182fb61a5b80a3fb65555e7fb38e521d24c920acc8656a6c634b481a3cd990a0f96a1bfbf0d5f0cf19f15e1f41f21b0d0e195561dabf8b89de03de1dcdb711f14bbb52ab97452", 0xfd}], 0x6}, 0x40) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') preadv2(r7, &(0x7f00000030c0)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1, 0xff0f, 0x0, 0x0) (async) write$P9_RREADLINK(r7, &(0x7f0000000580)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 11:34:40 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001440)={{'\x00', 0x2}, {0x6d3}, 0x22, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)="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", 0x12e, 0x0, &(0x7f00000003c0)={0x2, 0x105e, {0x0, 0xc, 0x1000, "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", 0x51, "96051552834c06f0f7eb4b78853f17b5c3ac3dfca782bf2de6e7e3b9913aa656a42cc240ab21b65679722ee421a04477e8c4c43408de061d49ce363a0a375539e9d3436fe6b40e52025591f6c066a8bbeb"}, 0x8, "7cfcbbf55874d63c"}, 0x1072}) 11:34:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:40 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x32344d59}}) [ 455.433247][T10918] binder: BINDER_SET_CONTEXT_MGR already set [ 455.445159][T10918] binder: 10916:10918 ioctl 4018620d 20000040 returned -16 11:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 455.489090][T10918] binder: 10916:10918 unknown command 0 [ 455.498573][T10918] binder: 10916:10918 ioctl c0306201 20000440 returned -22 11:34:41 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x32344d59}}) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x32344d59}}) (async) [ 455.549370][T10918] binder_alloc: binder_alloc_mmap_handler: 10916 20bfe000-20ffe000 already mapped failed -16 11:34:41 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001440)={{'\x00', 0x2}, {0x6d3}, 0x22, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)="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", 0x12e, 0x0, &(0x7f00000003c0)={0x2, 0x105e, {0x0, 0xc, 0x1000, "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", 0x51, "96051552834c06f0f7eb4b78853f17b5c3ac3dfca782bf2de6e7e3b9913aa656a42cc240ab21b65679722ee421a04477e8c4c43408de061d49ce363a0a375539e9d3436fe6b40e52025591f6c066a8bbeb"}, 0x8, "7cfcbbf55874d63c"}, 0x1072}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001440)={{'\x00', 0x2}, {0x6d3}, 0x22, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)="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", 0x12e, 0x0, &(0x7f00000003c0)={0x2, 0x105e, {0x0, 0xc, 0x1000, "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", 0x51, "96051552834c06f0f7eb4b78853f17b5c3ac3dfca782bf2de6e7e3b9913aa656a42cc240ab21b65679722ee421a04477e8c4c43408de061d49ce363a0a375539e9d3436fe6b40e52025591f6c066a8bbeb"}, 0x8, "7cfcbbf55874d63c"}, 0x1072}) (async) 11:34:41 executing program 1: r0 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x58}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2e}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x11) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000211005) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000600)={0xa, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000640)={r2, 0x23, 0xfff, 0x9, 0x2, [], [0x4, 0x10000, 0x6, 0x1ff], [0x2, 0x8, 0xffffffc0, 0x2], [0xe0, 0x2d, 0xec, 0x1ff]}) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r3, r4, 0x0, 0x100000000000042) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) open(&(0x7f0000000500)='./file0\x00', 0x40480, 0x0) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0xee01, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) r6 = openat2(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', &(0x7f0000000700)={0x515000, 0x10, 0x1}, 0x18) ioctl$CAPI_NCCI_OPENCOUNT(r6, 0x80044326, &(0x7f0000000740)=0x5) sendmsg$unix(r5, &(0x7f0000000380)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000080)="9f0fcf3e66e5131acf21803b80b1510470e053637c315656992d7a10759a2999545ba3c8962bebb372de5aba6ad580f6eeda10e84a725161f0097601a7641da1dfe5319db25c30895086108f66046364b2f8000752edbe857c133e6791bba49d319f7ebdb09c7d6b6080e02f5d33668271", 0x71}, {&(0x7f0000000100)="a31229a027037cc0a6268e00aedcb279f87f21e966674f63900ba9ad37769610749c7d5957f6ed73ade72cc76a73e192c6ddc7890e500d963baceec81ba3e5743fa95ac7d6c789ffe1b56aa2661b1b1e2415397fe56fde38c3d396231f2b68d702d85ebb94bb0256825afc5ffa24bcc265ef54d0a30dd315b2763cdd2276aaf1a8ad7aad3b49ed41d9600536c48758cdc0bcfa5081fa854c7e28dcc78407e16172c23ad68fc291807a48551af801fb9d", 0xb0}, {&(0x7f0000000200)="a13e43c25bc9926c88921db9a62fab3b789b5d7214a8a3b71fcf72eacd795e71b33bde80823b780a6638d0d38a18ef5d2cbf8aacf81f9ab8595d23d89f16d1c76904da812e56b1160d7c15efc4ea9f5cc712f13b2895cae5bae39ef215c530fc503b334689b26e7708286c60d1bb51987a0da9058ff8e46cbe4d28828fe599d80e54d001aa697f", 0x87}, {&(0x7f00000002c0)="2dbedb498cc8cbcf811f2041a4153b7e34a0c632d54a6485412eb90abe40bd36caa8b51c152673f9a17c55b5d60314b3c3", 0x31}, {&(0x7f0000000bc0)="5c6e199d06fdb801b73bb4f962505f8b01b19af768237c61bfc001f8a18120fbd413dce158498707231283a3e90573b77fcf6e2ae4d665c9d1ca149ed0c8a37e32307321ba2bc75c9f3cff2d917dd3f51cdb5f0dfdda5629fee3c4cb0d9802b90bcab7f88bed02665da9174ad47738cb0c4158df3a7b73ee37eaaa76080e3a702b092d4d40c52da9719e2939b08755d06d2860977eeaf7c9804b6b691fdd86efd552cea66caca5fe16c0d395f4873c881692ed59b234eeedd01056ed590a132eecdae8001d386c945c491eb74e30d57ca41e5421933793650e1c2644afea6e77c7f7294cafb17c54a727861da9e543d85b7672670201d4e098bfef9ae943a1353dfe8cda48050d605e843b8a49d4fa1071b6c50f8a7aaaa02e7fa628dbf5173d528abfea05ff5e294f87dca4dd15c1ca559ceaa36b582a3c71c5789ebe082a88f1feb5dd091d9a395ff5ea3f06a8cb7bdcedc42f2410ae2259ff3724e953e3c24aec7e6de0138ccd66db063b76ff40b034b80501e6ccc7626c946e9fa3a237f4c55dc3536486fa9bcafe6fb1586981fcaa0299efdfc03f76ff8b972a354e09e5570e66a45adab4893508dd8923c50d312b4ded2c19815549b635904680c1019bfacacecbda346f67f7364926c0e422028c189a73ad1658064cb5a6428fed47a6430d232fa3c18e447c1c993b3374d50dd48e091b87d8464739620a250fbeaa74d5abb2a5ad8bb44357a0e75bfbbafff2cdb70c35dfd7fef1cd1dd1640dd8ba94e9800b951134e32995d3b0d3e6b73ea3061d59410a2641033f8a051044a4479714ba212cd12463e97d2ffc4247742440ae64f7565a5ed2703c74a8adc57a9c28e9f58acb2ddc12665e0df8997549dfe473e4e4e7905d744b8d67d4a7bc96fa15c410995e4a6dd4ea74ef3757a51659b7c33387a729ca4fcb66df9c4079fbe7b32d1e24531ba71ddfb2ffb928a8084425c1b61c647eb004b36dfad4eb21267f18fbe24679191be8b2f3ce8064bdb88c0ddc52a908474d23a751a1ac5135fa544e0cb966da38dbbfcaa575ef57cae4beb4cea4a5a1199a8b0e8fe785b819b963aa5fa23576c72dd75d080df7feac4c46c107c20564d99b788554ad8e41650ee8ebcdb6b82a6d4c6c5a3aecd42095e2555eb33ea19ecda49af146bb1760be542e069b2f6909f2867ae92bc5a7aef5887da30d8621242ea604fca86ccae585e8a9613f3b3f405c67bf31f478fef281c08b0edeae051445d77d40e50535d48e8c87316f33cfeae7ef86c3d2690bb2bc7e6150b1afb405b675a946b0ec8df65fd09f4ab5791190c4c303afc1501ea3e84576c4a1f24d4863caca76dfe923a27c8cca8e123f23fc770b7e6a8f73354aea61d6b3d001e42c46e17d5446616d2307f5ac516aa0a50d8f41e8eea5c05304bab6f7fe50a5a9469b7851bf563da024a6d3ca15c33548ff7cce24c1176d70a87e26ea8ef84dce4ef81d768d93985378c0ade7418cd58edf99490270bb9dd44f258811740467296540c653b810e12f640edc89996cd66d45605be8160ddff74bd493620395a44af1e239ceb44b35eab66da0fd524fc02bceafe2e95c9d90c8c59f85db76194b701f185a598c4ec6dd0bcb3b54758ee94416492901121396d81c8bcd308d4fc974d91028f3c64dd87a50560415750ad3db862a1a5e2775ac2fd46a84104eafadcf6bef97343f2369fde41d856d5fba2cbd7b2475302883d78398ec5b703e72f727b459eb560bd2631af1e1e5769bc46a5f2e991acbf2437eb9133a60ac7085f147ced7df0d4fcd4200cd00a26a241c74f8c4edb85804be0f66482deaf98bccdf99c6b0808191bbeb5991cefe3ee6713ec6e86ae0d06a5b13fd10304cbac49335ddd62cbdf0541268ee0a4979d61d2e6b4262400090f82eff39f949cc91573d117887dfeb6978fe93981004383ec2a5ca1b121eb996d6c143349702b46204155424056a28673e0a2bd12ed38871a82dd176de6b84b5947923e772ed209908b3308811bae41b48cd2bf69771bad3cbbdb8d366608b121e8bf58670d9d3a723fc2bf70a2c2f1607934092b5bd14e54f89eeed2cd3aec928b8225b7fa4a9944c0ebf410353a2b5162eb9ab1225738de07142e10ea3e0af2975