8ea1500ba65961cfe18524409f1b57aa1cc2f2e00bbd7136ef58fec506cc4de63f74"}) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async, rerun: 64) r9 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0xc0, 0x0, &(0x7f0000000440)=[@dead_binder_done, @acquire_done={0x40106309, 0x1}, @release, @decrefs, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@handle={0x73682a85, 0x100, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/184, 0xb8, 0x1, 0x6}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/26, 0x1a, 0x0, 0x27}, @flat=@handle={0x73682a85, 0x10a, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x28, 0x40}}, 0x400}], 0x2f, 0x0, &(0x7f0000000380)="d911417c300989f3dde5388b8f79e3f779e82c95f7f3a63fd0aa78995f159bdb6f379ad1f103c1d7fd157e7270a36b"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:36 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:37 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b55a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:37 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x6044, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2143}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3f00000000000000) [ 1161.759537][T27920] binder: 27919:27920 unknown command 1074356996 [ 1161.788412][T27920] binder: 27919:27920 ioctl c0306201 20000080 returned -22 [ 1161.889142][T27920] binder: 27919:27920 ioctl 8983 20000580 returned -22 [ 1161.960840][T27922] loop3: detected capacity change from 0 to 2048 [ 1162.043907][T27924] binder_alloc: binder_alloc_mmap_handler: 27919 20ffc000-20ffd000 already mapped failed -16 [ 1162.078918][T27924] binder_alloc: binder_alloc_mmap_handler: 27919 20ffc000-20ffd000 already mapped failed -16 12:19:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:37 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000100)) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = dup(0xffffffffffffffff) write$6lowpan_enable(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3efe, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"}) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x2) 12:19:37 executing program 2: madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa) [ 1162.161669][T27928] loop4: detected capacity change from 0 to 2048 [ 1162.238326][T27928] FAT-fs (loop4): bogus logical sector size 0 [ 1162.267663][T27928] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x2, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xb1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc0, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/152, 0x98, 0x1, 0x15}, @fda={0x66646185, 0x1, 0x2, 0x1c}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="852a6877010100000300000000000000000000000000000085616466000000e407000000000000000100000000000000150000f7ff000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], &(0x7f00000003c0)={0x0, 0x18, 0x38}}}, @exit_looper, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x3}, @enter_looper, @free_buffer={0x40086303, r2}], 0x4e, 0x0, &(0x7f00000005c0)="13d5c1218be0da9f5981631005f72a68377a199cad7d07f2684ac679ab3584c7f7e164eeda310b5e85a3a8d902c22c54ef4f45e24d306a041e1884f1b1cd1ce8723c5f080bb18340f896997a193c"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fbe194620200"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r6, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r8, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r10, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000880)={0x74, 0x0, &(0x7f0000000740)=[@register_looper, @request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}, @register_looper, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0xa, 0x1, 0x11}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000640)={0x0, 0x18, 0x38}}}, @decrefs={0x40046307, 0x3}], 0x93, 0x0, &(0x7f00000007c0)="8460f3480105c7b5f1cbe7ffdfc37f9b1898ec95ccfd60d579367270e9b4e012c0fddd06d040e8e70142a0e984c7c9be7bd908ce9130aa07a8dd36ec91ff55ddbabebbf3d41a9c6b15a786be2b93de79dc67e86d9a99bd51c24ca825b50f1a35a9a05d170e48b4dfd830dd1c87eb5bc187c89efb6e6194794e92b5d9c75a812ecfa790940d5904d76ca013e08d6b1801973b28"}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r12, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r13 = dup2(r0, r3) ioctl$BINDER_GET_FROZEN_INFO(r13, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1162.318972][T27933] loop3: detected capacity change from 0 to 2048 12:19:37 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = syz_io_uring_setup(0x6044, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2143}, 0x0) io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x3f00000000000000) 12:19:37 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b65a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:37 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "df0898438d506d701b7d31bcb826e8cc059618c5f05e6f427359a77101c3f5caa0898b0373088188ea62ec6bfacf5cd37fcd97ddc47c9894ff74c3157cf7b24f"}, 0x48, 0xfffffffffffffffd) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) [ 1162.454814][T27938] binder: 27937:27938 unknown command 1653924347 [ 1162.489419][T27938] binder: 27937:27938 ioctl c0306201 20000080 returned -22 12:19:37 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1162.606145][T27938] binder: 27937:27938 ioctl c00c620f 20000000 returned -22 12:19:37 executing program 2: r0 = add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x12, r0, 0xfffffffffffffffd) 12:19:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x2, 0x0) (async, rerun: 64) r2 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xb1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc0, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/152, 0x98, 0x1, 0x15}, @fda={0x66646185, 0x1, 0x2, 0x1c}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="852a6877010100000300000000000000000000000000000085616466000000e407000000000000000100000000000000150000f7ff000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], &(0x7f00000003c0)={0x0, 0x18, 0x38}}}, @exit_looper, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x3}, @enter_looper, @free_buffer={0x40086303, r2}], 0x4e, 0x0, &(0x7f00000005c0)="13d5c1218be0da9f5981631005f72a68377a199cad7d07f2684ac679ab3584c7f7e164eeda310b5e85a3a8d902c22c54ef4f45e24d306a041e1884f1b1cd1ce8723c5f080bb18340f896997a193c"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fbe194620200"], 0x0, 0x0, 0x0}) (async, rerun: 32) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) dup2(r4, r0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async, rerun: 32) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) (rerun: 32) fcntl$setlease(r6, 0x400, 0x0) (async) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r8, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async, rerun: 32) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r10, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000880)={0x74, 0x0, &(0x7f0000000740)=[@register_looper, @request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}, @register_looper, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0xa, 0x1, 0x11}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000640)={0x0, 0x18, 0x38}}}, @decrefs={0x40046307, 0x3}], 0x93, 0x0, &(0x7f00000007c0)="8460f3480105c7b5f1cbe7ffdfc37f9b1898ec95ccfd60d579367270e9b4e012c0fddd06d040e8e70142a0e984c7c9be7bd908ce9130aa07a8dd36ec91ff55ddbabebbf3d41a9c6b15a786be2b93de79dc67e86d9a99bd51c24ca825b50f1a35a9a05d170e48b4dfd830dd1c87eb5bc187c89efb6e6194794e92b5d9c75a812ecfa790940d5904d76ca013e08d6b1801973b28"}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r12, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r13 = dup2(r0, r3) ioctl$BINDER_GET_FROZEN_INFO(r13, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 64) 12:19:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$fb(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) [ 1162.825219][T27944] loop4: detected capacity change from 0 to 2048 12:19:38 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) write$fb(r0, &(0x7f0000000180)='m', 0x301000) 12:19:38 executing program 2: r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x402402, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000040)) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, 0x0) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) execveat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000340)='}^!\x00'], &(0x7f00000004c0)=[&(0x7f00000003c0)='\x00', &(0x7f0000000400)='/sys/kernel/debug/sync/info\x00', &(0x7f0000000440)='(&^-+@&$\x00'], 0x1000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000a40)={0x53, 0xffffffffffffffff, 0xb2, 0xc1, @buffer={0x0, 0x59, &(0x7f0000000780)=""/89}, &(0x7f0000000800)="09c71f5f961e541b87670b2ceb81cf453e0b330c5f98ceb54fe331a4e17e512cabc8163e0985b95c44db27fc0aac59729bcdd18e157ef2ec3598ab0d787f780c240632199575adfe043a94cb186f755ab134e3f0e9c357065c272260d930e165f91dec6008d9873dc1a2558c0a418a2a4149965cd1ed5fd18065b3c61d2a6e548346a2687656a8f0fc7dc9d5975032c3d00494b6590ada9492132facea6ee8981453d1b25efc5752daef50859c41eee5ad65", &(0x7f0000000900)=""/229, 0x101, 0x10023, 0x2, &(0x7f0000000a00)}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e80), 0x8000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)=@bridge_getvlan={0x40, 0x72, 0x20, 0x70bd26, 0x25dfdbff, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$dri(&(0x7f0000001040), 0x7, 0x20000) [ 1162.891081][T27951] binder: BINDER_SET_CONTEXT_MGR already set [ 1162.907948][T27944] FAT-fs (loop4): bogus logical sector size 0 [ 1162.930497][T27944] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1162.951811][T27951] binder: 27949:27951 ioctl 40046207 0 returned -16 [ 1162.952972][T27947] loop3: detected capacity change from 0 to 2048 [ 1162.969605][T27953] binder: 27949:27953 unknown command 1653924347 [ 1162.987520][T27953] binder: 27949:27953 ioctl c0306201 20000080 returned -22 12:19:38 executing program 0: io_uring_setup(0x614b, &(0x7f0000000000)={0x0, 0x0, 0x500}) [ 1163.016809][ T26] audit: type=1400 audit(1677586778.294:634): avc: denied { map } for pid=27955 comm="syz-executor.0" path="/dev/fb0" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 12:19:38 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b75a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:38 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000100)) 12:19:38 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x2, 0x0) r2 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xb1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0xc0, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/152, 0x98, 0x1, 0x15}, @fda={0x66646185, 0x1, 0x2, 0x1c}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}}, &(0x7f0000000300)={0x0, 0x28, 0x48}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)=ANY=[@ANYBLOB="852a6877010100000300000000000000000000000000000085616466000000e407000000000000000100000000000000150000f7ff000000852a646600000000", @ANYRES32=r0, @ANYBLOB='\x00'/12], &(0x7f00000003c0)={0x0, 0x18, 0x38}}}, @exit_looper, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x3}, @enter_looper, @free_buffer={0x40086303, r2}], 0x4e, 0x0, &(0x7f00000005c0)="13d5c1218be0da9f5981631005f72a68377a199cad7d07f2684ac679ab3584c7f7e164eeda310b5e85a3a8d902c22c54ef4f45e24d306a041e1884f1b1cd1ce8723c5f080bb18340f896997a193c"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="fbe194620200"], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r4, r0) (async) dup2(r4, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r6, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') (async) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r8, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r10, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000880)={0x74, 0x0, &(0x7f0000000740)=[@register_looper, @request_death={0x400c630e, 0x2}, @decrefs={0x40046307, 0x1}, @register_looper, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r7}, @fda={0x66646185, 0xa, 0x1, 0x11}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000640)={0x0, 0x18, 0x38}}}, @decrefs={0x40046307, 0x3}], 0x93, 0x0, &(0x7f00000007c0)="8460f3480105c7b5f1cbe7ffdfc37f9b1898ec95ccfd60d579367270e9b4e012c0fddd06d040e8e70142a0e984c7c9be7bd908ce9130aa07a8dd36ec91ff55ddbabebbf3d41a9c6b15a786be2b93de79dc67e86d9a99bd51c24ca825b50f1a35a9a05d170e48b4dfd830dd1c87eb5bc187c89efb6e6194794e92b5d9c75a812ecfa790940d5904d76ca013e08d6b1801973b28"}) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r12, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) dup2(r0, r3) (async) r13 = dup2(r0, r3) ioctl$BINDER_GET_FROZEN_INFO(r13, 0xc00c620f, &(0x7f0000000000)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:38 executing program 2: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$fb(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000002, 0x11, r0, 0x0) 12:19:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1163.160314][T27964] binder: 27962:27964 unknown command 1653924347 12:19:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x8931, &(0x7f0000000280)={'gre0\x00', 0x0}) 12:19:38 executing program 1: io_uring_setup(0x370a, &(0x7f00000000c0)={0x0, 0x9d9e, 0xa4d}) [ 1163.208480][T27964] binder: 27962:27964 ioctl c0306201 20000080 returned -22 12:19:38 executing program 0: r0 = io_uring_setup(0x614b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x13, 0x0, 0x0) 12:19:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1163.283811][T27964] binder: 27962:27964 ioctl c00c620f 20000000 returned -22 [ 1163.313246][T27964] binder_alloc: binder_alloc_mmap_handler: 27962 20ffc000-20ffd000 already mapped failed -16 12:19:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @empty}}}, 0xa0) 12:19:38 executing program 1: write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x4b7c, &(0x7f0000000340)) 12:19:38 executing program 0: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x4400, 0x0) [ 1163.343788][T27972] loop4: detected capacity change from 0 to 2048 [ 1163.418454][T27972] FAT-fs (loop4): bogus logical sector size 0 [ 1163.436099][T27972] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:38 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b85a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0863044038b73dd6b3929c24ad046ec18cbe0e8fab039b647c6e3d74087320c6d5568be925242efd7888b780ae1682df659128a95baec249e2edb791ce94289ac36ffe3e199cd2004362b75f5ff744ae50de2607d03520e13e0b09d7e011b9f41cbf59d11141d57d3a27cf6bc7f2072bd0797e10084c4002fd23"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:38 executing program 2: openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x402402, 0x0) 12:19:38 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x60, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}) 12:19:38 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, 0x0) [ 1163.520633][T27983] loop3: detected capacity change from 0 to 2048 12:19:38 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @ib={0x1b, 0x0, 0x0, {"db9faef15435630e533148050079cef5"}}}}, 0x118) [ 1163.581475][T27992] binder: 27989:27992 unknown command 1074029320 [ 1163.615710][T27992] binder: 27989:27992 ioctl c0306201 20000080 returned -22 12:19:38 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:39 executing program 0: syz_io_uring_setup(0x50ee, &(0x7f0000000880)={0x0, 0x0, 0x20}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x0, 0x0) [ 1163.689507][T27992] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.739179][T27992] binder: 27989:27992 ioctl 40046207 0 returned -16 [ 1163.749235][T27998] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.755295][T27998] binder: 27989:27998 ioctl 40046207 0 returned -16 12:19:39 executing program 2: io_uring_setup(0x279, &(0x7f0000000140)={0x0, 0x0, 0x200}) 12:19:39 executing program 1: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80), 0x10) [ 1163.812030][T27997] loop4: detected capacity change from 0 to 2048 [ 1163.864963][T28003] loop3: detected capacity change from 0 to 2048 [ 1163.867474][T26798] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:19:39 