de15d7704236284b796f15a443617cdfd17519e3daab61e996820c91da8ece9fece5e91276670c176abc5c8fb72e37eee1b1e2d5f8790ccbf0dc11d12eeb1005f03543f3a5b10ee7556a0dc9e83517ccc9370405dd9e246439436c1815ab9614656da9c1417826c3d7b1dddb91bfe635ce23dfcd13e2558d8510f45603ac80e56e3b1636efc6370f741814309547296f14bcf444eaf5eedaa434be4f6d9923dbdf7af6b6e5fd75105736b7a4be3dc575a888f64f76b905de2175e86ca3fa2827c576ca2bd3bd687007aab59f2e3f5e5476abf410d725f7e328faa7ec168bb3975c05313a988bfe9bf90d05862d3b17ef962d27bbf91e233652d68b2d54b4c9ac06d537df5501dcaae61bf23797a7fd01f02e6bdc85b840fb27ff992f026ad7290ea6df9df3285b0eb90171a4c61ab2389dd0036f80d62139d5e5e1d2bfe0b20f717a9e3e4536ec03f2a435fd283abd7420e216296a4176784684042895da789685dc7265b14e2316ac081b4b266478d915326d4b2c66949abc9c9f9533957ef59b1751cac79fae34264cc174d895686c3e00091575d63875d65d83f400ffa33d6d24ec41ffae8924b77a607c40c1ab8ccae9c46f8c032be153b976b734b76bc4afa2d2c2e1cef71756a955d4d61bf9bbbfd67b02699562338b1ac86f360400a1880daea873db3b4b082e65d0545495de698ad9baab41b8cf12d879893bc1b43bd7081b475501d254be64916f489d82f4a29e46f1b320be957d4c7b7d49b532f28860083e83a8b46cf2312cc9460afe17bbc463f48343b24afbe5d51f6deed3d4941d75ac03cce5e17ad8388388d50e6bbb839f12cc26a82ee4014816ac52b09b89f752595f928cf0e85c28478912ba4a0b9fbf4c111338ba98b899f6daf40465bfff45e4b2387dff57182b56c46b8460a77eec4943d36a9e10381ef05fe99a58a182f4afc783bd8ee0e3276b2918cb6c75712ac9e02413c26824927627d7d611fa73aa05e7b3c60392319508771aed3ae88f70e5a4365b7c284aff5880570167f7d60d6bc9a0a5d74ca04a5db65f74155e7d52999d62b6df7fc67dd269783074595f40beb821520f06c97c38c600375dc4cd5892015be0f3caa6d1346a70c4476b6dc919ae1c91c63f33ecaabca809a99e7c71df647b8bdd679a1e4254f9a25a1cedfefc7f82deac58016c025a85de6902bbd86ecb270237b806058d3751821541f263f513a8d08e49d739dfbda954a0c9f5d3d811a08eb3ef828c2bb1603bc8f0eb3db3756d22f1bb0a5c5f118c2da235c36ec5bbd47252e539ebeb37767bf5da45bd327f2fd75d424635462a1c5dbb3bb8ac5ff03dfc0412e50cbd45a2ae5148e7d7dc18043abfca8470b8dba0b0eb4468bfd76c7c4e839f31c6c99ef610895239593784536b82c9e9bfd7eee8c4406801eb824102167b35cf944b5c599ce13a4abf514826866d5ae042be941505fa5e1dcfcdc1e302a5c97d81b1ef32c5e6ff96903961f972379c1f7aa750632c841de67032af104f1de107a322afbd4a92b74d25e4bba0c6930bcc6a7297e9d80be5f6a7aa3e3752f084d18aa8c30fc0b6721d032d709d7bc09b49754e2aba4624b387e31616d23e4edbc5548394f09cdc01d2345780c50c81e41b4bd236b078f68d54dfc0f627b71dd79129c94ee561c2bfaa6f7291a0b6ec2b1dbc73c046e236797a578958285dbc5e8b5de199dbb7e7b28d110bf27c2de5613b2c95cfffedb9f10833e9ef50bed377647a4baddf0570ea894c720fe97ba59bcb888b342256b7073e829c0beff17cbae7da1fc0894165c35db0b306ff90f75f5c3abe6428c6115364149f755be9ef92ed566a956a26ff6d0923b78088e795d65e85f9cbdc6cad75707c3570bc759a829c78fbff52cb245b2a513ad354e89bbd2b655a8223d2a80f0ae6c346717f465a899fd3ebc75e316b26b460cb904758ba000951a8fa6c8583caaf0588509045676c7edfbfef02b1927ca19133a7987e82c86f112b9e9a3a5972b299d20ca2731b025ea0ccd80a94e48b515e42d5d30f1f4493844e2d4e637d97193a9994d76ff331abf4c5435b2329dc706b3229b6a793976a1b8bed7c81dc866522ab80301d68ee67def60bc8dda42ebba85611417addd4c48cd8db813b33594e0847813c60df87b6c001b01830fcc57102cce24c34c3ef2e043c1e447c1e6fbca0f00204a3dc6b19806112790ff92a402ca4b01ab37303a6310b46566a682de08f33ce0b86c69d2724efdc65bee6cea80188db3f3f84417366e4c392342547ad923ce9cf1d6b5177c1b41e040cf2cf5b2eeacddfd9269d4733e9f0c1bc4e3af37644ce3510d53bb1f9846ee16c1b130411fefa872d65e114cf42ec731f9803af51a282c4798625ea1ecf753052877e566d3999a0ae3f8575f589a4e4f08b8c368f9694c557e1aaec57930fe3c18181c58ad7145473b8687fd6af0b670fab0cf3863d7178926ce81bff0c27ca7d5411dee6e8b8011539b3c19d8e6e02553284efb1d00d2f190b079d1371399d41e6a3cbdfa8fe6e687e9cfa7606e4e691ab544fca2a299eaabf20d1c7e0f305f70a307aae1d1ee865de0800e9804ecc6b172d13307c62839218ed4e541110b741f4b49ff079af74a7514f295c4645936dfd696bb3f07958fa265e6034ef25295591d6fab392cde12f79a510dbea7a305771076fd18ad3bc72c67d08dd9d0ff02fc571f173fe2b630c6e5b347dd5f01b56dd984875cd739509c9dddd14210e10cf4ae93d82a58b1e81a5eb7f6c42a11d405c6e429cdfb8e0fb37de5961bce8d54f163fec021fdded8058eafb95510094678c30864ddb685abce037483ec6b1bdfa8c4d9e262dd6effa5adcf9469da66223ef06aab1f38b2b1d1897538d769803e6e183e23286a31c4e5d9f8cec40bf9c1bd8ffde6574806d61992a90bfb962070f6e1bc081f4e1d13242293c5db55c75e27d7052262f4d3c505346e6f7f4492c7099d2d56942bedd6167dc79262f924cea9a42bce771b510532e070f2b0c5f7690336f6b37963cad1bea55639c5233a247c54e76ebb69670bd9a932571ee64892982b2341381a5872f756caf1324f37a585ca50025420ab22aaa968024593baf02258599d1510db31a4b3d44c1d7b4423516f87c7a6c75a889d31dad348b47ae100fb79c2c6abe9207997f1242517ea4248a09b630d055edc3bc0ae47f03336db07b904184486396bf9ef5068b2a3ad155fd3b9e40a9f24f751f45fbc9bbcef8e9a24673e34b94396ba38e8ddd325a898e72181378c64cfbfdf84af61ffb24811d9c9e89b679c9f425ca190140cb2171b31c61a2fef26c743d1a5d2948857fdacaf35c573bde3163750414e37465f79e5ef48884a67772d8e86904efea60cdd3328d662265e5e01e8fef297e150ff3f022e58239966135e76c3cbb1c4490572aad773ffc94099efc4fc69b7da6c0bacfa15696e2b17605379f1dc4c0c024db356e0dfc957ad5b6b1037ad3f2c769eda8ad6b9139894aa907d979ac7134e7010ad30b10ab0e474da4222fe4f997aebc9f1f177f8827ff26305984a15daf5241ad6a957c7db55b34625b1ef187b9701e8a4a48c4050ff8de6d5f9c7b0927993b091c3e3bbe44cbc873f5609fb23d6bd90f5457e4e2529c2b8f", 0x1000}, {&(0x7f0000000400)="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", 0xfd}], 0x6}, 0x40) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') preadv2(r7, &(0x7f00000030c0)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1, 0xff0f, 0x0, 0x0) write$P9_RREADLINK(r7, &(0x7f0000000580)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) (async) open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x58}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2e}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x13}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x11) (async) ftruncate(r1, 0x2007ffb) (async) sendfile(r0, r1, 0x0, 0x1000000211005) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000600)={0xa, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000640)={r2, 0x23, 0xfff, 0x9, 0x2, [], [0x4, 0x10000, 0x6, 0x1ff], [0x2, 0x8, 0xffffffc0, 0x2], [0xe0, 0x2d, 0xec, 0x1ff]}) (async) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) pwritev(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r3, r4, 0x0, 0x100000000000042) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) open(&(0x7f0000000500)='./file0\x00', 0x40480, 0x0) (async) quotactl_fd$Q_SETINFO(r5, 0xffffffff80000600, 0xee01, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) (async) openat2(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', &(0x7f0000000700)={0x515000, 0x10, 0x1}, 0x18) (async) ioctl$CAPI_NCCI_OPENCOUNT(r6, 0x80044326, &(0x7f0000000740)=0x5) (async) sendmsg$unix(r5, &(0x7f0000000380)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000080)="9f0fcf3e66e5131acf21803b80b1510470e053637c315656992d7a10759a2999545ba3c8962bebb372de5aba6ad580f6eeda10e84a725161f0097601a7641da1dfe5319db25c30895086108f66046364b2f8000752edbe857c133e6791bba49d319f7ebdb09c7d6b6080e02f5d33668271", 0x71}, {&(0x7f0000000100)="a31229a027037cc0a6268e00aedcb279f87f21e966674f63900ba9ad37769610749c7d5957f6ed73ade72cc76a73e192c6ddc7890e500d963baceec81ba3e5743fa95ac7d6c789ffe1b56aa2661b1b1e2415397fe56fde38c3d396231f2b68d702d85ebb94bb0256825afc5ffa24bcc265ef54d0a30dd315b2763cdd2276aaf1a8ad7aad3b49ed41d9600536c48758cdc0bcfa5081fa854c7e28dcc78407e16172c23ad68fc291807a48551af801fb9d", 0xb0}, {&(0x7f0000000200)="a13e43c25bc9926c88921db9a62fab3b789b5d7214a8a3b71fcf72eacd795e71b33bde80823b780a6638d0d38a18ef5d2cbf8aacf81f9ab8595d23d89f16d1c76904da812e56b1160d7c15efc4ea9f5cc712f13b2895cae5bae39ef215c530fc503b334689b26e7708286c60d1bb51987a0da9058ff8e46cbe4d28828fe599d80e54d001aa697f", 0x87}, {&(0x7f00000002c0)="2dbedb498cc8cbcf811f2041a4153b7e34a0c632d54a6485412eb90abe40bd36caa8b51c152673f9a17c55b5d60314b3c3", 0x31}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000000400)="ef49c507aa9fce5f1a3256b4cd53e8f4df4820908c0d4e23eb651ed385d45d1258c7f1891cfd00ba88d0d4e166cf1914a4c7efe7a2c9d09d0e4ac6094f7b0d58a2590d69dd80e2d7ba0b4a94c03688f5f130aafce9ac326bcb96e55242b8b980e9387717025e3da5042d7732672a967819d1a00639a81dca662ce146ef4f95ac9372efec2b68742cff257053669e7b97eaf05370c5cfb1c9e30730e50ae00b89feff26e07ddc1cd7c9cfc6f8c4f12edc49c4678a49cf2182fb61a5b80a3fb65555e7fb38e521d24c920acc8656a6c634b481a3cd990a0f96a1bfbf0d5f0cf19f15e1f41f21b0d0e195561dabf8b89de03de1dcdb711f14bbb52ab97452", 0xfd}], 0x6}, 0x40) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') (async) preadv2(r7, &(0x7f00000030c0)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1, 0xff0f, 0x0, 0x0) (async) write$P9_RREADLINK(r7, &(0x7f0000000580)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) (async) 11:34:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:41 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x32344d59}}) 11:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 455.763116][T10942] binder: 10941:10942 unknown command 0 [ 455.769002][T10942] binder: 10941:10942 ioctl c0306201 20000440 returned -22 [ 455.778199][T10942] binder_alloc: binder_alloc_mmap_handler: 10941 20bfe000-20ffe000 already mapped failed -16 11:34:41 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001440)={{'\x00', 0x2}, {0x6d3}, 0x22, 0x0, 0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)="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", 0x12e, 0x0, &(0x7f00000003c0)={0x2, 0x105e, {0x0, 0xc, 0x1000, "157d016ebfb014ded3c75207ca733336986e136b950d46d1d1356901bfa6d59a69f9f16d0700b7994bbe69e00bb5f8c6e0805bbd47cf7ad1f1ad714fc6c38616556e8f0172931a49627ff967ae07637f63acb3f23f2f9c9555877b2a7f212f3f674b700982f506d587cecf1a44cf7374763c02198441d2c54442bd3bcda597c877ac3dad6ed7f3552c115f6ecd895272d15e03317e7db6f1d47d2d51a3aff7b501086298e0bc1046bba2bcf0d6cb4aa5df1fe214e6b31cf9be44676dd4b97c2671e6d6ffe32866110b7b8df0e763121bd026ef9e956b0d5fa31660ac6ba4c66d41e5fcfdec56e5ca9d090e9eaec9ed505e1543eba65969cd204c718e5aab5b48007d26cd1071cc2cd5da1890c5a9d07f5439a8e3731e0d65ea04fc382d44ac8bc80b1fd3cc2f03c8e037eaac31468184bc1bcd77cc700255cdf59eabf92690086b0f87e488610a39c248ef506325ed3376624f8809a8679b5ad4f5cf86a22dac5f5adb46dced3ac343424fed77ab152df5da11ed308869629f71fe8f0c6b63af0faeb11dccb2d2707667da83d710f5316a8308a1a5288e65e14064ffe82b67e18afaa41c6d608062886c4a9907c47617e4684775e4a41ff983c242101e4fa8a6e6aab80048075d897b8a393d2f18d27607b44cc3c236344fff1686d22b77d664c42e35de56400e83bceb80b85a56674d1a12c3d9640b417f8ea6740602e2845c6ee73a953a471c92d507b784d86544e7c844474be3255d7debd56664ca23eb3ef068e3ceb2f9ffa2938d4423b01afa40284aafe4c3d250619764589822f034ab78de1d149e1ad390f144339a9e19ef8bcfea00efaa9b2c058f38e6dc321ac302b177d10f381d873a62addbc043b9d8c51a73c5715323be0bf9ac440f934c457e26e74719ede721b42108510a450432432f6a6cf9ec4684c31ee8b6a1465e264aa0fa847a34bf71f0e5daa813064cabcb8d3eece44b0af6d5e90496caba3603de635572c96beb79a7c852dd87df91c41ee2e9c43c421bcca1cb38c506e3c7e14a224462ba9bb68b60605e84545b7eeaa7c2c75fb35b0d31e300ea3c2368520c68567daba4957452fd214a964ad14d87637c50fc21495641dad63d758b3e558bb5ce9e432b744a3668f978c64ec8dc3fbb65e0067939bf59a2b9f43ab0c877873c2525479c3aa89dee6aa60306620f4093c0bccac46d08e7f3dc62d28d45fa61f009f5b8116077c801e0a7c8ab85029a183c595a442d4583723f5fe60804f045a1d1394692a057eb9f42e459765515d10299f35e1489f03deeaabfb44b31d50c9d52b64ff55bf77f470c0d381ac633929cacf0828e239b5bccc5dbaa2eb633f80b266884c8d186ce391839f20e76d064f9b87542a251d54e1918c7e2e9f24240d3cd940690ef148b4308a6bc9c16d8f94bce2be607e32a1c6da1c55d6d80c35f75a167e3cd14dc70ba504b8343e8de69f1d19df39049b56ed5bf635bb59a79f36e0e34514429a6dfbc640f7ba5a311cc926a1a620661a899357e7f4af2c59e4103ea9abe5db94743158d39ad95062fc4a24ee9feaba77c272b94deac06e8e76cae7bfb52040b8a9abcfb93e7aaf289e22a3450409b36bef4b3d7460c92cf71418b8020270d3e2de7160084839722ff306eeb801e0964f1b882049a7c7b668ac04ae1b707fc2e5d802e32dd5952642161db8853a6f99187fc0f7ff2ea6b348a3643147effbbacaad6be7aa09cede78ff9127eebdad7eb9091c7e65c48865bbc4f8ae0008e2f8a738a6f226ad227ee24866f3e3a8df3d673d8a92cbf4802fb3d22994652a61ac7551b014849d963b92b8eecb38e4b2fd80bb15abee6153e7aebbccd4643675e7bc35c37289deb3a465e98d657d370945ff648abf42a165e6d855ceed7cdd5fdbced09f99403d4a670b04603cb4a4e196aeb2b43ffca5d15e813981a1ffa8e9420f97948762b297d536f4ae8ff781c9b5b4c6470fa701f26007e3fb0c8787cb4e56d27ed2c9e94d46e0e2da66b879961cd97cfa10b3a344b0eaa3c5693321d59b201df222908a0df8aa61d8106ab7b750415505c91046a9f4dc6116ad1406507715989dcb6479e706ecfa2729d6fc22d002f1d161e61a9a1dd2d30ca4cc47d7a2fd72fd4ab3fd39d9b2cbee97e3e151820c761342ed6b503fdfbc2d9268d2fe8ea56bae5b765d90e368ddacf8ac9e1c9b62222e0ddf2778f97b137b45537561cb6a645ca93b1f48c0edee5754288e6b933c9dc75fe0a86de7d8732666b5e645fa8eb395052b0c62d3766d02a1abed4b927d85aaabef1705469cf25e86baf1863f5daa57b8f830e45f352046ab8128ad7498fce39acd1e0c4f747dd591d50bc45423b08c9807515c337cc11aaca2b7edd5c7ea3a66d77905a73af1217412ae453a910ad5ddab8d03b7bd34c8b4092dec4d6d92d7401d50e89c6f755997c58b086ff9ed24bf079af5d292ff045bb11dc9bc6650d6123c3da6de1b05b2392c57d015ae8461d9aa1f8cca00e9b1b4b6acee26ce75a346f28ba39285b76a0a0863b4475a0f6941188291a245fd74b2dcd87c170e66639d7a2d00e996dd1ee4d89848d748de19d8079df5f1e90c3b6a02f0f42ad486e2b27dc374f485e69c576d1b7702cbd38fee0d132750203f771a0f8513bd38194650f9ab3c26b5a00177dc0d99c0e42daa2f497552a80f8bcd976b6dff06fa7356461a5c18831b01f4aae2071059aa5c6f6d6980c2723901e352d8de41c3b8ae6fdf497d4824893bbe9779f283bcb667737a9411d010abab3dd6290434f3ed454ad2737cdb84e14ee6b85ce26febd4f22a39f2b5262f811e0541199f40bd2640fcdbc0f9fb0dc68dfb9be38c6c109ed533900b897487c0e56c7ab2c264a982a895157ceec0776dc642f4e68c480e34b0a833c100845df45dc7c4c1cfb4059c6fd88997c2776e036caa88b92d4f81afac31c8176123edd3ce06e5e10b785bd91a3fffe2a1abd8d4e5b0f7b1eaa3e19dc1c1a6bfa7ad27c0747e7038be9d8388ef267d495d43070c5dd1dffd0e13b928d664ccae8a9ea50452a8ae15e8a8fbf3122b8946c27ecdbb7ac1210cdd39597b472c9155631d067162561d294d9a5cf761bc5015d7689ae55f6899391ed8d0775db39aebbc50ce919bed5a74c584f14251036291a9587d030a21e8c7af4392ae44fe430357cc10a537ea77e0fa6708e8c88cf7580ef4aaad66bfda5cedf3646db2e9042d1d3d77cee13aae43c15223fac93c0b090120bf88e2698f18f7fcf5b4587640a270a68dbc268a5c12c2d9a5a11bf0b584b99cf3d35df59d5fca2fade2c11ee0149d950a6d07c85b9682e9b5e285ce7e05be4f4ef38607233db11126e03af3ea0f7f6bbcb286aa77a4900172673118c432633a22ef3a7e86d3fcf5f782e2303effeb0f98f47100aeb86915222f8c73eee9bf743572134771466ecfe1da0cea33274cb457d9f6e4d42201080dd06e099a54da6792ed0db9b328a0506630875fb9634d2788da6c79782e5cdc00f9cdbebd3617d3166ea303b9580e86791eec805ce7e44167f8d0919d56b6b63e15f48b189f2beae71299d2dc7ef14401654835f6781a713dac80b988a8aea1bc12dd8222817541b6a38d78a4a0c78e088b7e43d02ce911dc5ac6c882835debea4b0f3af9cd7df587cc92eed73e82beae97db45f37abad92e11d89f0f3c908755eeef9cdfda1f9b6b9868a3abd80293788b1615c9f77a4610345ff0b9f5a26aa3cf855060d8dfe6c982f57b80f3ecae46230f64d9c4b6c13e80b70f404697f292576b6bc801674902f5aef9c9cbf7fac4de51548b400dad47f378f9288cbeca990c19fcccd4d315894d9afe96bed5e295dfa204b942020238176b8df271c623d95556f49906b64423e6ac3c66764205f4e75e8a6d47c4ccd779074129a2010a798b4a75c71f66b20cd2c9f1ae6a901021753285e08bac225c4968b70c1a195e4b7311984bcdd0b5668d0529f2a7818f2919d6686ddee233e34280d7ed6a35c8c0699ee0d579755624e67cbf8021d6e09a2f39423e51998e9abfb71acfc1958b977724c2adf26f557684c1a2ebed2004f508d7f3c9fd07876a4cc306e77d3a269e31b7212edb2839def29def19a1f2982f0c45c5f2e17f5da2f00d519e43dd925f5223c4e98361ba948c76545f1a7635e563764b80659671b61ace0a904ca5bded5a9cdf5a399f5c90de0aac36d9ade5aad3f003fc3c308fc81fe802a326c04849d6e866372c8c24f16295f251ff77cdb6cb8595f474164f4894f75ae4df9b6435715b3d742cbbfa4efac088978861f2d476658d9d13c3be8bf3b79e23af62ade08f8edceacaf34f1f6a032befbc7a7f8ec2c2cb0b98f5698fc3067d484f739278f6c883ae85b1f8a286564a3ffbe0aee7bce9ebd8b9cadd5f05781a1646e805068eba51d15a3c70a134929389c115a6f0dfad2b4ab8739cf2074e4a5b9a9edc27d28afa853f4ece2ae7b577b7befb42b20c75874e07fcf48495bb1072679ddce32e373f9360e7072a45ded48021028c2a2aa8273f946c8fcc6d2b8580ef91dc24c4f056259ff0f21a1ebe69e292d01e39037066c6d47faf80f0deb4a1d94441a5202460