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0863044038b73dd6b3929c24ad046ec18cbe0e8fab039b647c6e3d74087320c6d5568be925242efd7888b780ae1682df659128a95baec249e2edb791ce94289ac36ffe3e199cd2004362b75f5ff744ae50de2607d03520e13e0b09d7e011b9f41cbf59d11141d57d3a27cf6bc7f2072bd0797e10084c4002fd23"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) (rerun: 32) dup2(r2, r0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1163.912735][T26769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1163.942008][T27997] FAT-fs (loop4): bogus logical sector size 0 12:19:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0xc0684608, 0x0) [ 1163.982834][T27997] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1164.094863][T28011] binder: 28010:28011 unknown command 1074029320 [ 1164.098284][T28013] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.107478][T28013] binder: 28010:28013 ioctl 40046207 0 returned -16 [ 1164.120923][T28013] binder: BINDER_SET_CONTEXT_MGR already set 12:19:39 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000240)={0x35}) 12:19:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b95a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:39 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x0) ioctl$UI_ABS_SETUP(r0, 0x400c55cb, 0x0) 12:19:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89b1, &(0x7f0000000280)={'gre0\x00', 0x0}) [ 1164.172975][T28011] binder: 28010:28011 ioctl c0306201 20000080 returned -22 12:19:39 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'sit0\x00', 0x0}) 12:19:39 executing program 2: io_uring_setup(0x4b7c, &(0x7f0000000340)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 12:19:39 executing program 0: openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) 12:19:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@local}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) [ 1164.335844][T28023] loop3: detected capacity change from 0 to 2048 [ 1164.394823][T28032] loop4: detected capacity change from 0 to 2048 12:19:39 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "df0898438d506d701b7d31bcb826e8cc059618c5f05e6f427359a77101c3f5caa0898b0373088188ea62ec6bfacf5cd37fcd97ddc47c9894ff74c3157cf7b24f"}, 0x48, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) [ 1164.436276][T28013] binder: 28010:28013 ioctl 40046207 0 returned -16 [ 1164.469581][T28032] FAT-fs (loop4): bogus logical sector size 0 [ 1164.508476][T28032] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:39 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0863044038b73dd6b3929c24ad046ec18cbe0e8fab039b647c6e3d74087320c6d5568be925242efd7888b780ae1682df659128a95baec249e2edb791ce94289ac36ffe3e199cd2004362b75f5ff744ae50de2607d03520e13e0b09d7e011b9f41cbf59d11141d57d3a27cf6bc7f2072bd0797e10084c4002fd23"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:39 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1TFu02AYBuAvbZoGFjojBkssTBVFLEwEoYIQlZBAGWCiEmWJESJZnCzkCByAQ3AEjsHAyo4ydTNKbQg10KRqggV9nsWv/vezfv9xlDy/8qr34vXg5ad376PdacRaJ1px2IitWIsYx5HyAgD8Jw7zPL7mhVPf/ObDSp4JAFitM/3/AwD/pCdPnz2809jbfZwk7YjJOOtm3Rh3xlm36O892Nu9nky1frprkmXd9R/9TlI43m/ExbK/8du+FdeuFv20u/tor9JvxtuVnx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM637SRpRkSSJMnWbHWSZd31ot9Ovqv002u5VA4c75txuXny3h9vNpZ6FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBsBsNRbz9ND/pHIc/zfLo6W5kTNhcd/nKhutfSwv2IGG5WqojPi59ibti5FDF3uD395FoRsewDnhw65Zv8q5vWFG7PnTnVt7cIt2KBl3v+Qp2/SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJ0Gw1FvP00P+oPZWrvOBwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAajcYjnr7aXrQr4SI2ChHqtUfQrMc/7Wq8XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjb4FAAD//6rFH4I=") 12:19:39 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) 12:19:39 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x17) 12:19:39 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7ba5a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:39 executing program 2: ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x1}) bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x3, 0x1, 0x202, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 12:19:39 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0x7, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000001040), 0x7, 0x20000) 12:19:39 executing program 0: r0 = io_uring_setup(0x4e77, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}, 0x20) 12:19:39 executing program 2: r0 = io_uring_setup(0x614b, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x3, 0x0, 0x0) 12:19:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:40 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) [ 1164.733077][T28053] binder: 28050:28053 unknown command 1074029320 12:19:40 executing program 0: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "df0898e15eb4d8701b7d31bcb826e8cc059618c5f05e6f427359a77101c3f5caa0898b0373088188ea622ec25b9f5cd37fcd97ddc47c9894ff74c3156df7b24f"}, 0x48, 0xfffffffffffffffb) [ 1164.786444][T28058] binder: BINDER_SET_CONTEXT_MGR already set [ 1164.786549][T28053] binder: 28050:28053 ioctl c0306201 20000080 returned -22 [ 1164.823949][T28058] binder: 28050:28058 ioctl 40046207 0 returned -16 12:19:40 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="84e4e9c4c274d29abd0fb0a76a079869d17cc2e97600ac8cde46e6e19be76164e637143cf40f95baca066b0511349128ff978ce96197f890aa68a16f985a6032462717b20b65904662ef323f3150722239b6ed77ee681326d40b71890bf12f124421301a81679bd8c08b3a6894595d9eee5eac76a26930ed5387dd3eb9742cd7ef6b44b004b4d32f5a6255c6370e8be3a0b918e93f07e54d17ca27e64c2fc8"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00130563846a4d24f0e5a7d3ba824d70c360797c34bbc0e2ba4d7d4e9daee2e81bbf02be722a78018fddd9070f53cfab6d2a9d5378bc99309afd2232510a42d682c741cfcc7556694b5c8614b7b00df4b84cc9a11b1922a7cd3ceca8d2d0704c642d54422aa43ab6aba5f4d55b48cc633ba2a6b196aaf54383a05bea053f713af8d7a254cc894058577de684937f35e801baf65465843838e0fc49ba4283fb8576f68f36affeb874dd036991e6e5ea4c0dec657534e3bab66c307a574bf30de70ec60b00"/208], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:40 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:19:40 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20) 12:19:40 executing program 1: renameat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') [ 1164.879189][T28055] loop4: detected capacity change from 0 to 2048 [ 1164.938409][T28055] FAT-fs (loop4): bogus logical sector size 0 [ 1164.957627][T28055] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1164.970817][T28061] loop3: detected capacity change from 0 to 2048 [ 1165.054099][T26769] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1165.081487][T28074] binder: 28071:28074 unknown command 3303662724 [ 1165.087920][T28074] binder: 28071:28074 ioctl c0306201 20000080 returned -22 12:19:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7bb5a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:40 executing program 1: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/custom0\x00', 0x0, 0x0) 12:19:40 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000300)=""/19, 0x13}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14) 12:19:40 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 12:19:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1165.146696][T26769] Buffer I/O error on dev loop4, logical block 1, async page read [ 1165.190098][T26769] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 12:19:40 executing program 0: syz_io_uring_setup(0x4fc9, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) 12:19:40 executing program 1: fsopen(&(0x7f0000000580)='hugetlbfs\x00', 0x0) [ 1165.233273][T28074] binder: 28071:28074 unknown command 1661276928 [ 1165.238240][T26769] Buffer I/O error on dev loop4, logical block 2, async page read [ 1165.259267][T26769] I/O error, dev loop4, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1165.260692][T28074] binder: 28071:28074 ioctl c0306201 20001480 returned -22 [ 1165.318345][T26769] Buffer I/O error on dev loop4, logical block 3, async page read 12:19:40 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4fc9, &(0x7f0000000080)={0x0, 0x0, 0x400}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0x0, 0x200}, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), 0x0) openat$incfs(0xffffffffffffffff, &(0x7f00000009c0)='.log\x00', 0x111002, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000a80)='./file0\x00', 0x1400) syz_io_uring_setup(0xdff, &(0x7f0000000cc0)={0x0, 0xbc02, 0x800}, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000000d40), &(0x7f0000000d80)) 12:19:40 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="84e4e9c4c274d29abd0fb0a76a079869d17cc2e97600ac8cde46e6e19be76164e637143cf40f95baca066b0511349128ff978ce96197f890aa68a16f985a6032462717b20b65904662ef323f3150722239b6ed77ee681326d40b71890bf12f124421301a81679bd8c08b3a6894595d9eee5eac76a26930ed5387dd3eb9742cd7ef6b44b004b4d32f5a6255c6370e8be3a0b918e93f07e54d17ca27e64c2fc8"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00130563846a4d24f0e5a7d3ba824d70c360797c34bbc0e2ba4d7d4e9daee2e81bbf02be722a78018fddd9070f53cfab6d2a9d5378bc99309afd2232510a42d682c741cfcc7556694b5c8614b7b00df4b84cc9a11b1922a7cd3ceca8d2d0704c642d54422aa43ab6aba5f4d55b48cc633ba2a6b196aaf54383a05bea053f713af8d7a254cc894058577de684937f35e801baf65465843838e0fc49ba4283fb8576f68f36affeb874dd036991e6e5ea4c0dec657534e3bab66c307a574bf30de70ec60b00"/208], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1165.378914][T28084] loop4: detected capacity change from 0 to 2048 [ 1165.386252][T26769] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1165.437783][T28084] FAT-fs (loop4): bogus logical sector size 0 [ 1165.443242][T26769] Buffer I/O error on dev loop4, logical block 4, async page read 12:19:40 executing program 0: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x408c5333, &(0x7f00000011c0)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 1165.497232][T28084] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1165.530989][T28094] binder: BINDER_SET_CONTEXT_MGR already set 12:19:40 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7bc5a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") [ 1165.566131][T28094] binder: 28093:28094 ioctl 40046207 0 returned -16 12:19:40 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0) [ 1165.837595][T28104] loop4: detected capacity change from 0 to 2048 [ 1165.864680][T28104] FAT-fs (loop4): bogus logical sector size 0 [ 1165.881368][T28104] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:41 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000300)=""/19, 0x13}, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001cc0)={{}, "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"}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x0, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x14) 12:19:41 executing program 1: r0 = io_uring_setup(0x4f57, &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x8000000) 12:19:41 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="84e4e9c4c274d29abd0fb0a76a079869d17cc2e97600ac8cde46e6e19be76164e637143cf40f95baca066b0511349128ff978ce96197f890aa68a16f985a6032462717b20b65904662ef323f3150722239b6ed77ee681326d40b71890bf12f124421301a81679bd8c08b3a6894595d9eee5eac76a26930ed5387dd3eb9742cd7ef6b44b004b4d32f5a6255c6370e8be3a0b918e93f07e54d17ca27e64c2fc8"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="84e4e9c4c274d29abd0fb0a76a079869d17cc2e97600ac8cde46e6e19be76164e637143cf40f95baca066b0511349128ff978ce96197f890aa68a16f985a6032462717b20b65904662ef323f3150722239b6ed77ee681326d40b71890bf12f124421301a81679bd8c08b3a6894595d9eee5eac76a26930ed5387dd3eb9742cd7ef6b44b004b4d32f5a6255c6370e8be3a0b918e93f07e54d17ca27e64c2fc8"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00130563846a4d24f0e5a7d3ba824d70c360797c34bbc0e2ba4d7d4e9daee2e81bbf02be722a78018fddd9070f53cfab6d2a9d5378bc99309afd2232510a42d682c741cfcc7556694b5c8614b7b00df4b84cc9a11b1922a7cd3ceca8d2d0704c642d54422aa43ab6aba5f4d55b48cc633ba2a6b196aaf54383a05bea053f713af8d7a254cc894058577de684937f35e801baf65465843838e0fc49ba4283fb8576f68f36affeb874dd036991e6e5ea4c0dec657534e3bab66c307a574bf30de70ec60b00"/208], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:41 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x10, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) 12:19:41 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0x40505331, &(0x7f00000011c0)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 1165.935150][T28116] binder: BINDER_SET_CONTEXT_MGR already set [ 1165.952561][ T26] audit: type=1400 audit(1677586781.234:635): avc: denied { setopt } for pid=28110 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1165.978312][T28116] binder: 28109:28116 ioctl 40046207 0 returned -16 [ 1166.004277][T28112] binder: 28109:28112 unknown command 3303662724 12:19:41 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7bd5a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1166.051766][T28112] binder: 28109:28112 ioctl c0306201 20000080 returned -22 12:19:41 executing program 1: openat$incfs(0xffffffffffffffff, &(0x7f0000000340)='.log\x00', 0x200000, 0x0) [ 1166.096066][T28118] binder: 28109:28118 unknown command 3303662724 [ 1166.099479][T28112] binder: 28109:28112 unknown command 1661276928 [ 1166.145482][T28118] binder: 28109:28118 ioctl c0306201 20000080 returned -22 [ 1166.198352][ T26] audit: type=1400 audit(1677586781.474:636): avc: denied { bind } for pid=28110 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1166.222758][T28112] binder: 28109:28112 ioctl c0306201 20001480 returned -22 [ 1166.233111][T28117] loop3: detected capacity change from 0 to 2048 12:19:41 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x10, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) 12:19:41 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r5, &(0x7f0000000040)='net/netfilter\x00') ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r6, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:41 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f0000000000)={0x0, 0x3, 0x1ffff000}) [ 1166.288763][T28127] loop4: detected capacity change from 0 to 2048 [ 1166.350745][T28127] FAT-fs (loop4): bogus logical sector size 0 [ 1166.374574][T28127] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:41 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1166.414872][T28134] binder: 28132:28134 ioctl 5429 20000000 returned -22 12:19:42 executing program 2: io_uring_setup(0x4b7c, &(0x7f0000000340)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), 0xffffffffffffffff) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e80)={&(0x7f0000000e40)='./file0\x00'}, 0x10) 12:19:42 executing program 1: openat$damon_init_regions(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) 12:19:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7be5a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r5, &(0x7f0000000040)='net/netfilter\x00') ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async, rerun: 32) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r6, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x8) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:42 executing program 0: openat$vsock(0xffffffffffffff9c, &(0x7f0000002e80), 0x8404, 0x0) 12:19:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000000)) [ 1166.746246][T28148] binder: 28143:28148 ioctl 5429 20000000 returned -22 [ 1166.783281][T28147] binder: BINDER_SET_CONTEXT_MGR already set 12:19:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1166.800139][T28147] binder: 28143:28147 ioctl 40046207 0 returned -16 12:19:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={&(0x7f0000000600), 0xc, &(0x7f0000000680)={0x0}}, 0x0) [ 1166.857651][T28145] loop4: detected capacity change from 0 to 2048 12:19:42 executing program 5: openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs(r5, &(0x7f0000000040)='net/netfilter\x00') ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r6, 0x400, 0x0) (async) fcntl$setlease(r6, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x8) (async) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:42 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000002dc0)='.pending_reads\x00', 0x0, 0x0) 12:19:42 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a00), 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, 0x0, 0x0) [ 1166.909281][T28145] FAT-fs (loop4): bogus logical sector size 0 [ 1166.939591][T28145] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:42 executing program 1: pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) 12:19:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7bf5a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:42 executing program 0: r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002a80), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1800009, 0x10, r0, 0x8000000) [ 1167.037834][T28165] binder: 28162:28165 ioctl 5429 20000000 returned -22 12:19:42 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "df0898438d506d701b7d31bcb826e8cc059618c5f05e6f427359a77101c3f5caa0898b0373088188ea62ec6bfacf5cd37fcd97ddc47c9894ff74c3157cf7b24f"}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "df0898438d506d701b7d31bcb826e8cc059618c5f05e6f427359a77101c3f5caa0898b0373088188ea62ec6bfacf5cd37fcd97ddc47c9894ff74c3157cf7b24f"}, 0x48, 0xfffffffffffffffb) 12:19:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) ioctl$CAPI_CLR_FLAGS(r5, 0x80044325, &(0x7f0000000040)) 12:19:42 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[], 0x10}}, 0x0) 12:19:42 executing program 0: ioctl$HIDIOCGRAWINFO(0xffffffffffffffff, 0x80084803, 0x0) io_uring_setup(0x33de, &(0x7f0000000240)={0x0, 0x0, 0x2, 0x0, 0x136}) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 12:19:42 executing program 2: socketpair(0xa, 0x0, 0x1ff, &(0x7f0000000280)) [ 1167.210422][T28172] loop3: detected capacity change from 0 to 2048 12:19:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) ioctl$CAPI_CLR_FLAGS(r5, 0x80044325, &(0x7f0000000040)) 12:19:42 executing program 1: syz_io_uring_setup(0x4fc9, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0x1, &(0x7f0000000180), &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x5a75, &(0x7f0000000640), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000006c0), 0x0) syz_io_uring_setup(0x3622, &(0x7f0000000740), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) [ 1167.266936][T28181] binder: 28180:28181 ioctl c0189378 20000000 returned -22 12:19:42 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 12:19:42 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:42 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000080)={'fscrypt:', @desc4}, &(0x7f0000000000)={0x0, "df0898438d506d707d31bcb811e8cc059618c5f05e6d427359a77101c3f58aa0898b0373088188ea62ec6bfacf5cd37fcd97ddc47c9894ff74c3157cf7b24f00"}, 0x48, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) [ 1167.401834][T28179] loop4: detected capacity change from 0 to 2048 [ 1167.469740][T28179] FAT-fs (loop4): bogus logical sector size 0 [ 1167.504358][T28179] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:42 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7c05a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:42 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6044, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0x2143}, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x3f00000000000000) 12:19:42 executing program 2: openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000f80)) 12:19:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) r3 = dup2(r2, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (rerun: 64) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) ioctl$CAPI_CLR_FLAGS(r5, 0x80044325, &(0x7f0000000040)) 12:19:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0001"], 0x5c}}, 0x0) [ 1167.586060][T28201] loop3: detected capacity change from 0 to 2048 12:19:42 executing program 1: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001180), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000011c0)={0x0, 0x0, 0x0, 'queue1\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x44082) 12:19:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1167.733856][T28206] binder: BINDER_SET_CONTEXT_MGR already set [ 1167.803120][T28206] binder: 28203:28206 ioctl 40046207 0 returned -16 12:19:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r4, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r6, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000140)) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) dup2(r5, r7) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440349a7241409f1e8159e1c271978735d3eaf2893b2b9e72f1"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) r9 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x2}) fcntl$setlease(r9, 0x400, 0x0) fremovexattr(r9, &(0x7f0000000180)=@known='system.posix_acl_default\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:43 executing program 1: io_uring_setup(0x4b7c, &(0x7f0000000340)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000c80), 0xffffffffffffffff) [ 1167.904497][T28215] loop4: detected capacity change from 0 to 2048 [ 1167.934769][T28215] FAT-fs (loop4): bogus logical sector size 0 [ 1168.001743][T28215] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1168.003153][T28222] loop3: detected capacity change from 0 to 2048 12:19:43 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000580)='.\x00', 0x0, 0x0, 0x0) [ 1168.068738][T28225] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.074817][T28225] binder: 28224:28225 ioctl 40046207 0 returned -16 12:19:43 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000200)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) [ 1168.157155][T28225] binder: BINDER_SET_CONTEXT_MGR already set 12:19:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:43 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7c15a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1168.208338][T28225] binder: 28224:28225 ioctl 4018620d 200001c0 returned -16 12:19:43 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) mkdir(0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6044, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0x2143}, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x3f00000000000000) 12:19:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r4, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r6, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000140)) (async, rerun: 64) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) dup2(r5, r7) (async, rerun: 64) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440349a7241409f1e8159e1c271978735d3eaf2893b2b9e72f1"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) (async) r9 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x2}) fcntl$setlease(r9, 0x400, 0x0) (async) fremovexattr(r9, &(0x7f0000000180)=@known='system.posix_acl_default\x00') (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:43 executing program 2: io_uring_setup(0x614b, &(0x7f0000000000)={0x0, 0x0, 0x306}) 12:19:43 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4605, &(0x7f0000000000)={0x0, 0x3}) 12:19:43 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1168.516644][T28235] loop4: detected capacity change from 0 to 2048 [ 1168.529287][T28235] FAT-fs (loop4): bogus logical sector size 0 12:19:43 executing program 2: syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x2002) 12:19:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x3c}}, 0x0) [ 1168.583016][T28240] binder: BINDER_SET_CONTEXT_MGR already set [ 1168.599038][T28235] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1168.659896][T28240] binder: 28236:28240 ioctl 40046207 0 returned -16 12:19:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7c25a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:44 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 64) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r4, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r6, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000140)) (async) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) dup2(r5, r7) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440349a7241409f1e8159e1c271978735d3eaf2893b2b9e72f1"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) r9 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x2}) fcntl$setlease(r9, 0x400, 0x0) (async) fremovexattr(r9, &(0x7f0000000180)=@known='system.posix_acl_default\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x100a, 0x3}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1168.739866][T28243] loop3: detected capacity change from 0 to 2048 12:19:44 executing program 2: r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x1, @sdr}) 12:19:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x3c}}, 0x0) [ 1168.826084][T28257] binder: BINDER_SET_CONTEXT_MGR already set 12:19:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1169.042356][T28257] binder: 28254:28257 ioctl 40046207 0 returned -16 [ 1169.074795][T28260] loop4: detected capacity change from 0 to 2048 [ 1169.083616][T28260] FAT-fs (loop4): bogus logical sector size 0 [ 1169.106796][T28260] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1169.145965][T28267] loop3: detected capacity change from 0 to 2048 12:19:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}]}}, &(0x7f0000000440)=""/195, 0x32, 0xc3, 0x1}, 0x20) 12:19:44 executing program 2: syz_open_dev$dri(&(0x7f0000001040), 0x0, 0x20000) 12:19:44 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89b0, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @dev}}}}) 12:19:44 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:44 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:44 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7fe5a5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:44 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8918, &(0x7f0000000380)={'vxcan1\x00'}) 12:19:44 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0x3, &(0x7f0000000940)=@framed, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 1169.608918][T28270] loop3: detected capacity change from 0 to 2048 [ 1169.629204][T28274] binder: 28268:28274 unknown command 0 [ 1169.638988][T28277] loop4: detected capacity change from 0 to 2048 [ 1169.648535][T28274] binder: 28268:28274 ioctl c0306201 20000080 returned -22 12:19:44 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8929, &(0x7f0000000380)={'vxcan1\x00'}) [ 1169.661896][T28277] FAT-fs (loop4): bogus logical sector size 0 [ 1169.668031][T28277] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) (async, rerun: 64) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async, rerun: 32) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:45 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001bc0)={'wlan1\x00'}) [ 1169.800161][ T26] audit: type=1400 audit(1677586785.084:637): avc: denied { ioctl } for pid=28281 comm="syz-executor.2" path="socket:[105345]" dev="sockfs" ino=105345 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 12:19:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000009d80)=[{{&(0x7f0000003480)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000003780)=[{&(0x7f00000034c0)="bcc199aaefe0473f081f69ef7c2ec717abe98fb19eaaca0f93709ee5e8c2d9ba40940f034498a50096afebdf0b703c944cd4d0859f697d0ac24f9fd5d1cc41bc078d3e747121b09b98c7a031eac295259f83cd654e438f574cd522661bbda5ac7871f7afa8d1cf443dd4027c8662d9ba469c176a05af46cfe98c17", 0x7b}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000003800)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}], 0x2, 0x0) 12:19:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40ff94a6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101}], {0x14}}, 0xcc}}, 0x0) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003200)={'ip_vti0\x00', 0x0}) r2 = socket(0x1e, 0x1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x2000011a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000003080)={'tunl0\x00', &(0x7f0000003980)=ANY=[@ANYBLOB="6776657461143338491f5c20f8000000", @ANYRES32=r4, @ANYBLOB="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"]}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f00000037c0)=[{{&(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="9f4cd7d06d6bc71209104f8e2539e4b78a89734f48d74a354dc1f94ed66832ae2ea34d98721fce2c2c826d8b958e2980cce044ff022d251037ab4422aa309b9942e2f3761c563f55b6872701de62275f0f53a093b680c53eee0896c2e239fa0adebfef7730a68a53b197729913542b2aab2f25d13f1e5047e113790a0dd24e", 0x7f}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000000400)="55d91f0f7b68f1288a085cc45943664934121da649e9ca66e1233f01", 0x1c}], 0x3}}, {{&(0x7f0000001500)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000001540)="75c7d107cb30ec14bd14b4e9b7b7d58509a0d11eec82f1eaafcc0588ac868fe76de2e0dbb4ead13e7ae5f252c15dbf9432ce845bbf3949db3e89d488674f875a3f9dd0792ec8d726cfbe4444c9a67e955ac7444ea6e9ae0e091c18a38f39550c1fa6e800fc78d3f9e32d2599bdb017241e099f3de7f9f8ee7b4c71bbcb1711da67", 0x81}, {&(0x7f0000001600)="6ef6df7cdc131427e9fa9d8a13a3fbdba2642e0c21f370d9f6a56c0b1c6dcb11ac2988004b5c09e8073fd1c3ea82cbb24e5b87c94589488743cad20b74b34f47566e0d7dfed18d46c5a36a2487236c561db2ba84d390867a5f1cf6dac398ed9978293a3f0ad842d8852638a301658993f23f20aca445898ec7a5a45609b0f06cfc9958f597e4d35328412658aa42b9de7f53a1dd88f5c2f9003e2ff246d824e1f5c6efa12c4475681e6ba266263ad25dad501327dea6709196fc7381646a5b3cec2e8a61b527c32522d00c1efbdf64ee6cfda7ce3389c59db8", 0xd9}, {&(0x7f0000001700)="24567ccea8ec5dda159df5851e69176a157a39f094089ad45a77272dce798b31a32d09de5688154bdbe93514c723a10b9f7b10428215b885ee12ee3ac4338d18f694aea8908c20ea1423b0563ac42952a1dc1eb999ca16e18c09bebd39879ed384bc45593756334b35454e8a0bb1c47f27fbbea8a60eb814cdcdcbefd2c60e086c1e9f8a5c134ab76e57300310d7a047d1863372b267f4fa2ff722afc7a263cbc97c37abfbf55e2017962a2d66f01c42e4625bebe22391967bbe5cca90fd8ac6b083129bb144f0702fe0c9b74cd12c77ae09af5b4cef03f73ade8dc0cab0", 0xde}, {0x0}, {&(0x7f0000002900)="62957cdfcc663716bbed7be29a68267ba5aabe4c39040b7a903cffe00ae3a0421e3bde908a95318939de9289ff32b8f297a2d391862b9d3338bab7d23622e017b453e209960a4ec212f52bc466465953fcc695ff02a4b86301f72982c837f32446d7cba7708d9970946d9ab868325df24ba5e1b776c9828df3435334ba3a22f2a611a1cf87c914b29b63e3376fffd59af31a6dc9f1f2e1cf5b2514370b567015fcdb4c8f", 0xa4}, {&(0x7f00000029c0)="8dd071ba769c056eb29647a812127a1da2567fc0356038abab7c1ce797ae03c2dec1152fab02a2a9a5a8649ac527b789fef7e718ba3cc1fa9787ad7fdf96a4cc2fce0d6557a8d2d155d783a2c3048c2c5af525a24e804bc2b121", 0x5a}, {&(0x7f0000002a40)="756df6bc4de91dad2d1932ddeaa6ab11b61b94a45b4889e88c4173821340504068a5ec1fd3ec862debb859afa185166a5e70a8f469c0b092b64bc646727a185c0cca1fde161349c9eeb546e2c1435dad39f1a3f9bc8ecb73435e90d092aff9f1a87331abad2320877302d9da48731e903e27479cde80baeee02f59c96c6de990abd4d3693019c406e183e6405f175b3f5e421f8577fe24c9278e4aa126c76f9a1e27e7f8d8", 0xa5}, {&(0x7f0000002b40)="d25547fc7276237210083d24704854915a570aa4b61bc9d8009eb5d10b6c2f3ebb2c234dcdb262b79a203ff59e806f3567f65e2deaf55938be3aa0cfa41e99d8530fa52cb42ecdf4ce11cb6970272cd3ad113617703057659710798c9a613d20eff5c3b8577244480e4f50b301e933d4e9f295130604f9dbef40ea6a0f5b79cc93c1dbf3", 0x84}], 0x8, &(0x7f0000002cc0)=[@ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x14, 0xd2, 0x3, 0x6, [{@loopback, 0x20}, {@loopback, 0x9}]}, @lsrr={0x83, 0x1b, 0xdf, [@dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x20}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000002d80)="c9ae9b91cf3ed45e21208a88486105bdb927b01d1b412d97fc8ff4c7d0e760915ea671d1e777b63114f5f66625edea8f05a0798ee85107d52f958cd34c471b33fa0f3db9dd275f89f5a9ededaad012ae0642a6d6fd32e180d8a019c1a2795eaccbad45186e0cd26005f9edb60196d02c8da4b0b91a3d7ccfc75924d61ce8d9cb8dfa32444e234fd945a815", 0x8b}], 0x1}}, {{&(0x7f0000002e80)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000002fc0)=[{&(0x7f0000002ec0)="c3e67c2d926118ce641a412b03c105e7e0936b839c0b3ada261e1f6db1dab16fa35cdef1ef5ae4eda7c1c1461606e9a05175f661ac70e57082380c0f891ec4277f8d8e4e0ea1d6e3eb12a8fafb1ba3077b66bceaaf2d07b2818f614f5788b344d563c6aa059f113d2b83f19251151a1350c1593fd8f386091863b04278b6de8d7f63d85a50e35a90616649dc63b5986101b09ca58d4c03693df3d99c105c9f0ddd9eff30a5982f87a0318a6711f43498c40ec44a569e4421cc3abb5c33c94826", 