dcdc230a12cd9b69068fd5067b593bc23afdedbab5a861d648f9e20a2522275d975bcd1944f79eb116ecca604296c5d68d81c9f3fdc7f3e91546430afefe73325260395cfc16f25e5cf992088d9294481eeccd2b567ae805ada5e043c4e5c76bd1b1ed19503c0f6cf38a556879c78135cb73429971b9d77fec30f66a3a2222b0fb3f7bd7b019071674b657098a4914aadd8d8c98ba09ebaebd931f512a0277f8e92b6dda2a072130e1dd19c7f5fe4ae8d967732200bbcfa2d1ed77bbac50fd4b00c36e11eaf1554b424958380c1c7075812cff81c6e150ae9625bc99f35efd5619aef9d3148e100772b0f496d50cc8ba433d175b4edd25a5d71cc97e5ff0249f31ff0e4ea21edfe8669461634deaf617524c29c5fa101f39bcd4122468af1e2545aca882472c0cb0e0cf2fc76d9b6db7b33ddd732402f22f0dcc9aa7badf6620101cde6ad1f8742ac2b33bfddefef26f7e92fff17ce42995751d31dbdf6608cb649b01be8dec7d49f51573a71f5a7bbbefe80125be4786f43c9efe8ae9c504f552777d918432326f084e23dae0afafcfc4cefdf7db77b72ac5e75447990925ff75d0dc9bf2cd35cb6b2812ae13eccd8381ee84fdad30846970656f82bebe71f97e8b6015b866f5ffaec29c6f68964cd604dba0bd27531b6b822a4e5eb6c67e51dfcd9d90b65974da6fbbdcad79a07a380e9d4bfbda52d86ba2119d1c796ff74df991fb42330444dd54c26f8b8ad58772a72ef382e46d3f525004715481852a89783953541bd8f4af5acf504c4f10c64dc9a23c64ef62b18da0829b549c6df19347a43fe791e27cd4b1edead3bb2b363cf48fcc5f5bb0bd15f406f4d12df36fcf3ba1ad02cf185d20255a23ad351b3843c95255b766ffc2b633d72f98c946a81307bcf1461d4cf8ade106ff3111afab92772c7b7b59781b47b55b5922c953d2023ffe2bea1ecdc6141457ffe1da2d4134dc32fc3316dac2d3715b7be783eb58af356ef7d539bc9d87f3d5cde95a3fe43d6cb114d1cf8fe6e230952cc6819b47480570b360d62e798011e933c8a7db715bdf5c6657aa9208227d8f0cf6bff19963537c7765f2fb83ca48bbd9830ac448c0b57cb40c0e02a726badc8e1bdc782098460540de8439a8819ba83c7d6101fabbb677bb1a356c779ad5075953ab3c66efecc38540e30f7a244", 0x51, "96051552834c06f0f7eb4b78853f17b5c3ac3dfca782bf2de6e7e3b9913aa656a42cc240ab21b65679722ee421a04477e8c4c43408de061d49ce363a0a375539e9d3436fe6b40e52025591f6c066a8bbeb"}, 0x8, "7cfcbbf55874d63c"}, 0x1072}) [ 455.821243][T10942] binder_alloc: 10941: binder_alloc_buf, no vma 11:34:41 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x49433553, 0x40000000}}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pidfd_getfd(r1, r0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000180)={0x3, 0x0, [0x7, 0x8000, 0x6, 0x3, 0x5, 0x9, 0x5, 0x1f8]}) 11:34:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:41 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffff8001, 0x40000000, 0x0, 'queue0\x00', 0x9}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:41 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x49433553, 0x40000000}}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pidfd_getfd(r1, r0, 0x0) (async) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000180)={0x3, 0x0, [0x7, 0x8000, 0x6, 0x3, 0x5, 0x9, 0x5, 0x1f8]}) [ 456.049808][T10964] binder: 10955:10964 unknown command 0 [ 456.055443][T10964] binder: 10955:10964 ioctl c0306201 20000440 returned -22 11:34:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75b, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x4001, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000bc0)={0x2, 0x9, @status={[0x7, 0x9, 0x7, 0x5, 0xa90, 0x609f]}, [0x400, 0x4, 0x400, 0x81, 0x8001, 0x7, 0xff, 0x7079f373, 0x5, 0xd5, 0xffffffffffffffff, 0x13, 0x80000001, 0x7, 0x6, 0x5c3, 0x0, 0x569a, 0x0, 0x2, 0x2da, 0x7, 0x6, 0x1, 0x20, 0x6, 0x5, 0x8, 0x5, 0xffffffffffffff80, 0xc9ab, 0x3, 0x6, 0x8000000000000000, 0x800, 0x3, 0x8f7, 0x7, 0x4, 0x7, 0x1, 0x5, 0xfffffffffffffff7, 0xffffffffffffffff, 0xb6e0, 0x8, 0x3, 0x8, 0x1000, 0xfffffffffffffff7, 0x0, 0x8, 0xb1, 0x9, 0x5, 0x3, 0xf9, 0x7fffffff, 0x6, 0x5, 0x8000, 0x81, 0x1, 0x800]}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0x0, r2, &(0x7f0000000200)) sendfile(r0, r1, 0x0, 0x100000000000042) [ 456.094608][T10964] binder_alloc: binder_alloc_mmap_handler: 10955 20bfe000-20ffe000 already mapped failed -16 11:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 456.150146][T10970] binder_alloc: 10955: binder_alloc_buf, no vma 11:34:41 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:41 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x2, @sdr={0x49433553, 0x40000000}}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pidfd_getfd(r1, r0, 0x0) (async) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000180)={0x3, 0x0, [0x7, 0x8000, 0x6, 0x3, 0x5, 0x9, 0x5, 0x1f8]}) 11:34:41 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffff8001, 0x40000000, 0x0, 'queue0\x00', 0x9}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffff8001, 0x40000000, 0x0, 'queue0\x00', 0x9}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) 11:34:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 456.332757][ T28] audit: type=1400 audit(1706355281.868:299): avc: denied { write } for pid=10979 comm="syz-executor.1" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 11:34:41 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75b, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x4001, 0x0) (async) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000bc0)={0x2, 0x9, @status={[0x7, 0x9, 0x7, 0x5, 0xa90, 0x609f]}, [0x400, 0x4, 0x400, 0x81, 0x8001, 0x7, 0xff, 0x7079f373, 0x5, 0xd5, 0xffffffffffffffff, 0x13, 0x80000001, 0x7, 0x6, 0x5c3, 0x0, 0x569a, 0x0, 0x2, 0x2da, 0x7, 0x6, 0x1, 0x20, 0x6, 0x5, 0x8, 0x5, 0xffffffffffffff80, 0xc9ab, 0x3, 0x6, 0x8000000000000000, 0x800, 0x3, 0x8f7, 0x7, 0x4, 0x7, 0x1, 0x5, 0xfffffffffffffff7, 0xffffffffffffffff, 0xb6e0, 0x8, 0x3, 0x8, 0x1000, 0xfffffffffffffff7, 0x0, 0x8, 0xb1, 0x9, 0x5, 0x3, 0xf9, 0x7fffffff, 0x6, 0x5, 0x8000, 0x81, 0x1, 0x800]}) (async) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0x0, r2, &(0x7f0000000200)) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 456.415886][T10984] binder: 10981:10984 unknown command 0 [ 456.438232][T10984] binder: 10981:10984 ioctl c0306201 20000440 returned -22 11:34:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x31324d59}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x10001, 0x3003, 0x9, 0xc, 0x7, 0x1}}) [ 456.467188][T10984] binder_alloc: binder_alloc_mmap_handler: 10981 20bfe000-20ffe000 already mapped failed -16 11:34:42 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75b, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x4001, 0x0) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) pwritev(r1, &(0x7f0000000000)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000bc0)={0x2, 0x9, @status={[0x7, 0x9, 0x7, 0x5, 0xa90, 0x609f]}, [0x400, 0x4, 0x400, 0x81, 0x8001, 0x7, 0xff, 0x7079f373, 0x5, 0xd5, 0xffffffffffffffff, 0x13, 0x80000001, 0x7, 0x6, 0x5c3, 0x0, 0x569a, 0x0, 0x2, 0x2da, 0x7, 0x6, 0x1, 0x20, 0x6, 0x5, 0x8, 0x5, 0xffffffffffffff80, 0xc9ab, 0x3, 0x6, 0x8000000000000000, 0x800, 0x3, 0x8f7, 0x7, 0x4, 0x7, 0x1, 0x5, 0xfffffffffffffff7, 0xffffffffffffffff, 0xb6e0, 0x8, 0x3, 0x8, 0x1000, 0xfffffffffffffff7, 0x0, 0x8, 0xb1, 0x9, 0x5, 0x3, 0xf9, 0x7fffffff, 0x6, 0x5, 0x8000, 0x81, 0x1, 0x800]}) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000bc0)={0x2, 0x9, @status={[0x7, 0x9, 0x7, 0x5, 0xa90, 0x609f]}, [0x400, 0x4, 0x400, 0x81, 0x8001, 0x7, 0xff, 0x7079f373, 0x5, 0xd5, 0xffffffffffffffff, 0x13, 0x80000001, 0x7, 0x6, 0x5c3, 0x0, 0x569a, 0x0, 0x2, 0x2da, 0x7, 0x6, 0x1, 0x20, 0x6, 0x5, 0x8, 0x5, 0xffffffffffffff80, 0xc9ab, 0x3, 0x6, 0x8000000000000000, 0x800, 0x3, 0x8f7, 0x7, 0x4, 0x7, 0x1, 0x5, 0xfffffffffffffff7, 0xffffffffffffffff, 0xb6e0, 0x8, 0x3, 0x8, 0x1000, 0xfffffffffffffff7, 0x0, 0x8, 0xb1, 0x9, 0x5, 0x3, 0xf9, 0x7fffffff, 0x6, 0x5, 0x8000, 0x81, 0x1, 0x800]}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x20, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r0, 0x0, r2, &(0x7f0000000200)) (async) quotactl_fd$Q_GETQUOTA(r0, 0x0, r2, &(0x7f0000000200)) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:42 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffff8001, 0x40000000, 0x0, 'queue0\x00', 0x9}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 456.515040][T10984] binder_alloc: 10981: binder_alloc_buf, no