0xc0}], 0x1, &(0x7f0000003000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003100)=[{&(0x7f00000030c0)="4169507dd8903b464d3f3f639e74bfdeb0616fc83b6bcdba19b5680cf6a0a0ef60fe", 0x22}], 0x1, &(0x7f0000003240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_retopts={{0xb4, 0x0, 0x7, {[@noop, @noop, @generic={0x82, 0x2}, @timestamp={0x44, 0xc, 0xb5, 0x0, 0x6, [0x200, 0xfffffff9]}, @ssrr={0x89, 0x7, 0x0, [@local]}, @cipso={0x86, 0x2d, 0x0, [{0x6, 0xb, "a526b51e6296fc5ab8"}, {0x1, 0x7, "655b04c65b"}, {0x5, 0xa, "328db8a173844f12"}, {0x5, 0xb, "6463b2c84380cd6ef2"}]}, @lsrr={0x83, 0x23, 0x4, [@empty, @multicast2, @multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0x6e, 0x1, 0x3, [{@broadcast, 0x5}, {@loopback, 0xec46}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x4bebe2e0}, {@empty, 0xf9}, {@loopback}, {@private=0xa010101}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010101, @broadcast}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @end, @timestamp_prespec={0x44, 0x24, 0xe5, 0x3, 0xb, [{@broadcast, 0xaf}, {@local, 0x4}, {@loopback, 0x7}, {@rand_addr=0x64010100}]}]}}}], 0x180}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003640)}], 0x1, &(0x7f00000036c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp={0x44, 0x8, 0x0, 0x0, 0x0, [0xffffffff]}]}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@dev, 0x7ff}, {@remote, 0x3}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x88}}], 0x6, 0x4) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0x2000011a) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f00000004c0)={&(0x7f0000000240), 0xc, &(0x7f0000000480)={0x0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x6c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x480c5}, 0x800) 12:19:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45b5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:45 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x89a2, &(0x7f0000000380)={'vxcan1\x00'}) [ 1169.973869][T28292] binder: 28289:28292 unknown command 0 12:19:45 executing program 2: socketpair(0x25, 0x0, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={0x0}}, 0x20048084) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x100, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc051) syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000f00)=0x1, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}}, 0x0) socketpair(0x0, 0x5, 0x0, 0x0) 12:19:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000009d80)=[{{&(0x7f0000003480)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000003780)=[{&(0x7f00000034c0)="bcc199aaefe0473f081f69ef7c2ec717abe98fb19eaaca0f93709ee5e8c2d9ba40940f034498a50096afebdf0b703c944cd4d0859f697d0ac24f9fd5d1cc41bc078d3e747121b09b98c7a031eac295259f83cd654e438f574cd522661bbda5ac7871f7afa8d1cf443dd4027c8662d9ba469c176a05af46cfe98c17", 0x7b}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000003800)}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}}], 0x2, 0x0) [ 1170.065611][T28292] binder: 28289:28292 ioctl c0306201 20000080 returned -22 [ 1170.080068][ T26] audit: type=1400 audit(1677586785.364:638): avc: denied { ioctl } for pid=28293 comm="syz-executor.0" path="socket:[106187]" dev="sockfs" ino=106187 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1170.101044][ T5535] tipc: Subscription rejected, illegal request 12:19:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async, rerun: 32) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async, rerun: 64) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1170.155567][T28301] loop4: detected capacity change from 0 to 2048 [ 1170.188803][T28301] FAT-fs (loop4): bogus logical sector size 0 12:19:45 executing program 0: bpf$BPF_LINK_CREATE_XDP(0x1c, 0xfffffffffffffffe, 0x0) [ 1170.212068][T28301] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1170.214439][T28304] loop3: detected capacity change from 0 to 2048 [ 1170.232608][ T26] audit: type=1400 audit(1677586785.514:639): avc: denied { setopt } for pid=28308 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 12:19:45 executing program 0: pipe(&(0x7f0000001d40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 12:19:45 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45c5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:45 executing program 2: socketpair(0x25, 0x0, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={0x0}}, 0x20048084) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x0, 0x100, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vxcan0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc051) syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'wlan1\x00'}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000f00)=0x1, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}}, 0x0) socketpair(0x0, 0x5, 0x0, 0x0) [ 1170.368867][T28314] binder: 28313:28314 unknown command 0 12:19:45 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01wYBuAvbZrm/xc6IwZLLEwVZetEECoIUQkJlAEmKhGWGCGSxclCLoEL4CK4HAZWdpSpm1FqQ6iBJlUTLOjzLH513s86PnGUPL/2qv/i9fDlx3fvo91pxEYnWnHciJ3YiJjEifICAPwjjvM8vuSFc9/85sNangkAWK8L/f8DAH+lJ0+fPbzTODx4nCTtiOkk62bdmHQmWbfo7z04PLiZzLR+uGuaZd3N7/1eUjjdb8X/ZX/rl30rblwv+ll399Fhpd+Ot2s/PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG67SdKMiCRJkp356jTLuptFv5t8U+ln13KpHDjdN+Nq8+y9O/uNlZ4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuJjhaNw/StPe4CTkeZ7PVucrC8L2ssOf/6vutbJwPyJG25Uq4tPyp1gY9q5ELBxuzz65VkSs+oBnh075Jv/opjWF2wtnzvXtLcJ+LPFyL1+o81cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo03A07h+laW8wnK+163wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB2w9G4f5SmvUElRMRWOVKtfhOa5fjPVY3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGr0NQAA///iTx8H") 12:19:45 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8913, &(0x7f0000000380)={'vxcan1\x00'}) [ 1170.449216][T28314] binder: 28313:28314 ioctl c0306201 20000080 returned -22 12:19:45 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8936, &(0x7f0000000380)={'vxcan1\x00'}) 12:19:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) dup3(r3, r4, 0x80000) dup2(r2, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:45 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000009d80)=[{{&(0x7f0000003480)={0x2, 0x0, @loopback=0xac14140b}, 0x10, &(0x7f0000003780)=[{&(0x7f00000034c0)="bc", 0x1}], 0x1}}], 0x1, 0x0) 12:19:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000009d80)=[{{&(0x7f0000003480)={0x2, 0x0, @loopback=0xac14141d}, 0x10, &(0x7f0000003780)=[{&(0x7f00000034c0)="bc", 0x1}], 0x1}}], 0x1, 0x0) [ 1170.649234][T28324] loop4: detected capacity change from 0 to 2048 [ 1170.684157][T28331] loop3: detected capacity change from 0 to 2048 12:19:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) dup3(r3, r4, 0x80000) (async) dup2(r2, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan1\x00'}) [ 1170.709305][T28324] FAT-fs (loop4): bogus logical sector size 0 [ 1170.727504][T26769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:19:46 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8932, &(0x7f0000000380)={'vxcan1\x00'}) [ 1170.758390][T28324] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01wYBuAvbZrm/xc6IwZLLEwVZetEECoIUQkJlAEmKhGWGCGSxclCLoEL4CK4HAZWdpSpm1FqQ6iBJlUTLOjzLH513s86PnGUPL/2qv/i9fDlx3fvo91pxEYnWnHciJ3YiJjEifICAPwjjvM8vuSFc9/85sNangkAWK8L/f8DAH+lJ0+fPbzTODx4nCTtiOkk62bdmHQmWbfo7z04PLiZzLR+uGuaZd3N7/1eUjjdb8X/ZX/rl30rblwv+ll399Fhpd+Ot2s/PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG67SdKMiCRJkp356jTLuptFv5t8U+ln13KpHDjdN+Nq8+y9J/uNlZ4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuJjhaNw/StPe4CTkeZ7PVucrC8L2ssOf/6vutbJwPyJG25Uq4tPyp1gY9q5ELBxuzz65VkSs+oBnh075Jv/opjWF2wtnzvXtLcJ+LPFyL1+o81cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo03A07h+laW8wnK+163wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB2w9G4f5SmvUElRMRWOVKtfhOa5fjPVY3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGr0NQAA///3Vx9H") 12:19:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45d5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:46 executing program 0: sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x241afbc2e2cfb601) 12:19:46 executing program 1: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r2, @ANYBLOB="00000010020000001c001a800800028009002d0008000200f5642d", @ANYRES8=r0], 0x44}}, 0x0) 12:19:46 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x0) 12:19:46 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8923, &(0x7f0000000380)={'vxcan1\x00'}) [ 1170.978537][T28348] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.004893][T28346] loop3: detected capacity change from 0 to 2048 [ 1171.009019][T28348] binder: 28342:28348 ioctl 40046207 0 returned -16 12:19:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) dup3(r3, r4, 0x80000) (async) dup3(r3, r4, 0x80000) dup2(r2, r0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1171.158073][T28353] loop4: detected capacity change from 0 to 2048 [ 1171.180798][T28361] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.187592][T28353] FAT-fs (loop4): bogus logical sector size 0 [ 1171.204376][T28353] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1171.211533][T28361] binder: 28360:28361 ioctl 40046207 0 returned -16 [ 1171.231421][T28363] binder_alloc: binder_alloc_mmap_handler: 28360 20ffc000-20ffd000 already mapped failed -16 [ 1171.255423][T28361] binder_alloc: 28360: binder_alloc_buf, no vma 12:19:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000dc0)={0x0}, &(0x7f0000000e00)=0xc) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) dup2(r0, r2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45e5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") [ 1171.413326][T28365] loop3: detected capacity change from 0 to 2048 12:19:46 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1171.565912][T28370] binder: BINDER_SET_CONTEXT_MGR already set [ 1171.622287][T28369] loop4: detected capacity change from 0 to 2048 [ 1171.629392][T28370] binder: 28366:28370 ioctl 40046207 0 returned -16 12:19:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000dc0)={0x0}, &(0x7f0000000e00)=0xc) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) (async) dup2(r0, r2) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1171.667090][T28369] FAT-fs (loop4): bogus logical sector size 0 [ 1171.681579][T28369] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45f5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1171.743161][T28373] loop3: detected capacity change from 0 to 2048 12:19:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1171.869555][T28375] binder: BINDER_SET_CONTEXT_MGR already set 12:19:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) [ 1171.934915][T28375] binder: 28374:28375 ioctl 40046207 0 returned -16 [ 1171.975353][T28378] loop4: detected capacity change from 0 to 2048 [ 1172.006746][T28378] FAT-fs (loop4): bogus logical sector size 0 [ 1172.025375][T28378] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1172.177626][T28384] loop3: detected capacity change from 0 to 2048 12:19:47 executing program 1: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r2, @ANYBLOB="00000010020000001c001a800800028009002d0008000200f5642d", @ANYRES8=r0], 0x44}}, 0x0) 12:19:47 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = gettid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000dc0)={0x0}, &(0x7f0000000e00)=0xc) kcmp$KCMP_EPOLL_TFD(r3, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) dup2(r0, r2) (async) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:47 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4605b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:47 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:47 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000003780)=[{&(0x7f00000034c0)="bcc199aaefe0473f081f69ef7c2ec717abe98fb19eaaca0f93709ee5748af82cfa661ae8c2d9ba40940f034498a50096afebdf0b703c944cd4d0859f697d0ac24f9fd5d1cc41bc078d3e747121b09b98c7a031eac295259f83cd654e438f574cd522661bbda5ac7871f7afa8d1cf443dd4027c8662d9ba469c176a", 0x7b}, {0x0, 0xffffffffffffff27}, {0x0}, {0x0}], 0x193, &(0x7f0000000100)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 12:19:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007c80)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000000780)=@newtaction={0x14, 0x28, 0x1}, 0x14}}, 0x0) [ 1172.734861][T28393] binder: BINDER_SET_CONTEXT_MGR already set [ 1172.764272][T28392] loop4: detected capacity change from 0 to 2048 12:19:48 executing program 1: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x541b, &(0x7f0000000380)={'vxcan1\x00'}) [ 1172.787121][T28390] loop3: detected capacity change from 0 to 2048 [ 1172.819779][T28393] binder: 28388:28393 ioctl 40046207 0 returned -16 12:19:48 executing program 2: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8982, &(0x7f0000000380)={'vxcan1\x00'}) 12:19:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1172.844221][T28392] FAT-fs (loop4): bogus logical sector size 0 [ 1172.876286][T28392] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1172.914029][ T26] audit: type=1400 audit(1677586788.194:640): avc: denied { getattr } for pid=28402 comm="syz-executor.1" path="socket:[106538]" dev="sockfs" ino=106538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 12:19:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6cc"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304c02bc1d739368625874adc3f366b831721aa9943cfd8328820"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:48 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x9}]}]}}, &(0x7f0000000440)=""/195, 0x32, 0xc3, 0x1}, 0x20) 12:19:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4615b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000), 0x10) 12:19:48 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) 12:19:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:48 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1173.166851][T28413] loop4: detected capacity change from 0 to 2048 12:19:48 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000002007000000", @ANYRES32=r2, @ANYBLOB="00000010020000001c001a800800028009002d0008000200f5642d", @ANYRES8=r0], 0x44}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001e40)}}], 0x1, 0x0) 12:19:48 executing program 1: mq_open(&(0x7f0000000000)='UX)\x8f\x00\x00\x00\x00\x00\t\x00', 0x1, 0x0, 0x0) [ 1173.209483][T28413] FAT-fs (loop4): bogus logical sector size 0 [ 1173.247847][T28413] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:48 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) [ 1173.278429][T24349] usb 6-1: new low-speed USB device number 12 using dummy_hcd 12:19:48 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4625b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1173.449442][T28423] loop3: detected capacity change from 0 to 2048 [ 1173.606585][T28432] loop4: detected capacity change from 0 to 2048 [ 1173.630342][T28432] FAT-fs (loop4): bogus logical sector size 0 [ 1173.636649][T28432] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1173.644068][T24349] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.655074][T24349] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1173.664933][T24349] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1173.676650][T24349] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1173.686489][T24349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.728816][T28405] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1173.750559][T24349] hub 6-1:1.0: bad descriptor, ignoring hub [ 1173.756568][T24349] hub: probe of 6-1:1.0 failed with error -5 [ 1173.810145][T24349] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1173.823582][T24349] cdc_wdm 6-1:1.0: Unknown control protocol [ 1174.036437][T28433] binder: 28404:28433 unknown command 3221512964 [ 1174.043120][T28433] binder: 28404:28433 ioctl c0306201 20000080 returned -22 [ 1174.111291][T24349] usb 6-1: USB disconnect, device number 12 12:19:49 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6cc"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304c02bc1d739368625874adc3f366b831721aa9943cfd8328820"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 