vma 11:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x31324d59}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x10001, 0x3003, 0x9, 0xc, 0x7, 0x1}}) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x31324d59}}) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x10001, 0x3003, 0x9, 0xc, 0x7, 0x1}}) (async) 11:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:42 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 456.750402][T11011] binder: BINDER_SET_CONTEXT_MGR already set [ 456.765596][T11011] binder: 11009:11011 ioctl 4018620d 20000040 returned -16 [ 456.778225][T11011] binder: 11009:11011 unknown command 0 [ 456.793834][T11011] binder: 11009:11011 ioctl c0306201 20000440 returned -22 [ 456.810691][T11011] binder_alloc: binder_alloc_mmap_handler: 11009 20bfe000-20ffe000 already mapped failed -16 11:34:42 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x31324d59}}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000180)={0x0, 0x0, {0x7, 0x10001, 0x3003, 0x9, 0xc, 0x7, 0x1}}) 11:34:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x701, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x404c080) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3Z\x01L\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r2, r3, 0x0, 0x100000000000042) 11:34:42 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async, rerun: 32) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x7b, 0x48300) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0x21, 0x3a, 0x0, 0x8, 0x7, 0x3, 0x6, 0xea, 0x1}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) [ 457.047627][T11028] binder: 11022:11028 unknown command 0 [ 457.072615][T11028] binder: 11022:11028 ioctl c0306201 20000440 returned -22 11:34:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x701, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x404c080) (async, rerun: 32) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r3 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3Z\x01L\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async, rerun: 64) sendfile(r2, r3, 0x0, 0x100000000000042) (rerun: 64) 11:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 457.110359][T11028] binder_alloc: binder_alloc_mmap_handler: 11022 20bfe000-20ffe000 already mapped failed -16 [ 457.135934][T11028] binder_alloc: 11022: binder_alloc_buf, no vma 11:34:42 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x7b, 0x48300) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0x21, 0x3a, 0x0, 0x8, 0x7, 0x3, 0x6, 0xea, 0x1}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:34:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x701, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x1c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x404c080) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (rerun: 64) r3 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3Z\x01L\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r3, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r2, r3, 0x0, 0x100000000000042) 11:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:42 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async, rerun: 32) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:42 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000000)=0x4) (async) r1 = syz_open_dev$rtc(&(0x7f0000000180), 0x7b, 0x48300) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0x21, 0x3a, 0x0, 0x8, 0x7, 0x3, 0x6, 0xea, 0x1}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) [ 457.378779][T11045] binder: 11042:11045 unknown command 0 [ 457.392360][T11045] binder: 11042:11045 ioctl c0306201 20000440 returned -22 11:34:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 457.422001][T11045] binder_alloc: binder_alloc_mmap_handler: 11042 20bfe000-20ffe000 already mapped failed -16 11:34:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000180)={0x74b4, 0x1, "0d0180000000000000fabc11f944784fd53f644a22162e2e36e69e91b844227b", 0x3, 0x3, 0x8, 0x200, 0x80}) 11:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 457.610786][T11063] binder: 11061:11063 unknown command 0 [ 457.618730][T11063] binder: 11061:11063 ioctl c0306201 20000440 returned -22 11:34:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000180)={0x74b4, 0x1, "0d0180000000000000fabc11f944784fd53f644a22162e2e36e69e91b844227b", 0x3, 0x3, 0x8, 0x200, 0x80}) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000180)={0x74b4, 0x1, "0d0180000000000000fabc11f944784fd53f644a22162e2e36e69e91b844227b", 0x3, 0x3, 0x8, 0x200, 0x80}) (async) [ 457.660082][T11063] binder_alloc: binder_alloc_mmap_handler: 11061 20bfe000-20ffe000 already mapped failed -16 11:34:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) (async) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) 11:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000180)={0x74b4, 0x1, "0d0180000000000000fabc11f944784fd53f644a22162e2e36e69e91b844227b", 0x3, 0x3, 0x8, 0x200, 0x80}) (async) ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000180)={0x74b4, 0x1, "0d0180000000000000fabc11f944784fd53f644a22162e2e36e69e91b844227b", 0x3, 0x3, 0x8, 0x200, 0x80}) 11:34:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:43 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000000)) (async, rerun: 64) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (rerun: 64) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) dup(r0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x3432564e, 0x17f}}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x11d300, 0x0) pidfd_getfd(r1, r0, 0x0) [ 457.903253][T11084] binder: 11080:11084 unknown command 0 [ 457.923871][T11084] binder: 11080:11084 ioctl c0306201 20000440 returned -22 11:34:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:43 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4a0000, 0x45) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x4) r1 = memfd_create(&(0x7f0000000200)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\Z}\x9b\xef\x9b\xcb\"u\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\x17\x01\xeew\xa5\xe65\xab\x81\x14\xd5d@\xd4\xf5\xc0\x1c\x17\xab\xeae\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdfw\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1/\xc0\x15N}\xd3\x87|\xbb(\xdc\xefU;%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05', 0x4) sendfile(r1, r1, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) unlinkat(r4, &(0x7f0000000480)='./file0\x00', 0x200) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/156, 0x214000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6erspan0\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000440)=0xa, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x8000, 0x4) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x64, 0x1c, 0x200, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x0, 0x8, 0x2}, [@NDA_VLAN={0x6}, @NDA_NH_ID={0x8}, @NDA_FDB_EXT_ATTRS={0x38, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfa}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x11}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x80}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0) 11:34:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xf3, 0xffffffff, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) dup(r0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x3432564e, 0x17f}}) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x11d300, 0x0) pidfd_getfd(r1, r0, 0x0) [ 458.169862][ T28] audit: type=1400 audit(1706355283.698:300): avc: denied { create } for pid=11099 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 11:34:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:43 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) dup(r0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x3432564e, 0x17f}}) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x11d300, 0x0) pidfd_getfd(r1, r0, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) dup(r0) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x3432564e, 0x17f}}) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x11d300, 0x0) (async) pidfd_getfd(r1, r0, 0x0) (async) [ 458.226627][T11105] binder: 11102:11105 unknown command 0 11:34:43 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xf3, 0xffffffff, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xf3, 0xffffffff, 0x0, 'queue0\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) [ 458.258597][ T28] audit: type=1400 audit(1706355283.778:301): avc: denied { setopt } for pid=11099 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 458.286868][T11105] binder: 11102:11105 ioctl c0306201 20000440 returned -22 11:34:43 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:43 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x80000000) recvfrom$inet6(r0, &(0x7f0000000280)=""/109, 0x6d, 0x20, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @local, 0x3ff}, 0x1c) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696ce530202e240acb58c0f96f7d05000000be2c4a47c015327bcadfd300000000f4ed4473973c99d10083af5cd779b550361ac0f22954905a339fc16f5196833b11192480acb2820d5e84d67b39e785ebd89bccd349bdd3d34ccadc9f02601eeaeece15ea10d73ce1624418382fb2ec48f1ddbf8a44d349ff41dc086283dfbd634c6c882561f2cca89c00db44882196962096a4ec2120772f849c64d0453a09d3ca6c695ca13e128a0fa5d48cb0876ccdd06dadc04ca6c693e0e547"], 0x98) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @vbi={0x7, 0x9, 0x848, 0x55595659, [0x5, 0x201], [0x200, 0x10000], 0x108}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 11:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 458.431342][T11117] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 11:34:44 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x80000000) recvfrom$inet6(r0, &(0x7f0000000280)=""/109, 0x6d, 0x20, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @local, 0x3ff}, 0x1c) (async) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696ce530202e240acb58c0f96f7d05000000be2c4a47c015327bcadfd300000000f4ed4473973c99d10083af5cd779b550361ac0f22954905a339fc16f5196833b11192480acb2820d5e84d67b39e785ebd89bccd349bdd3d34ccadc9f02601eeaeece15ea10d73ce1624418382fb2ec48f1ddbf8a44d349ff41dc086283dfbd634c6c882561f2cca89c00db44882196962096a4ec2120772f849c64d0453a09d3ca6c695ca13e128a0fa5d48cb0876ccdd06dadc04ca6c693e0e547"], 0x98) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @vbi={0x7, 0x9, 0x848, 0x55595659, [0x5, 0x201], [0x200, 0x10000], 0x108}}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) [ 458.515491][T11122] binder: 11120:11122 unknown command 0 [ 458.521430][ T28] audit: type=1400 audit(1706355284.048:302): avc: denied { bind } for pid=11099 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 458.553793][T11122] binder: 11120:11122 ioctl c0306201 20000440 returned -22 11:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:44 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) open$dir(&(0x7f0000000000)='./file0\x00', 0x4a0000, 0x45) (async) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4a0000, 0x45) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x4) (async) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x4) r1 = memfd_create(&(0x7f0000000200)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\Z}\x9b\xef\x9b\xcb\"u\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\x17\x01\xeew\xa5\xe65\xab\x81\x14\xd5d@\xd4\xf5\xc0\x1c\x17\xab\xeae\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdfw\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1/\xc0\x15N}\xd3\x87|\xbb(\xdc\xefU;%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05', 0x4) sendfile(r1, r1, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) unlinkat(r4, &(0x7f0000000480)='./file0\x00', 0x200) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/156, 0x214000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6erspan0\x00'}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000440)=0xa, 0x4) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x8000, 0x4) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x8000, 0x4) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x64, 0x1c, 0x200, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x0, 0x8, 0x2}, [@NDA_VLAN={0x6}, @NDA_NH_ID={0x8}, @NDA_FDB_EXT_ATTRS={0x38, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfa}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x11}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x80}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x64, 0x1c, 0x200, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x0, 0x8, 0x2}, [@NDA_VLAN={0x6}, @NDA_NH_ID={0x8}, @NDA_FDB_EXT_ATTRS={0x38, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfa}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x11}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x80}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0) 11:34:44 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xf3, 0xffffffff, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 458.612819][T11122] binder_alloc_new_buf: 4 callbacks suppressed [ 458.612838][T11122] binder_alloc: 11120: binder_alloc_buf, no vma 11:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:44 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x80000000) recvfrom$inet6(r0, &(0x7f0000000280)=""/109, 0x6d, 0x20, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @local, 0x3ff}, 0x1c) (async, rerun: 64) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="2321202e2f66696ce530202e240acb58c0f96f7d05000000be2c4a47c015327bcadfd300000000f4ed4473973c99d10083af5cd779b550361ac0f22954905a339fc16f5196833b11192480acb2820d5e84d67b39e785ebd89bccd349bdd3d34ccadc9f02601eeaeece15ea10d73ce1624418382fb2ec48f1ddbf8a44d349ff41dc086283dfbd634c6c882561f2cca89c00db44882196962096a4ec2120772f849c64d0453a09d3ca6c695ca13e128a0fa5d48cb0876ccdd06dadc04ca6c693e0e547"], 0x98) (async) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0x1, @vbi={0x7, 0x9, 0x848, 0x55595659, [0x5, 0x201], [0x200, 0x10000], 0x108}}) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) pidfd_getfd(0xffffffffffffffff, r1, 0x0) 11:34:44 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) [ 458.870383][T11145] binder: 11143:11145 unknown command 0 [ 458.888886][T11145] binder: 11143:11145 ioctl c0306201 20000440 returned -22 11:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 458.921533][T11145] binder_alloc: 11143: binder_alloc_buf, no vma 11:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:44 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) 11:34:44 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x4a0000, 0x45) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x80, 0x4) r1 = memfd_create(&(0x7f0000000200)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\Z}\x9b\xef\x9b\xcb\"u\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\x17\x01\xeew\xa5\xe65\xab\x81\x14\xd5d@\xd4\xf5\xc0\x1c\x17\xab\xeae\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdfw\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1/\xc0\x15N}\xd3\x87|\xbb(\xdc\xefU;%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05', 0x4) sendfile(r1, r1, 0x0, 0x3) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async) unlinkat(r4, &(0x7f0000000480)='./file0\x00', 0x200) (async, rerun: 32) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/156, 0x214000, 0x800, 0x0, 0x1}, 0x20) (async, rerun: 32) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000300)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6erspan0\x00'}) (async) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x800, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000440)=0xa, 0x4) (async) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x8000, 0x4) (async) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r6}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@bridge_newneigh={0x64, 0x1c, 0x200, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x0, 0x8, 