12:19:49 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01wYBuAvbZrm/xc6IwZLLEwVZUMMBKGCEJWQQBlgohJhiREiWZws5BK4AC6Cy2FgZUeZuhmlNoQaaFI1wYI+z+JX5/2s4xNHyfMrr/ovXg9ffnz3PtqdRmx0ohVHjdiJjYhJHCsvAMA/4ijP40teOPPNbz6s5ZkAgPU61/8/APBXevL02cM7jYP9x0nSjphOsm7WjUlnknWL/t6Dg/3ryUzrh7umWdbd/N7vJYWT/Vb8X/Y3ftm34trVop91dx8dVPrteLv20wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMW2myTNiEiSJNmZr06zrLtZ9LvJN5V+di2XyoGTfTMuN0/fu3OrsdKzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOczHI37h2naGxyHPM/z2ep8ZUHYXnb483/VvVYW7kfEaLtSRXxa/hQLw96liIXD7dkn14qIVR/w9NAp3+Qf3bSmcHvhzJm+vUW4GUu83IsX6vxVAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6jQcjfuHadobDOdr7TofCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo3XA07h+maW9QCRGxVY5Uq9+EZjn+c1Xj8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAafQ0AAP//ovkfCQ==") 12:19:49 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:49 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4635b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:49 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) unlinkat(r0, &(0x7f00000005c0)='./file1/file0\x00', 0x0) 12:19:50 executing program 0: sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:50 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fchown(r0, 0xffffffffffffffff, 0x0) 12:19:50 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fchownat(r0, 0x0, 0x0, 0x0, 0x0) [ 1174.771432][T28445] binder: 28444:28445 unknown command 3221512964 [ 1174.786394][T28438] loop4: detected capacity change from 0 to 2048 [ 1174.797589][T28445] binder: 28444:28445 ioctl c0306201 20000080 returned -22 [ 1174.815241][T28441] loop3: detected capacity change from 0 to 2048 12:19:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:50 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x5411, 0x0) [ 1174.839418][T28438] FAT-fs (loop4): bogus logical sector size 0 12:19:50 executing program 1: semtimedop(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}) 12:19:50 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400000102090000052406000105240800000d240f0100000000000000000006241a000000190581c6cc"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304c02bc1d739368625874adc3f366b831721aa9943cfd8328820"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1174.888440][T28438] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:50 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x1000}, {0x0, 0xfffc}], 0x2, &(0x7f0000000080)) 12:19:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4645b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:50 executing program 1: io_setup(0x6, &(0x7f0000000040)=0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) io_submit(r0, 0x2, &(0x7f0000000640)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) 12:19:50 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xa14400, 0x0) [ 1175.118376][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.171913][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.236800][T28470] loop4: detected capacity change from 0 to 2048 [ 1175.254148][T28467] binder: BINDER_SET_CONTEXT_MGR already set 12:19:50 executing program 2: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000040)=[{0x0, 0xfffc, 0x800}], 0x1, &(0x7f0000000080)) [ 1175.283953][T28470] FAT-fs (loop4): bogus logical sector size 0 [ 1175.291498][T28471] loop3: detected capacity change from 0 to 2048 [ 1175.304489][T28470] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1175.317219][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 12:19:50 executing program 1: syz_mount_image$fuse(&(0x7f0000001980), &(0x7f00000019c0)='./file0\x00', 0x251200, &(0x7f0000001a00)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee00}}, 0x0, 0x0, 0x0) [ 1175.344094][T28467] binder: BINDER_SET_CONTEXT_MGR already set 12:19:50 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4655b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1175.404055][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 12:19:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:50 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1TFu02AYBuAvbZoGFjojBkssTBVlQwwEoYIQlZBAGWCiEmWJESJZnCzkCByAQ3AEjsHAyo4ydTNKbQg10KRqggV9nsWv/vezfv9xlDy/8qr34vXg5ad376PdacRaJ1px2IitWIsYx5HyAgD8Jw7zPL7mhVPf/ObDSp4JAFitM/3/AwD/pCdPnz2809jbfZwk7YjJOOtm3Rh3xlm36O892Nu9nky1frprkmXd9R/9TlI43m/ExbK/8du+FdeuFv20u/tor9JvxtuVnx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM637SRpRkSSJMnWbHWSZd31ot9Ovqv002u5VA4c75txuXny3h9vNZZ6FgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBsBsNRbz9ND/pHIc/zfLo6W5kTNhcd/nKhutfSwv2IGG5WqojPi59ibti5FDF3uD395FoRsewDnhw65Zv8q5vWFG7PnTnVt7cIN2OBl3v+Qp2/SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJ0Gw1FvP00P+oPZWrvOBwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAajcYjnr7aXrQr4SI2ChHqtUfQrMc/7Wq8XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjb4FAAD//80JH4k=") 12:19:50 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) [ 1175.487175][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.552122][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.575570][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.588192][T17961] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 1175.623227][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.655070][T28483] loop4: detected capacity change from 0 to 2048 [ 1175.662215][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.676096][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.685729][T28483] FAT-fs (loop4): bogus logical sector size 0 [ 1175.693900][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.701204][T28483] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1175.714963][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.736680][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.755151][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.773234][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.811488][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.831811][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.845812][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.867628][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.884924][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.905766][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.917086][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.925047][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.931718][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.940838][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.946942][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.954696][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.961083][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.967843][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.974349][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1175.982380][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1175.988611][T17961] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.988806][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.005895][T17961] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1176.007870][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.021342][T17961] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 1176.021388][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.039445][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.043930][T17961] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1176.045548][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.061378][T17961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.066257][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.075871][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.083882][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.090396][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.097484][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.104778][T28475] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1176.108981][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.120389][T17961] hub 6-1:1.0: bad descriptor, ignoring hub [ 1176.126358][T17961] hub: probe of 6-1:1.0 failed with error -5 [ 1176.134641][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.141293][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.148628][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.154761][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.162049][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.170457][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.177322][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.183972][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.189021][T17961] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1176.193087][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.196510][T17961] cdc_wdm 6-1:1.0: Unknown control protocol [ 1176.209736][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.216588][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.225229][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.232424][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.240440][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.247229][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.253611][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.260464][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.266483][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.273261][T28467] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.279472][T28467] binder: 28464:28467 ioctl 40046207 0 returned -16 [ 1176.333173][T28469] binder: 28464:28469 unknown command 3221512964 [ 1176.341117][T28469] binder: 28464:28469 ioctl c0306201 20000080 returned -22 [ 1176.352427][T28475] binder: BINDER_SET_CONTEXT_MGR already set [ 1176.358779][T28475] binder: 28464:28475 ioctl 40046207 0 returned -16 12:19:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0xe8, 0x0, &(0x7f0000000580)=[@dead_binder_done, @enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/223, 0xdf, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/149, 0x95, 0x2, 0x31}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x40}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x3, 0x0, 0x2b}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r4}, @acquire_done={0x40106309, 0x2}, @request_death={0x400c630e, 0x1}, @clear_death={0x400c630f, 0x2}], 0x50, 0x0, &(0x7f0000000440)="9d09f702dc850e1d968be967dd979dcc1a112931af8ddeab26c88b145d0ed50af6ad5cb9f8e3eb7bf0115a4e8b70cfd1c0ce6ecfdbcb8c1d7edce1bf91b0ce2be90e23a4e91ca9296bb6aa436e148552"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:51 executing program 2: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000014c0)) getresuid(&(0x7f0000002940), &(0x7f0000002980), &(0x7f00000029c0)) 12:19:51 executing program 1: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept$inet6(r0, 0x0, &(0x7f0000000400)) 12:19:51 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4665b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:51 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1T9rE2EcB/Bf2jSNLnYWhwMXp2LdBMGIVBELgpJBJwvGJSdislyymJfgC/BF+HIcXN0lU7eT9E5jzz9JaeKh/XyW+/J8f8dzTy4kz6+86r94PXz58d37aHcasdGJVhw1Yic2IiZxrLwAAP+JozyPL3nh1De/+bCWZwIA1utM//8AwD/pydNnD+80DvYfJ0k7YjrJulk3Jp1J1i36ew8O9q8nM60f7ppmWXfze7+XFE72W3Gx7G/8sm/FtatFP+vuPjqo9Nvxdu2nBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA8203SZoRkSRJsjNfnWZZd7Pod5NvKv3sWi6VAyf7ZlxuLtj8VmOVRwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOaDga9w/TtDc4Dnme57PV+cqCsL3s8OcL1b1WFu5HxGi7UkV8Wv4UC8PepYiFw+3ZJ9eKiFUf8M+hU77Jv7ppTeH2wplTfXuLcDOWeLnnL9T5qwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANRpOBr3D9O0NxjO19p1PhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULvhaNw/TNPeoBIiYqscqVa/Cc1y/OeqxuMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANfoaAAD//25GHso=") 12:19:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:52 executing program 2: timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) readv(r1, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) close_range(r3, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f00000003c0)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000400)) timer_create(0x0, 0x0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0, 0x1) signalfd4(r1, &(0x7f0000000200)={[0xffffffffffffeb3c]}, 0x8, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 1176.680579][T24349] usb 6-1: USB disconnect, device number 13 12:19:52 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000005580), 0x0, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 1176.823243][T28499] loop3: detected capacity change from 0 to 2048 [ 1176.825634][T28504] loop4: detected capacity change from 0 to 2048 12:19:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async, rerun: 64) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0xe8, 0x0, &(0x7f0000000580)=[@dead_binder_done, @enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/223, 0xdf, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/149, 0x95, 0x2, 0x31}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x40}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x3, 0x0, 0x2b}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r4}, @acquire_done={0x40106309, 0x2}, @request_death={0x400c630e, 0x1}, @clear_death={0x400c630f, 0x2}], 0x50, 0x0, &(0x7f0000000440)="9d09f702dc850e1d968be967dd979dcc1a112931af8ddeab26c88b145d0ed50af6ad5cb9f8e3eb7bf0115a4e8b70cfd1c0ce6ecfdbcb8c1d7edce1bf91b0ce2be90e23a4e91ca9296bb6aa436e148552"}) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:52 executing program 1: r0 = semget$private(0x0, 0x4, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) 12:19:52 executing program 2: openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8241, 0x0) [ 1176.874544][T28504] FAT-fs (loop4): bogus logical sector size 0 [ 1176.896593][T28504] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4675b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:52 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0x40086602, 0x0) 12:19:52 executing program 2: openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000d80), 0x40000, 0x0) 12:19:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0xe8, 0x0, &(0x7f0000000580)=[@dead_binder_done, @enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/223, 0xdf, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/149, 0x95, 0x2, 0x31}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x40}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@fda={0x66646185, 0x3, 0x0, 0x2b}, @fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r6}}, &(0x7f00000003c0)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x1}, @free_buffer={0x40086303, r4}, @acquire_done={0x40106309, 0x2}, @request_death={0x400c630e, 0x1}, @clear_death={0x400c630f, 0x2}], 0x50, 0x0, &(0x7f0000000440)="9d09f702dc850e1d968be967dd979dcc1a112931af8ddeab26c88b145d0ed50af6ad5cb9f8e3eb7bf0115a4e8b70cfd1c0ce6ecfdbcb8c1d7edce1bf91b0ce2be90e23a4e91ca9296bb6aa436e148552"}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:52 executing program 1: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440), 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1d2) getuid() ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ftruncate(0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 1177.188452][T28525] loop3: detected capacity change from 0 to 2048 [ 1177.323268][T28528] loop4: detected capacity change from 0 to 2048 12:19:52 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0x801c581f, 0x0) 12:19:52 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1TFrE28cB/Bf2jTN/7/YWRwOXJyKdRMEI1JFLAhKBp0sGJeciMlyyWJegi/AF+HLcXB1l0zdTtI7jT21SWniof18lvvyfH/Hc08uJM+vvOq/eD18+fHd+2h3GrHRiVYcNWInNiImcay8AAD/iKM8jy954cw3v/mwlmcCANbrXP//AMBf6cnTZw/vNA72HydJO2I6ybpZNyadSdYt+nsPDvavJzOtH+6aZll383u/lxRO9lvxf9nf+GXfimtXi37W3X10UOm34+3aTw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfbbpI0IyJJkmRnvjrNsu5m0e8m31T62bVcKgdO9s243Dx978mtxkrPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJzPcDTuH6Zpb3Ac8jzPZ6vzlQVhe9nhz/9V91pZuB8Ro+1KFfFp+VMsDHuXIhYOt2efXCsiVn3A00OnfJN/dNOawu2FM2f69hbhZizxci9eqPNXCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqNNwNO4fpmlvMJyvtet8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgdsPRuH+Ypr1BJUTEVjlSrX4TmuX4z1WNxwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABq9DUAAP//mFYfSg==") [ 