0x2}, [@NDA_VLAN={0x6}, @NDA_NH_ID={0x8}, @NDA_FDB_EXT_ATTRS={0x38, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x20}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xfa}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x11}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x80}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x400c0) 11:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 459.169607][T11158] binder: BINDER_SET_CONTEXT_MGR already set [ 459.181499][T11158] binder: 11156:11158 ioctl 4018620d 20000040 returned -16 11:34:44 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) (async) [ 459.209871][T11158] binder: 11156:11158 unknown command 0 [ 459.235242][T11158] binder: 11156:11158 ioctl c0306201 20000440 returned -22 11:34:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:44 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x9447100013401bf5}, {r0, 0x482}, {r2, 0x8130}, {r1, 0x80}, {r2, 0x100}], 0x5, &(0x7f0000000080)={r3, r4+10000000}, &(0x7f00000000c0)={[0x1]}, 0x8) sendfile(r1, r0, 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80780, 0x210, 0x1}, 0x18) 11:34:44 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20a30083, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES8, @ANYBLOB="24643030ff070000000000009805303030303056378b39ffc91a882c67aa763dc50d1e751f957abff7301941b5f003c00227d1282a0923b4dfd4eff05dd3caba6aced265d667b6d574ef264ce8ef000000000000000000", @ANYRESHEX, @ANYRES32, @ANYRES32], 0x1, 0x14e8, &(0x7f0000001980)="$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") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000076c0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000007700)='./file0\x00', &(0x7f0000007740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000077c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007800)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000007900)=0xe8) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="2f18f97a5143098bc974c475f5c4bb2777f4d142856aa87ea653ead6e856d40f02d70377fe40e1"], 0x6b) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000007940)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000007980)={0x10000, 0x2, {}, {0xee00}, 0x9, 0x6379}) getresgid(&(0x7f00000079c0)=0x0, &(0x7f0000007a00), &(0x7f0000007a40)) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007a80)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000007b80)=0xe8) r11 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r12) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000008ec0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008f00)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000009000)=0xe8) getgroups(0x5, &(0x7f0000009040)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee01]) r16 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009080), 0x141200, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000090c0)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000009100)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000009140)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000009240)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000009280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r21 = getegid() r22 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r22, 0x2007ffb) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b640)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000200)="830c2958f3642ae05128a50e", 0xc}, {&(0x7f0000000240)="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", 0x1000}], 0x2, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x8080}}, {{&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001800)="2f772913b1f4720b52c8db04708e7b8217bdcc685bee9fac50d1fd610e77e4124641bce7d41abf8f76831f9f60881c47644cfab1c345ac7afac7d8a2d6339f6f32dec8cdb8fb77694bf358759a4b9fd970e10914ac7bb1cd278e6585dea8229de53f098c4754fc6ae41fa00936a5fc8c380f2e01b29f607f10", 0x79}], 0x1, &(0x7f0000001980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}], 0x40, 0x80}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)="8d4ee5b6cb474bb1668ceb28e22e0380457b9013a4ff3265d6cf4e5fdd87b673503cbb5bbf7df401dfca728ea1f1e8b734406cbfd421519289fbf0d638ac88813a3981043813f2260b4cad22c8254c36d2566db93f867a5679735afa58b892d31314e61ea4d5344e1912489468dcbb982ff04694c10e37a742b5c63caa8483def4bbb7b66c7040a31f23c2dbde71524ee721285e274a9ba8547d4654ff4994a70f71f9a1e7e9a4dc5eeeba1a05bfe18cb7b800d6313d025bfecb64f1111eb588ef74aeed481e7109cc200e04b9e8148da0ecedb6692871", 0xd7}], 0x1}}, {{&(0x7f0000001b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="7dfa9bec5e99702d5154883074b783ee59a886dc1c4b7b3a547b1938ba43304cc7efda3e155f8d543037e147b19caf3e15bd36e89a635471d8c71b9c403e79946ac8058b3fa6", 0x46}, {&(0x7f0000002c00)="40a6aa634a9ba5eb9febb3d3c0dbc4ddaceefd2ee22c516c8876655642a04edb2d7666f6a6db3aab8c9c921c9a3f30cfea57a1dbf8d49fc3c25bea43c6ff4576c8e6205b1abedb8a29c3991856920db666e9f8600bccb15ba1991d8b43cc03acd2aa8e5bf4cb4291b1871287bb6e403a2de111d1193565d54b54559543fc9497351a92f266a4ca964f777e6cc52b5947b7e13175e6768fcb666a267b2e825b290d009910cb6d3be39c6897f5ab337a8bb36234bc82d2d376918cee765e879dc13e8c78642b8661055b", 0xc9}, {&(0x7f0000002d00)="3d4443cba87acdea55aba61427648d01c68c0cb049d9f8c830d8a24590a11c544b78bae82a5663ad42feeb407403a70f2a04739380199f322c8336e2636b22441fbb27169b9b71bf67008c3630dc6e5d84eda75693f1e20e0835f5db3ec50d6e9ce8123f3ba8269bfdc5c6d60349d5eadc5893caa449bad2d202cacd0f3e9c5720f7c29ffff1948aa779d9bfcc675a371a38efc9c641175fc0de1c74f69bd0ba580008be62ed40277b04fb9f4ad7", 0xae}, {&(0x7f0000002dc0)="c052842eda778deebe78e6e063b3d0bdb84574104875b952c5c4c606418f17f0dd09b7c58ed8ea5980a9fab6217b1667e300b62c173f5a0fe0b1133d1a0ed7aa0a0e578b5aa3b3e58bc763963c1eecac5a8b75169fe8f45d365af5e1ed6053115192f506755ea6b2f4", 0x69}, {&(0x7f0000002e40)="bf22ce65b55e1d7e7e70d5044d4872da352575e0cd9d91f2cdbc8a80e5588a7f69ca20bd53d958e0d9c97eca7200307e4fc9bbb54d0c7c9fcc102942565a34bd0cf9bad9bf412370ccab253e54fce5b67cda6dfbf0184a208359c34b3bda830cece3393e4d305ae5408af94b676d93d39b7e421bcec00346a955de254c6579ab803b1b13df159cb7c370f98b124aa4ea5bf2125aa7dc3635c9e3e703b5af873bdcf3758499903ddccfb66f628d813a42cba679d0022e0e5b30a48f772d50ee8a9f59e5a9fe9470a0bdeee4b60adc4b94d3acbfe36b90d360bb7233265172629a4fa2", 0xe2}, {&(0x7f0000002f40)="453b389d2bbde94a6112b7ebd162e941f2c08fa9924e9927cda96d5f5a257f6a984ad637eb441c41bf8901083b5151c0df6b1d188e3b424030e5db722bd0a85b5851f4278a3e5c535cea176ddf28a85b1418e4593ef5052c785bbe51fe0700f919b4f76cb665d4e96b81994b0dbf46e66f8bfc6894dcfde0998c86d2d025e6b5d843a183319cc1377c4f87b4fc0e3eb2e0b1748573b67c824ad1fff5df9efe43e55c9eb769bddfb283955519dec008ba35a98d99d1782f81ee8869f8c98ffb6de618de5b64e1acc98cb3d111c6cfcd1864348697a289722d5b9178df22c77192a22e00efbb4b0951ed1d55", 0xeb}], 0x7, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000030c0)}, {&(0x7f0000003100)="658d05c0ec29f2c0a1e3ed3822f1bc3975940b89996f7316b02a1a7b623141756bbc8f1a2fb602080462e4145eeed4ebfc764a0289215dd8ae2244c5c63c75ab7d1fa23452760c835c739d1cf4536d00ea4ad6dbb7b3e4ab97db6fca23b7f226355a8b8333d02bb7cc4e9b2c5f2159491ea50f5993ee202a55136859f7804e41bc1a7375a403ee096c3d9929465374c2ac48b1f28447cb105d0eb18219c1fbb851d4ba61170ac18a3d043e287db2c921c9b194eb0abf8428aee0ac1339e740a24ed4b77f49dda57639bf10cc2b66a4054366c58014b7079c381eaf1c874d99a0b54b051cfe73", 0xe6}, {&(0x7f0000003200)="90eef0e0c12e2cf7223e953295e8d855", 0x10}, {&(0x7f0000003240)="6fca989d9100ea5334347e1d21b2a8c10c77692dd978e8ad9d225ebba488e6a3e7aa2c992dea19a51ad64c42cc208da7fd9c740d1ce58c92493e1133ac94da11644c787444e2204997f9c21bc792d94fa211d049583c030dc425d7c7f59099ef8f56eebda2b490c120f2eb81d654c4ba2b366edef89744cd75f460d54a1be7c2f9098eb9a344257af1ddc457169a2faa198181577c0d6b34", 0x98}, {&(0x7f0000003300)="0697a880d9592c2ee6ed7df10d4bd53bf29a9b6b05de03d969977a7d157630ee", 0x20}, {&(0x7f0000003340)="096aa1d8711b1fd1b18d05bfb6f1df14b5957fba808cb00e1b9defd5d90e0a15bcf166b8ed77d6684d7a5957588bcdd5dfe7", 0x32}], 0x6, &(0x7f0000004040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118, 0x2000c040}}, {{&(0x7f0000004180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005540)=[{&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="75cbdc6483", 0x5}, {&(0x7f0000005240)="ea6abb1d67fb7e46efcf8a13931f13fcc2472ed625544b2097f206a15675023fee1648820666af6f8a7a13601feca352981abf183f7a", 0x36}, {&(0x7f0000005280)="9d97390cb98a4874c22e13ab0b5536bcf07aa5d7a5a5aaf178efa63b5ff0b80ccdeb3c218e32cf7bf3edea250f7d003ce22895decee50be7f912f465eb121a31bdbfb206e7b26756aeead303467e81ce47c9f27c87c28871f3e6321bf832e855d78a2668dffba35ef1d82436f62fb2b771c01831564cd378b719541541a9f4499763d3f01234ef038f4e9a3169b88436bf59217366ef8ac6c46fc9e8eacf67a95a52", 0xa2}, {&(0x7f0000005340)="6d084ced89fa0522bd19d297a01160538bfdf1760d611cded0315878b2c1393c842ff775f8be7b5d168c6feed4029407827ff04296905473c991c98372d0f7e970117479", 0x44}, {&(0x7f00000053c0)="a1622523c61d5f3f6935e309f325c220414076278d3b31f852a40ee2061b749fc370be7d5b96fb5ea2cb1318c7d4befc160a4f375d45093f2515a46415315f1c671b1698c3c4fba53f60a9e6", 0x4c}, {&(0x7f0000005440)="738f8bcdb50308feb4132044bc287aeb90080081a27008947d1842020ea6117fbed097a6c45ad845e7914134ac1d281d346b0e0496fbc2091c7ba50660cd0f51c9f8863b402c6c506f2a512ff2b1364e0807c1c2c083acad16700b84d14ef6ca9332815de8e79c143e9997a159abdb3f30ba50648df7d30394208d16c8dabd318fd8bec1ca78d12c8e66fafe1d039b6b12f5f84b66b4d4f0c760756d12ce2d7fb3c8add16da4768a7f256f6a277689157193cb2d895b0267acca9b78f8900a87d0a5caa9faacece26eefcd387d75986260e40deac9af5451a184a0fb87d2c8161730c8e68a5ac01a3aa0d9b57ed4e43bb97b5c", 0xf3}], 0x7, &(0x7f0000007bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r12}}}], 0xe0, 0x4000080}}, {{0x0, 0x0, &(0x7f0000008e80)=[{&(0x7f0000007cc0)="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", 0x1000}, {&(0x7f0000008cc0)="3e8b", 0x2}, {&(0x7f0000008d00)="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", 0xfa}, {&(0x7f0000008e00)="341531eeeb0f209c0395f5afb31b99c12f6edfea7b52d324fafc9ba33720502ab40125e2c9b7c030d2df1b6831040226a9f54a23af75713fc5e23c5fb2a0c5eefcd29e3b53457f9bc7", 0x49}], 0x4, &(0x7f000000b2c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r20, r21}}}, @rights={{0x1c, 0x1, 0x1, [r22, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xd0, 0x24000091}}, {{&(0x7f000000b3c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000b600)=[{&(0x7f000000b440)="de1516", 0x3}, {&(0x7f000000b480)="67473eeb30cd0ea9ee3a513389723f128e96f3698a12fc47510237bedceb8aa940cbb8cac6d1d9f6b292378630f6681127c9447c183890c425ca244381fa7cf19b0ffd7212281df94fb3be738a040c68ebefd133bc04a9ba1478c01fc9593c5e49978c8fc3760b44fdf0382a9a09ad260dad983f621e8fdc5b869b70ac8803dfb9fb5fa3ee02f3ec258100383fdb9b3fd482b5bf86d4d73628e0621e86ce5212ac16c02d282ac325d6bb05ebcd7a1898df64c773260bd97fec9d151f5e898f4f74cc80d4e19dd8dbdec9e8041a1f28281d79d1ec6e373b0858dc225f0eaf1f449da7", 0xe2}, {&(0x7f000000b580)="31d1a9ec2ef141fa03f257e9500d4186c43beced0d2ca77598d472d5eb8d5ef1161da42d45667a2a6b960883272236cc23f3da04783aa6d655176a1fd1407b32e5d87429794064a8ecab0209047f1180ad7f90b949273f", 0x57}], 0x3, 0x0, 0x0, 0x40000}}], 0x8, 0x4040404) 11:34:45 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000000)={@dev, r3}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='generic_add_lease\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000003480), 0x20000, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000034c0), &(0x7f0000003500)=0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x6}, 0x90) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000880)=""/111, 0x6f}, {&(0x7f0000000c80)=""/90, 0x5a}], 0x5}, 0x40}], 0x1, 0x10100, &(0x7f00000005c0)={r10, r11+60000000}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x74) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x34, 0x24, &(0x7f00000002c0)="5417163e63e4d8c0d108aa58f17ace35313202db251bc1af2f2648094423886288d1dec0581833eb7ee6679ece9d8c1d15575cb3", &(0x7f00000003c0)=""/36, 0x8, 0x0, 0x86, 0xd8, &(0x7f0000000500)="d73eea3e2506006c808fdc4b6ff82ebb1db300eee1f295fa758d1c70d8dc974aed586fd2636b9bb3580da62ae05ff08ac2809b1f5a61b50271a617658837fb64a4bc2d629a02a3b04c6d28f4bfa00a5c573c0527c723ba28e22255bda16d208a17ab4d306fbfd9cd2162ace4e6fb5fbf60d3b69dcb2714dc44b105817b2754ae45c2cf32d764", &(0x7f0000000640)="2e0374bcb545fe9b95cc150bdb02a205d0f7e71557da6fafd292c66d015069115ce3e78256858213dd5244dd31b9599e100ccf41c17503b467c3a40ff04abeec053d11831d7937f8ffb98fd1c51086d1f0802cef9f92d14b5195a85a1afea6898cf3b96f6281e39a605717397acb59f1a187f012320bac12d8a10c0aca7f000854fd29d705ae76a94f6b67a6d7c585c1a7eb5f3138b41ba41f04ecb90fc79071c2f4380d96c635dfce9dfaec8048125c21e73df60f5e9a94b8c8f310a9bb5673ac24108b12646891f7fda8ad85cb1a4dfa9d4bfaa02b4ab7", 0x2, 0x0, 0xffff}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:34:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 459.525376][T11180] binder: 11177:11180 unknown command 0 [ 459.526356][ T28] audit: type=1800 audit(1706355285.058:303): pid=11175 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1961 res=0 errno=0 [ 459.565926][T11180] binder: 11177:11180 ioctl c0306201 20000440 returned -22 11:34:45 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20a30083, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES8, @ANYBLOB="24643030ff070000000000009805303030303056378b39ffc91a882c67aa763dc50d1e751f957abff7301941b5f003c00227d1282a0923b4dfd4eff05dd3caba6aced265d667b6d574ef264ce8ef000000000000000000", @ANYRESHEX, @ANYRES32, @ANYRES32], 0x1, 0x14e8, &(0x7f0000001980)="$eJzs3AuYjtXXMPC99t43Y5r0NMlh2GuvmycNtkmSHJLkkCRJkuSUkDRJkpAYckoakpDjJDkMITlMTBrn8/l8aPKXJElOIWF/lw6v/m//7+r9vn/f532vWb/r2pe93LPWvfeznpnnvu/rmvmuy9CajWtVa0hE4t8Cv/6TIoSIEUIMFELcIIQIhBDl4svFXzmeR0HKv3cS9vd6LP1ar4BdS9z/nI37n7Nx/3M27n/Oxv3P2bj/ORv3P2fj/jOWk22eXuhGHjl38PP/nIw//3M27n/Oxv3P2bj/ORv3P2fj/uds3P+cjfufs3H/GcvJrvXz5/85I/dvr9i1XsffO67x248xxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGWA5x3l+lhRC/z6/1uhhjjDHGGGOMMfb38bmv9QoYY4wxxhhjjDH2/x4IKZTQIhC5RG4RI/KIWHGdiBPXi7ziBhERN4p4cZPIJ24W+UUBUVAUEgmisCgijEBhBYlQFBXFRFTcIoqLW0WiKCFKilLCidIiSdwmyojbRVlxhygn7hTlxV2igqgoKonK4m5RRdwjqop7RTVxn6guaoiaopa4X9QWD4g64kFRVzwk6omHRX3xiGggHhUNxWOikXhcNBZPiCbiSdFUNBPNRQvR8v8q/1XRQ7wmeopeIkX0Fn3E66Kv6Cf6iwFioHhDDBJvisHiLZEqhoih4m0xTLwjhot3xQgxUowS74nRYowYK8aJ8WKCSBPvi4niAzFJfCgmiyliqpgm0sV0MUN8JGaKWWK2+FjMEZ+IuWKemC8WiAzxqVgoFolM8ZlYLD4XWWKJWCqWieVihVgpVonVYo1YK9aJ9WKD2Cg2ic1ii9gqtontYofYKXaJ3WKP2Cv2if3iC5Etvvw/zD/3n/K7ggABEiRo0JALckEMxEAsxEIcxEFeyAsRiEA8xP/Hm6UgFIQESIAiUAQQEAgIikJRiEIUikNxSIREKAklwYGDJEiCMnA7lIWyUA7KQXkoDxWgIlSEylAZqkAVqApVoRpUg+pQHWpCTbgf7ocHoA7UgbpQF+pBPagP9aEBNICG0BAaQSNoDI2hCTSBptAUmkNzaAktoRW0gtbQGtpCW2gH7aA9tIdkSIYO0AE6QkfoBJ2gM3SGLtAFukI36AavwqvwGrwGvaC67A19oA/0hb7QHwbAAHgDBsGb8Ca8BakwBIbC2/A2vAPD4SyMgJEwCkZBFTkGxsI4IDkB0iANJsJEmASTYDJMgSkwDdJhOsyAGTATZsEs+BjmwCfwCcyDebAAMiADFsIiyIRMWAznIAuWwFJYBsthBSyHVbAaVsFaWAdrYQNsgE2wCbbAFtgG22AH7IBdsAv2wB7YB/sgFbIhGw7AATgIB+EQHILDcBiOwBE4CkfhGByD43AcTsBJOAUn4QycgbNwDs7DebgAF+AivJzwTaNdJdakCnmFllrmkrlkjIyRsTJWxsk4mVfmlREZkfEyXuaT+WR+mV8WlAVlgkyQRWQRiRIlyVAWlUVlVEZlcVlcJspEWVKWlE46mSSTZBlZRpaVZWU5eacsL++SFWRF2cZVlpVlFdnWVZX3ymqymqwua8iaspasJWvL2rKOrCPryrqynqwn68tHZAPZG/rDY/JKZxrLIdBEDoWmsplsLlvId+Ap2UoOh9ayjWwrn5EjYQS0l61csnxedpBjoaN8UY6Dl2RnOQG6yFdkV9lNdpevyh6ytespe8nJ0Fv2kdOgr+wn+8sBcibUkFc6VlO+JVPlEDlUvi0XwDtyuHxXjpAj5Sj5nhwtx8ixcpwcLyfINPm+nCg/kJPkh3KynCKnymkyXU6XM+RHcqacJWfLj+Uc+YmcK+fJ+XKBzJCfyoVykcyUn8nF8nOZJZfIpXKZXC5XyJVylVwt18i1cp1cLzfIjXKT3Cy3yK1ym9wud8idcpfcLffIvXKf3C+/kNnyS3lA/kMelF/JQ/JreVh+I4/Ib+VR+Z08Jr+Xx+UP8oQ8KU/J0/KM/FGeBfj1u1j+LC/KS/Ky9FIoUFIppVWgcqncKkblUbHqOhWnrld51Q0qom5U8eomlU/drPKrAqqgKqQSVGFVRBmFyipSoSqqiqmoukUVV7eqRFVClVSllFOlVZK6TZVRt6uy6g5VTt2pyqu7VAVVUVVSldXdqoq6R1VV96pq6j5VXdVQNVUtdb+qrR5QddSDqq56SNVTD6v66hHVQD2qGqrHVCP1uGqsnlBN1JOqqWqmmqsWqqV6SrVST6vWqo1qq55R7dSzqr16TiWr51UH9YLqqF5UndRLqrN6WXVRr6iuqpvqri6py8qrnqqXSlG9VR/1uuqr+qn+aoAaqN5Qg9SbarB6S6WqIWqoelsNU++o4epdNUKNVKPUe2q0GqPGqnFqvJqg0tT7aqL6QE1SH6rJaoqaqqapdDVd9f+t0uz