1177.370807][T28528] FAT-fs (loop4): bogus logical sector size 0 [ 1177.416328][T28528] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:52 executing program 1: socketpair(0x0, 0x0, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) 12:19:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="042c95400c2b506314501eaf86300ecf9d64d62c2294eca8c3eb44d0b8d496b99f7e4d445aedbc808cf8eef668382e031d49df7299c6bdaeb82893e4e750dd427eaf41e381dab444086fbbd994450166e16055f8e6137820b4dc0d022226177e1ffedc66622c15c773a56165b2836f48796c072002ec486fa0cc31792957bbd18d6e33dda0d3f4f16226e76776d98481ae0a22ee1bbef064dc6f9d880ab1de29013fdc1dc37ab0cc706e430d181c1267f21990dae7a81bd048f938db3f0a56a6e9f9893dcebe803608d8f79a84d59b4bf6adf994e294882690e576fae686ede7c59368a0c25a6dae8d9c96b534851c"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x1}], 0x77, 0x0, &(0x7f0000000100)="385c96941a7821d12c66a2aa6b1ad69c25071dcc5c55c4b4b1bfc6a57905ec2572af0cbfb905e15a5a0f02a7dfc4d5cc9d781a2e5fe26089d3a2b53c7b2c4b858297b3448dbfa162c05ad4067d49cdb87b1d9171bebb22e82fb4afd789a94456a1a446bea73a522f3c563201c2d63ef431962de1607c68"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:52 executing program 2: pipe2(&(0x7f00000009c0)={0xffffffffffffffff}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) [ 1177.513723][T28540] loop3: detected capacity change from 0 to 2048 [ 1177.536477][T26769] I/O error, dev loop4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 12:19:52 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4685b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1177.558319][T26769] Buffer I/O error on dev loop4, logical block 1, async page read [ 1177.603551][T26769] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 12:19:52 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:52 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1177.643920][T28549] binder: 28547:28549 unknown command 1083517956 [ 1177.655621][T26769] Buffer I/O error on dev loop4, logical block 2, async page read 12:19:53 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6001, 0x0) [ 1177.698354][T28549] binder: 28547:28549 ioctl c0306201 20000080 returned -22 [ 1177.718369][T26769] I/O error, dev loop4, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1177.727570][T26769] Buffer I/O error on dev loop4, logical block 3, async page read [ 1177.778544][T26769] I/O error, dev loop4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1177.790303][T28558] binder: BINDER_SET_CONTEXT_MGR already set [ 1177.796353][T28558] binder: 28547:28558 ioctl 40046207 0 returned -16 12:19:53 executing program 0: socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) [ 1177.829829][T26769] Buffer I/O error on dev loop4, logical block 4, async page read 12:19:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1177.886869][T28554] loop4: detected capacity change from 0 to 2048 [ 1177.886914][T26769] I/O error, dev loop4, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 12:19:53 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000080)) [ 1177.946799][T28554] FAT-fs (loop4): bogus logical sector size 0 [ 1177.982729][T26769] Buffer I/O error on dev loop4, logical block 5, async page read 12:19:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, 0x0, 0x0, 0x0) [ 1178.000230][T28554] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b4fe5b797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) [ 1178.141419][T28566] loop3: detected capacity change from 0 to 2048 [ 1178.144216][T26798] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1178.290139][T28572] loop4: detected capacity change from 0 to 2048 [ 1178.319900][T28572] FAT-fs (loop4): bogus logical sector size 0 [ 1178.326740][T28572] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:53 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="042c95400c2b506314501eaf86300ecf9d64d62c2294eca8c3eb44d0b8d496b99f7e4d445aedbc808cf8eef668382e031d49df7299c6bdaeb82893e4e750dd427eaf41e381dab444086fbbd994450166e16055f8e6137820b4dc0d022226177e1ffedc66622c15c773a56165b2836f48796c072002ec486fa0cc31792957bbd18d6e33dda0d3f4f16226e76776d98481ae0a22ee1bbef064dc6f9d880ab1de29013fdc1dc37ab0cc706e430d181c1267f21990dae7a81bd048f938db3f0a56a6e9f9893dcebe803608d8f79a84d59b4bf6adf994e294882690e576fae686ede7c59368a0c25a6dae8d9c96b534851c"], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) dup2(r2, r0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x1}], 0x77, 0x0, &(0x7f0000000100)="385c96941a7821d12c66a2aa6b1ad69c25071dcc5c55c4b4b1bfc6a57905ec2572af0cbfb905e15a5a0f02a7dfc4d5cc9d781a2e5fe26089d3a2b53c7b2c4b858297b3448dbfa162c05ad4067d49cdb87b1d9171bebb22e82fb4afd789a94456a1a446bea73a522f3c563201c2d63ef431962de1607c68"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:53 executing program 2: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f00000000c0)={@fixed, 0x9}) socket$phonet_pipe(0x23, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="16", 0x1}], 0x100000000000017b) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x6044, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0\x00', 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r6, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0x2143}, 0x0) io_uring_enter(r3, 0x2ff, 0x0, 0x0, 0x0, 0x3f00000000000000) 12:19:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 12:19:53 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:53 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0xc0189436, 0x0) 12:19:53 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a0a797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$eJzs1T+LE10UB+CT3eyf923cWiwGbKwW185qI7KCGBCUFFoZMDYZEZNmksZ8JD+Oha29pNpuJM7sJg4sk0WTQfd5mhzO71zu3JuQeXPn/fDth/G7L3sR0WnFTif247wVR7ETF2YBAPxLzvM8vueFay/++HkjzwQAbNZvvf8BgL/Sy1evnz1qdc9eJMlhxHyW9bJezDqzrFfkT552z+4nC/srq+ZZ1tu9zE+SQkRrJd+L/8v8wWW+un4/7t0t8kX2+Hm3kh/Ep21cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3GDHSdKOiCRJkqNld55lvd0iP04uVPLFZ9kqB37N23G7Xbd77QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwRePJdNhP08HoZ5Hneb7oLjs1xcG6w9/+q+71Z4uDSifi6/qnqC1ObkXUDh+WV7qZA15ZdMptt7ppQ8Vp7cy1fr1F8TDW+HJvXtHYXxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCw8WQ67KfpYDRe9g6bfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoHHjyXTYT9PBqFJExF45Uo2uKNrleNk5XUYNHg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo0I8AAAD//09AHoU=") 12:19:53 executing program 1: syz_clone(0x0, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 12:19:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, 0x0, 0x0, 0x0) [ 1178.557272][T28586] binder: 28582:28586 unknown command 1083517956 [ 1178.574461][T28586] binder: 28582:28586 ioctl c0306201 20000080 returned -22 12:19:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}], 0x1, 0x0) [ 1178.627123][T28584] loop3: detected capacity change from 0 to 2048 [ 1178.665098][T28592] binder: BINDER_SET_CONTEXT_MGR already set [ 1178.689339][T28580] loop4: detected capacity change from 0 to 2048 [ 1178.710059][T28588] binder: BINDER_SET_CONTEXT_MGR already set [ 1178.727613][T28580] FAT-fs (loop4): bogus logical sector size 0 12:19:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01wYBuAvbZrm/xc6IwZLLEwVZWNABKGCEJWQQBlgohJhiREiWZws5BK4AC6Cy2FgZUeZuhmlNoQaaFI1wYI+z+JX5/2s4xNHyfMrr/ovXg9ffnz3PtqdRmx0ohVHjdiJjYhJHCsvAMA/4ijP40teOPPNbz6s5ZkAgPU61/8/APBXevL02cM7jYP9x0nSjphOsm7WjUlnknWL/t6Dg/3ryUzrh7umWdbd/N7vJYWT/Vb8X/Y3ftm34trVop91dx8dVPrteLv20wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMW2myTNiEiSJNmZr06zrLtZ9LvJN5V+di2XyoGTfTMuN0/fe3KrsdKzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOczHI37h2naGxyHPM/z2ep8ZUHYXnb483/VvVYW7kfEaLtSRXxa/hQLw96liIXD7dkn14qIVR/w9NAp3+Qf3bSmcHvhzJm+vUW4GUu83IsX6vxVAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6jQcjfuHadobDOdr7TofCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo3XA07h+maW9QCRGxVY5Uq9+EZjn+c1Xj8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAafQ0AAP//eKsfSw==") [ 1178.734732][T28580] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1178.742159][T28588] binder: 28582:28588 ioctl 40046207 0 returned -16 [ 1178.749370][T28592] binder: 28582:28592 ioctl 40046207 0 returned -16 12:19:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a25797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="042c95400c2b506314501eaf86300ecf9d64d62c2294eca8c3eb44d0b8d496b99f7e4d445aedbc808cf8eef668382e031d49df7299c6bdaeb82893e4e750dd427eaf41e381dab444086fbbd994450166e16055f8e6137820b4dc0d022226177e1ffedc66622c15c773a56165b2836f48796c072002ec486fa0cc31792957bbd18d6e33dda0d3f4f16226e76776d98481ae0a22ee1bbef064dc6f9d880ab1de29013fdc1dc37ab0cc706e430d181c1267f21990dae7a81bd048f938db3f0a56a6e9f9893dcebe803608d8f79a84d59b4bf6adf994e294882690e576fae686ede7c59368a0c25a6dae8d9c96b534851c"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) dup2(r2, r0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@dead_binder_done, @increfs={0x40046304, 0x2}, @increfs={0x40046304, 0x1}], 0x77, 0x0, &(0x7f0000000100)="385c96941a7821d12c66a2aa6b1ad69c25071dcc5c55c4b4b1bfc6a57905ec2572af0cbfb905e15a5a0f02a7dfc4d5cc9d781a2e5fe26089d3a2b53c7b2c4b858297b3448dbfa162c05ad4067d49cdb87b1d9171bebb22e82fb4afd789a94456a1a446bea73a522f3c563201c2d63ef431962de1607c68"}) (async) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:54 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000010c0), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000001100)={&(0x7f0000ffc000/0x4000)=nil}) [ 1178.983165][T28605] binder: 28602:28605 unknown command 1083517956 [ 1179.023652][T28609] binder: BINDER_SET_CONTEXT_MGR already set [ 1179.048449][T28605] binder: 28602:28605 ioctl c0306201 20000080 returned -22 [ 1179.064817][T28608] loop3: detected capacity change from 0 to 2048 [ 1179.083634][T28609] binder: 28602:28609 ioctl 40046207 0 returned -16 [ 1179.093704][T28607] loop4: detected capacity change from 0 to 2048 [ 1179.121333][T28607] FAT-fs (loop4): bogus logical sector size 0 [ 1179.160641][T28607] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:54 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007c80)={&(0x7f0000000000), 0xc, &(0x7f0000007c40)={&(0x7f0000000780)=@newtaction={0xe80, 0x31, 0x1, 0x0, 0x0, {}, [{0x2f8, 0x1, [@m_bpf={0x14c, 0x0, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x34, 0x4, [{}, {}, {}, {}, {}, {}]}]}, {0xed, 0x6, "58e6cf1130d7666eeb181ccc50fefb212e028d95bfcaad6a9f9af21726c0bcd1316abe1ddc7bbc26ea17b64fc3e143ac5d06a2f7e80b02c7b43b3e8c46ae7e4fe74e7b4a05ac96555bf7afdd65e71082d06c89ef13842ee557c99eb3b1bd252ac8a34e351a0f9300230a7f057f6fb5c9428b8f2bc9b1588408532ecf20abb43ebaec15311c378fccf6881ac89400395d93816339b2a75c2a3976ec5a5b33c03efd938c1b120104e58246fbadc797fefaffd465bdee5e79f7aa6124702fc2585639fc35a9804350230b1c269c296d68c5d2e90a928dac5a91ec2beba62d22583caecb8b8d1890a79087"}, {0xc}, {0xc}}}, @m_bpf={0x15c, 0x0, 0x0, 0x0, {{0x8}, {0x9c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{}, {}, {}, {}, {}]}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x99, 0x6, "f6364144927b5ff78618b75e3dbcb34291c7af555854d1721b43e398fd921e1f9cfd3ac0cabc2b331340df672556f41f4b70a7ee7c654ecd1e86bae7476117f7d393f929aeb02713873433c089b73cd4dadd6261a36f6bae5e3738fe24403f16bcefa61b14d1429efb9f96a653fab88a8c1fc768ed9e0681bfb232fe99710a98fa18bdff7f67cfa84a78d09f0fb2474c8d5595c0b8"}, {0xc}, {0xc}}}, @m_simple={0x4c, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}]}, {0x5, 0x6, "ea"}, {0xc}, {0xc}}}]}, {0x1b30, 0x1, [@m_ct={0xf8, 0x0, 0x0, 0x0, {{0x7}, {0x50, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @remote}, @TCA_CT_LABELS={0x14, 0x7, "b70653c2ee9e3ce816780e4a3591d345"}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_ACTION={0x6}, @TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6}]}, {0x81, 0x6, "75ed3a93bcbef5b98a61b664f4cbc25626ddc0159283594671238b351e4778543208534d3adcaedd354de148cd4cea70454f6836c88ceb15ee23ad3332128798a38fc426528617d6ee6feadf139d127401571451ec4bfac516944a79fee144e8cc84079a2261f323b9a2910ee29a313f0b41c114ae998529d58f811d1d"}, {0xc}, {0xc}}}, @m_simple={0x1080, 0x0, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '{\'\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x10, 0x3, '\'[-{!%-$].}\x00'}, @TCA_DEF_PARMS={0x18}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x1001, 0x6, "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"}, {0xc}, {0xc}}}, @m_mirred={0x124, 0x0, 0x0, 0x0, {{0xb}, {0xe4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}, @TCA_MIRRED_PARMS={0x20}]}, {0x15, 0x6, "11138eb472be3c3e633a95b8561ec8ab44"}, {0xc}, {0xc}}}, @m_mirred={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x29, 0x6, "8c37837028311ef765f9744e6aaa7d1d1c0fa0a109b9be57ed4a31c1cfd08643e6fd116e32"}, {0xc}, {0xc}}}, @m_police={0x838, 0x0, 0x0, 0x0, {{0xb}, {0x80c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc}, {0xc}}}]}, {0x48, 0x1, [@m_mirred={0x44, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "4f0e21c4b8de9459a67c91fbbef26b3dbe"}, {0xc}, {0xc}}}]}]}, 0x1e84}}, 0x0) 12:19:54 executing program 1: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000180)='0', 0x1}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1d2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000080)={"f1b02cc2d27c61e4d46be0640334592d", 0x0, 0x0, {0x4000000004}, {}, 0xc59, [0x4004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 12:19:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}], 0x1, 0x0) 12:19:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r4, r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x778080ee}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056310f5"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) close(r0) 12:19:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:54 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a5a797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:54 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0x80045440, 0x0) 12:19:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}], 0x1, 0x0) 12:19:54 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1179.466754][T28619] binder: 28612:28619 unknown command 5 [ 1179.499114][T28619] binder: 28612:28619 ioctl c0306201 20000080 returned -22 [ 1179.559119][T28618] loop4: detected capacity change from 0 to 2048 [ 1179.580934][T28619] binder: 28612:28619 unknown command 4111491845 [ 1179.581386][T28623] netlink: 2932 bytes leftover after parsing attributes in process `syz-executor.2'. 12:19:54 executing program 1: sched_rr_get_interval(0x0, &(0x7f0000000140)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) [ 1179.604934][T28618] FAT-fs (loop4): bogus logical sector size 0 [ 1179.619093][T28618] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1179.627153][T28619] binder: 28612:28619 ioctl c0306201 20001480 returned -22 12:19:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0}) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r4, r0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x778080ee}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056310f5"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) close(r0) 12:19:54 executing program 2: syz_open_dev$vcsn(&(0x7f0000002100), 0x0, 0x0) pkey_mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0xffffffffffffffff) syz_clone(0x69001700, 0x0, 0x6bdf9911013c6930, 0x0, 0x0, 0x0) 12:19:55 executing program 1: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x8}, 0x0, 0x0, 0x0) [ 1179.720059][T28627] loop3: detected capacity change from 0 to 2048 12:19:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45afe797f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) [ 1179.792196][T28636] binder: 28634:28636 unknown command 5 12:19:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:55 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGSID(r0, 0xc0045878, 0x0) [ 1179.867521][T28636] binder: 28634:28636 ioctl c0306201 20000080 returned -22 12:19:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r2], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup2(r4, r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r7, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r7, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xcb}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x778080ee}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x100}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r8, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="056310f5"], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r8, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) close(r0) 12:19:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x2, 0x0) 12:19:55 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) fchmod(r0, 0x231) [ 1180.034109][T28646] loop4: detected capacity change from 0 to 2048 [ 1180.052143][T28646] FAT-fs (loop4): bogus logical sector size 0 [ 1180.109700][T28654] binder: 28652:28654 unknown command 5 [ 1180.114333][T28649] loop3: detected capacity change from 0 to 2048 [ 1180.126880][T26798] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1180.151731][T28646] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") [ 1180.171118][T28654] binder: 28652:28654 ioctl c0306201 20000080 returned -22 12:19:55 executing program 1: syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@no_qos=@type11={{}, {}, @device_b, @device_a, @device_a, {}, @device_b}, @a_msdu}, 0x1e) 12:19:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r5, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r6, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') read$watch_queue(r6, &(0x7f0000000000)=""/9, 0x9) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000014c0)={{r4}, "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"}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 12:19:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x2, 0x0) 12:19:55 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pkey_mprotect(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x0, 0xffffffffffffffff) 12:19:55 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a5b0a7f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1180.426339][T28671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1180.450600][T28668] binder: 28663:28668 ioctl 5000940a 200014c0 returned -22 12:19:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x14}, 0x14}}, 0x0) [ 1180.499058][T28670] loop3: detected capacity change from 0 to 2048 12:19:55 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x2, 0x0) 12:19:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r5, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r6, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') (async) read$watch_queue(r6, &(0x7f0000000000)=""/9, 0x9) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000014c0)={{r4}, "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"}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1180.577304][T28673] loop4: detected capacity change from 0 to 2048 [ 1180.587076][T28673] FAT-fs (loop4): bogus logical sector size 0 12:19:55 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:55 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1180.658432][T28673] FAT-fs (loop4): Can't find a valid FAT filesystem 12:19:56 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a5b257f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x2, 0x0) 12:19:56 executing program 1: syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@no_qos=@type11={{}, {}, @device_b, @device_a, @device_a, {}, @device_b}, @a_msdu}, 0x1e) [ 1180.805305][T28684] binder: 28679:28684 ioctl 5000940a 200014c0 returned -22 12:19:56 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r5, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) fcntl$setlease(r6, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') read$watch_queue(r6, &(0x7f0000000000)=""/9, 0x9) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000014c0)={{r4}, "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"}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) dup2(r2, r0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x14, r5, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) open(&(0x7f0000000200)='./file0\x00', 0x4105ae1, 0x0) (async) fcntl$setlease(r6, 0x400, 0x0) (async) fremovexattr(r6, &(0x7f0000000180)=@known='system.posix_acl_default\x00') (async) read$watch_queue(r6, &(0x7f0000000000)=""/9, 0x9) (async) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000014c0)={{r4}, "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"}) (async) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) [ 1180.869214][ T26] audit: type=1400 audit(1677586796.154:641): avc: denied { shutdown } for pid=28682 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 12:19:56 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:19:56 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1180.989190][T28691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1181.026320][T28695] loop4: detected capacity change from 0 to 2048 [ 1181.061888][T28695] FAT-fs (loop4): bogus logical sector size 0 [ 1181.076264][T18833] [ 1181.078640][T18833] ====================================================== [ 1181.085667][T18833] WARNING: possible circular locking dependency detected [ 1181.092699][T18833] 6.2.0-syzkaller-12913-gae3419fbac84 #0 Not tainted [ 1181.099385][T18833] ------------------------------------------------------ [ 1181.106409][T18833] syz-executor.1/18833 is trying to acquire lock: [ 1181.112836][T18833] ffff88801db03130 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_conn_del+0x12c/0x2b0 [ 1181.123426][T18833] [ 1181.123426][T18833] but task is already holding lock: [ 1181.130802][T18833] ffffffff8e3208e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xd9/0x260 [ 1181.140486][T18833] [ 1181.140486][T18833] which lock already depends on the new lock. [ 1181.140486][T18833] [ 1181.150919][T18833] [ 1181.150919][T18833] the existing dependency chain (in reverse order) is: [ 1181.159946][T18833] [ 1181.159946][T18833] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 1181.167795][T18833] __mutex_lock+0x12f/0x1350 [ 1181.172956][T18833] hci_remote_features_evt+0x4d8/0xa50 [ 1181.179022][T18833] hci_event_packet+0x956/0xfd0 [ 1181.184423][T18833] hci_rx_work+0xaeb/0x1340 [ 1181.189472][T18833] process_one_work+0x9bf/0x1820 [ 1181.194990][T18833] worker_thread+0x669/0x1090 [ 1181.200230][T18833] kthread+0x2e8/0x3a0 [ 1181.204841][T18833] ret_from_fork+0x1f/0x30 [ 1181.209812][T18833] [ 1181.209812][T18833] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 1181.217138][T18833] __mutex_lock+0x12f/0x1350 [ 1181.222292][T18833] sco_sock_connect+0x1ea/0xa60 [ 1181.227698][T18833] __sys_connect_file+0x153/0x1a0 [ 1181.233269][T18833] __sys_connect+0x165/0x1a0 [ 1181.238492][T18833] __x64_sys_connect+0x73/0xb0 [ 1181.243799][T18833] do_syscall_64+0x39/0xb0 [ 1181.248765][T18833] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1181.255245][T18833] [ 1181.255245][T18833] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 1181.264395][T18833] __lock_acquire+0x2ec7/0x5d40 [ 1181.269788][T18833] lock_acquire+0x1e3/0x670 [ 1181.274833][T18833] lock_sock_nested+0x3a/0xf0 [ 1181.280068][T18833] sco_conn_del+0x12c/0x2b0 [ 1181.285138][T18833] sco_disconn_cfm+0x75/0xb0 [ 1181.290282][T18833] hci_conn_hash_flush+0x126/0x260 [ 1181.296296][T18833] hci_dev_close_sync+0x5fb/0x1200 [ 1181.301956][T18833] hci_dev_do_close+0x31/0x70 [ 1181.307179][T18833] hci_unregister_dev+0x1ce/0x580 [ 1181.312747][T18833] vhci_release+0x80/0xf0 [ 1181.317660][T18833] __fput+0x27c/0xa90 [ 1181.322192][T18833] task_work_run+0x16f/0x270 [ 1181.327333][T18833] do_exit+0xad3/0x2a40 [ 1181.332075][T18833] do_group_exit+0xd4/0x2a0 [ 1181.337134][T18833] __x64_sys_exit_group+0x3e/0x50 [ 1181.342740][T18833] do_syscall_64+0x39/0xb0 [ 1181.347705][T18833] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1181.354157][T18833] [ 1181.354157][T18833] other info that might help us debug this: [ 1181.354157][T18833] [ 1181.364395][T18833] Chain exists of: [ 1181.364395][T18833] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 1181.364395][T18833] [ 1181.378672][T18833] Possible unsafe locking scenario: [ 1181.378672][T18833] [ 1181.386159][T18833] CPU0 CPU1 [ 1181.391534][T18833] ---- ---- [ 1181.396904][T18833] lock(hci_cb_list_lock); [ 1181.401530][T18833] lock(&hdev->lock); [ 1181.408138][T18833] lock(hci_cb_list_lock); [ 1181.415178][T18833] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 1181.421084][T18833] [ 1181.421084][T18833] *** DEADLOCK *** [ 1181.421084][T18833] [ 1181.429234][T18833] 3 locks held by syz-executor.1/18833: [ 1181.434796][T18833] #0: ffff8880780f1028 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x29/0x70 [ 1181.444421][T18833] #1: ffff8880780f0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x306/0x1200 [ 1181.454129][T18833] #2: ffffffff8e3208e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xd9/0x260 [ 1181.464186][T18833] [ 1181.464186][T18833] stack backtrace: [ 1181.470081][T18833] CPU: 1 PID: 18833 Comm: syz-executor.1 Not tainted 6.2.0-syzkaller-12913-gae3419fbac84 #0 [ 1181.480160][T18833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 1181.490231][T18833] Call Trace: [ 1181.493610][T18833] [ 1181.496555][T18833] dump_stack_lvl+0xd9/0x150 [ 1181.501183][T18833] check_noncircular+0x25f/0x2e0 [ 1181.506142][T18833] ? print_circular_bug+0x5c0/0x5c0 [ 1181.511362][T18833] ? print_circular_bug+0x5c0/0x5c0 [ 1181.516600][T18833] ? save_trace+0x3f/0xb20 [ 1181.521054][T18833] __lock_acquire+0x2ec7/0x5d40 [ 1181.525927][T18833] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1181.531934][T18833] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1181.537944][T18833] ? lock_release+0x780/0x780 [ 1181.542645][T18833] lock_acquire+0x1e3/0x670 [ 1181.547171][T18833] ? sco_conn_del+0x12c/0x2b0 [ 1181.551879][T18833] ? lock_release+0x780/0x780 [ 1181.556580][T18833] ? sco_conn_del+0x122/0x2b0 [ 1181.561283][T18833] ? lock_downgrade+0x690/0x690 [ 1181.566170][T18833] ? do_raw_spin_lock+0x124/0x2b0 [ 1181.571238][T18833] ? spin_bug+0x1c0/0x1c0 [ 1181.575604][T18833] ? hci_dev_close_sync+0x306/0x1200 [ 1181.580916][T18833] lock_sock_nested+0x3a/0xf0 [ 1181.585634][T18833] ? sco_conn_del+0x12c/0x2b0 [ 1181.590346][T18833] sco_conn_del+0x12c/0x2b0 [ 1181.594879][T18833] ? sco_conn_del+0x2b0/0x2b0 [ 1181.599593][T18833] sco_disconn_cfm+0x75/0xb0 [ 1181.604233][T18833] hci_conn_hash_flush+0x126/0x260 [ 1181.609415][T18833] hci_dev_close_sync+0x5fb/0x1200 [ 1181.614564][T18833] ? __kmem_cache_free+0x182/0x2c0 [ 1181.619700][T18833] ? hci_reset_sync+0x50/0x50 [ 1181.624396][T18833] ? lockdep_hardirqs_on+0x7d/0x100 [ 1181.629740][T18833] ? __phys_addr+0xc8/0x140 [ 1181.634281][T18833] hci_dev_do_close+0x31/0x70 [ 1181.638991][T18833] hci_unregister_dev+0x1ce/0x580 [ 1181.644058][T18833] vhci_release+0x80/0xf0 [ 1181.648426][T18833] __fput+0x27c/0xa90 [ 1181.652456][T18833] ? vhci_close_dev+0x50/0x50 [ 1181.657160][T18833] task_work_run+0x16f/0x270 [ 1181.661789][T18833] ? task_work_cancel+0x30/0x30 [ 1181.666686][T18833] do_exit+0xad3/0x2a40 [ 1181.670873][T18833] ? mm_update_next_owner+0x7b0/0x7b0 [ 1181.676278][T18833] ? _raw_spin_unlock_irq+0x23/0x50 [ 1181.681496][T18833] do_group_exit+0xd4/0x2a0 [ 1181.686032][T18833] __x64_sys_exit_group+0x3e/0x50 [ 1181.691100][T18833] do_syscall_64+0x39/0xb0 [ 1181.695540][T18833] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1181.701470][T18833] RIP: 0033:0x7f179bc8c0f9 [ 1181.705900][T18833] Code: Unable to access opcode bytes at 0x7f179bc8c0cf. 12:19:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)}}], 0x2, 0x0) [ 1181.712945][T18833] RSP: 002b:00007ffe91641228 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1181.721376][T18833] RAX: ffffffffffffffda RBX: 000000000000071c RCX: 00007f179bc8c0f9 [ 1181.729378][T18833] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000043 [ 1181.737366][T18833] RBP: 0000000000000000 R08: 0000000000000014 R09: 000000000000071c [ 1181.745354][T18833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f179bce7c3f [ 1181.753344][T18833] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffe91641410 [ 1181.761343][T18833] 12:19:57 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) [ 1181.778058][T28698] loop3: detected capacity change from 0 to 2048 [ 1181.780880][T28695] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1181.811023][T28701] binder: 28700:28701 ioctl 5000940a 200014c0 returned -22 12:19:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)}}], 0x2, 0x0) [ 1181.846006][T26769] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1181.867654][T28705] binder: BINDER_SET_CONTEXT_MGR already set [ 1181.887181][T28705] binder: 28700:28705 ioctl 40046207 0 returned -16 12:19:57 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8) shutdown(r0, 0x0) 12:19:57 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01wYBuAvbZrm/xc6IwZLLEwVZWNqECoIUQkJlAEmKhGWGCGSxclCLoEL4CK4HAZWdpSpm1FqQ6iBJlUTLOjzLH513s86PnGUPL/2qv/i9fDlx3fvo91pxEYnWnHciJ3YiJjEifICAPwjjvM8vuSFc9/85sNangkAWK8L/f8DAH+lJ0+fPbzTODx4nCTtiOkk62bdmHQmWbfo7z04PLiZzLR+uGuaZd3N7/1eUjjdb8X/ZX/rl30rblwv+ll399Fhpd+Ot2s/PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG67SdKMiCRJkp356jTLuptFv5t8U+ln13KpHDjdN+Nq8+y9O/uNlZ4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuJjhaNw/StPe4CTkeZ7PVucrC8L2ssOf/6vutbJwPyJG25Uq4tPyp1gY9q5ELBxuzz65VkSs+oBnh075Jv/opjWF/YUz5/r2FuF2LPFyL1+o81cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo03A07h+laW8wnK+163wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB2w9G4f5SmvUElRMRWOVKtfhOa5fjPVY3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGr0NQAA//8kTR8N") 12:19:57 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a5b5c7f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:19:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)}}], 0x2, 0x0) 12:19:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002240)=@delchain={0x23, 0x65, 0x1}, 0x24}}, 0x0) [ 1182.041285][T28716] loop3: detected capacity change from 0 to 2048 [ 1182.134766][T28723] loop4: detected capacity change from 0 to 2048 [ 1182.193082][T28723] FAT-fs (loop4): bogus logical sector size 0 [ 1182.219573][ T1213] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.225938][ T1213] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.231500][T28723] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1182.652728][ T5316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.722591][ T5316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.795537][ T5316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.884924][ T5316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.668719][ T5316] IPVS: stopping master sync thread 27432 ... [ 1183.680987][ T5316] IPVS: stopping backup sync thread 27415 ... [ 1183.882956][ T5316] hsr_slave_0: left promiscuous mode [ 1183.898459][ T5113] Bluetooth: hci5: command 0x0405 tx timeout [ 1183.904978][ T5316] hsr_slave_1: left promiscuous mode [ 1183.913483][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1183.925481][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1183.936171][ T5316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1183.948669][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1183.956813][ T5316] bridge_slave_1: left allmulticast mode [ 1183.965486][ T5316] bridge_slave_1: left promiscuous mode [ 1183.971503][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.993555][ T5316] bridge_slave_0: left allmulticast mode [ 1184.002000][ T5316] bridge_slave_0: left promiscuous mode [ 1184.007723][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.333557][ T5316] veth1_macvtap: left promiscuous mode [ 1184.339203][ T5316] veth0_macvtap: left promiscuous mode [ 1184.344908][ T5316] veth1_vlan: left promiscuous mode [ 1184.356634][ T5316] veth0_vlan: left promiscuous mode [ 1184.513962][ T5316] team_slave_1 (unregistering): left allmulticast mode [ 1184.527832][ T5316] team0 (unregistering): Port device team_slave_1 removed [ 1184.544268][ T5316] team_slave_0 (unregistering): left allmulticast mode [ 1184.552277][ T5316] team0 (unregistering): Port device team_slave_0 removed [ 1184.565298][ T5316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.577560][ T5316] bond_slave_1 (unregistering): left allmulticast mode [ 1184.589867][ T5316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.599264][ T5316] bond_slave_0 (unregistering): left allmulticast mode [ 1184.664665][ T5316] bond0 (unregistering): Released all slaves [ 1185.782377][T28773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1185.789689][T28773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1185.796935][T28773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1185.804963][T28773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1185.812640][T28773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1185.820791][T28773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1186.075881][T28771] chnl_net:caif_netlink_parms(): no params data found [ 1186.210205][T28771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.237708][T28771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.247590][T28771] bridge_slave_0: entered allmulticast mode [ 1186.260587][T28771] bridge_slave_0: entered promiscuous mode [ 1186.270147][T28771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.277357][T28771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.287325][T28771] bridge_slave_1: entered allmulticast mode [ 1186.301287][T28771] bridge_slave_1: entered promiscuous mode [ 1186.351880][T28771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.382435][T28771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.437192][T28771] team0: Port device team_slave_0 added [ 1186.449982][T28771] team0: Port device team_slave_1 added [ 1186.482166][T28771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.508876][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.555493][T28771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.587935][T28771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.597421][T28771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1186.654350][T28771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.730900][T28771] hsr_slave_0: entered promiscuous mode [ 1186.747541][T28771] hsr_slave_1: entered promiscuous mode [ 1186.754122][T28771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1186.774529][T28771] Cannot create hsr debugfs directory [ 1187.454843][T28771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1187.476946][T28771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1187.504159][T28771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1187.521379][T28771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1187.697267][T28771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.727036][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1187.744087][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1187.762153][T28771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.784987][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1187.801288][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1187.821294][T24347] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.828473][T24347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.881845][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1187.891960][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1187.908220][T28773] Bluetooth: hci0: command 0x0409 tx timeout [ 1187.920633][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1187.940406][T24350] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.947551][T24350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1187.989789][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1188.020861][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1188.040713][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1188.063985][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1188.114948][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1188.130719][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1188.150246][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1188.179963][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1188.200300][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1188.216324][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1188.235303][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1188.257509][T28771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1188.651838][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1188.660001][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1188.682428][T28771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.730037][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1188.742076][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1188.796142][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1188.805335][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1188.828338][T28771] veth0_vlan: entered promiscuous mode [ 1188.837759][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1188.850205][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1188.863510][T28771] veth1_vlan: entered promiscuous mode [ 1188.885181][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1188.894116][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1188.903004][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1188.912458][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1188.924054][T28771] veth0_macvtap: entered promiscuous mode [ 1188.939004][T28771] veth1_macvtap: entered promiscuous mode [ 1188.961551][T28771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.975961][T28771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.986852][T28771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.997689][T28771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.007872][T28771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.019094][T28771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.029343][T28771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1189.040655][T28771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.055077][T28771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.066743][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1189.075894][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1189.087135][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1189.105356][T24347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1189.116145][T28771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.135098][T28771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.147906][T28771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.163768][T28771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.173987][T28771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.185374][T28771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.195670][T28771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1189.206786][T28771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.218593][T28771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.227177][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1189.237042][T24350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1189.256222][T28771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.275796][T28771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.285196][T28771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.296855][T28771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1189.354463][T28771] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 1189.411033][ T5503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.423657][T28771] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 1189.428163][ T5503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.470511][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1189.493638][ T5503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.513991][ T5503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.524868][ T5180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1189.571508][T28843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:05 executing program 1: syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@no_qos=@type11={{}, {}, @device_b, @device_a, @device_a, {}, @device_b}, @a_msdu}, 0x1e) 12:20:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01wYBuAvbZrm/xc6IwZLLEwVZWNqECoIUQkJlAEmKhGWGCGSxclCLoEL4CK4HAZWdpSpm1FqQ6iBJlUTLOjzLH513s86PnGUPL/2qv/i9fDlx3fvo91pxEYnWnHciJ3YiJjEifICAPwjjvM8vuSFc9/85sNangkAWK8L/f8DAH+lJ0+fPbzTODx4nCTtiOkk62bdmHQmWbfo7z04PLiZzLR+uGuaZd3N7/1eUjjdb8X/ZX/rl30rblwv+ll399Fhpd+Ot2s/PQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG67SdKMiCRJkp356jTLuptFv5t8U+ln13KpHDjdN+Nq8+y9J/uNlZ4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuJjhaNw/StPe4CTkeZ7PVucrC8L2ssOf/6vutbJwPyJG25Uq4tPyp1gY9q5ELBxuzz65VkSs+oBnh075Jv/opjWF/YUz5/r2FuF2LPFyL1+o81cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo03A07h+laW8wnK+163wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKB2w9G4f5SmvUElRMRWOVKtfhOa5fjPVY3HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGr0NQAA//85VR9N") 12:20:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x14}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x3c}}, 0x0) 12:20:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x2, 0x0) 12:20:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a5b787f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1189.923812][T28857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1189.978210][T28773] Bluetooth: hci0: command 0x041b tx timeout [ 1189.982215][T28862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1190.004384][T28860] loop3: detected capacity change from 0 to 2048 12:20:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x2, 0x0) [ 1190.024161][T28858] loop4: detected capacity change from 0 to 2048 12:20:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x14}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x3c}}, 0x0) [ 1190.065308][T28858] FAT-fs (loop4): bogus logical sector size 0 [ 1190.072069][T28858] FAT-fs (loop4): Can't find a valid FAT filesystem 12:20:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a5bfe7f1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:20:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x2, 0x0) 12:20:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1TFu02AYBuAvbZoGFjojBkssTBVlY2oQKghRCQmUASYqUZYYIZLFyUKOwAE4BEfgGAys7ChTN6PUhlADTaomWNDnWfzqfz/r9x9HyfNrr3ovXg9efnr3PtqdRqx1ohVHjdiKtYhxHCsvAMB/4ijP42teOPPNbz6s5JkAgNU61/8/APBPevL02cM7jf29x0nSjpiMs27WjXFnnHWL/t6D/b2byVTrp7smWdZd/9HvJIWT/UZcLvtbv+1bceN60U+7u4/2K/1mvF356QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLbTpJmRCRJkmzNVidZ1l0v+u3ku0o/vZZL5cDJvhlXm6fv/XG3sdSzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOczGI56B2l62D8OeZ7n09XZypywuejwl0vVvZYW7kfEcLNSRXxe/BRzw86ViLnD7ekn14qIZR/w9NAp3+Rf3bSmsDt35kzf3iLcjgVe7sULdf4qAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdRoMR72DND3sD2Zr7TofCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo3WA46h2k6WG/EiJioxypVn8IzXL816rG4wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1+hYAAP//Tl0fjQ==") [ 1190.192177][T28870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 12:20:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)}], 0x1}}], 0x2, 0x0) [ 1190.276822][T28871] loop4: detected capacity change from 0 to 2048 [ 1190.303501][T28871] FAT-fs (loop4): bogus logical sector size 0 12:20:05 executing program 1: syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f00000000c0)=@data_frame={@no_qos=@type11={{}, {}, @device_b, @device_a, @device_a, {}, @device_b}, @a_msdu}, 0x1e) [ 1190.337828][T28875] loop3: detected capacity change from 0 to 2048 12:20:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x14}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x3c}}, 0x0) 12:20:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)}], 0x1}}], 0x2, 0x0) [ 1190.384788][T28871] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1190.405213][T28883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 12:20:05 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$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") 12:20:05 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a5b79781926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") 12:20:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)="ed", 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)}], 0x1}}], 0x2, 0x0) [ 1190.535194][T28887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1190.612157][T28891] loop4: detected capacity change from 0 to 2048 [ 1190.623854][T26769] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 12:20:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x14}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}]}}}]}, 0x3c}}, 0x0) [ 1190.659587][T28891] FAT-fs (loop4): bogus logical sector size 0 [ 1190.668742][T28890] loop3: detected capacity change from 0 to 2048 [ 1190.686105][T28891] FAT-fs (loop4): Can't find a valid FAT filesystem 12:20:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01AUBuCTNk0DC50RgyUWpoqyMWGECkJUQgJlgIlKlCVGiGZxspBH4AF4CB6HgZUdZepmlNoQaqBJ1QQL+n2Lf93/WNc3jpIX1173X74ZvPr0/kN001aspdGJo1ZsxVrEOI5VFwDgP3FUFPG1KJ355rcfV/JMAMBqnev/HwD4Jz199vzR3dbe7pMk6UZMxnkv78U4Hee9sr//cG/3ZjLV+emuSZ731n/0O0npZL8Rl6v+1m/7Tty4XvbT7t7jvVq/Ge9WfnoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYtpOkHRFJkiRbs9VJnvfWy347+a7WT6/VUjVwsm/H1fbpe6dpa6lnAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM5nMBz197Ps4PA4FEVRTFdnK3PC5qLDXy7V91paeBARw81aFfF58VPMDTtXIuYOd6efXCciln3A00Navcm/umlD4c7cmTN9e8twOxZ4uRcvNPmrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGkwHPX3s+zgcDBb6zb5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA4wbDUX8/yw4OayEiNqqRevWH0K7Gf60aPB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQoG8BAAD//wSiHw4=") 12:20:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 12:20:06 executing program 1: 12:20:06 executing program 4: syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000700)=ANY=[@ANYRES64=0x0, @ANYBLOB="5b7a93aa004f45ca32401cf3882012f918fc12b7e3e235a7b1c7a797b6a6ac0dcb0a5d47a4b7b45a5b79fe1926be1ce2932fe6a359b1aaf4e350946e343585981765503f90ddf368b4ebeab2e466a10d21a69016f54743b49bb3878df3fd9369ae199cb6813360b9a577d7e066d22f2b594c21588ae8c2dfc8844a6a2c1a3cc62ef0e090cb06f8c63956ed68db3b2699480a6b8b64b11997cca639b77135ec9dfb57ada6e3c4cc40b71f1df2cb7319818ec19582d0930963e778a32a1b095ab7970408b881eec52adea7c22349", @ANYRESHEX], 0x1, 0x563, &(0x7f0000000180)="$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") [ 1190.833747][T28898] loop3: detected capacity change from 0 to 2048 [ 1190.840452][T28900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 12:20:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000002480)=[{{&(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}}], 0x1, 0x0) 12:20:06 executing program 1: [ 1190.962869][T28905] loop4: detected capacity change from 0 to 2048 [ 1191.025637][T28905] FAT-fs (loop4): bogus logical sector size 0 12:20:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8010, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64=0x0, @ANYRES16=0x0], 0x1, 0x56a, &(0x7f0000000180)="$eJzs1bFu01AUBuCTNk0DC50RgyUWpoqyMRGECkJUQgJlgIlKhCVGiGRxspBH4AF4CB6HgZUdZepmlNoQaqBJ1QQL+n2Lf93/WNc3jpIX1173X74Zvvr0/kO0O43Y6EQrjhqxExsRkzhWXgCA/8RRnsfXvHDmm99+XMszAQDrda7/fwDgn/T02fNHdxsH+0+SpB0xnWTdrBuTziTrFv39hwf7N5OZ1k93TbOsu/mj30sKJ/utuFz2t37bt+LG9aKfdfceH1T67Xi39tMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDFtpskzYhIkiTZma9Os6y7WfS7yXeVfnYtl8qBk30zrjZP33vSaaz0LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD5DEfj/mGa9gbHIc/zfLY6X1kQtpcd/nKputfKwoOIGG1XqojPy59iYdi7ErFwuD375FoRseoDnh465Zv8q5vWFO4snDnTt7cIt2OJl3vxQp2/SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJ2Go3H/ME17g+F8rV3nAwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtRuOxv3DNO0NKiEitsqRavWH0CzHf61qPB4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQo28BAAD//xmqH04=") 12:20:06 executing program 1: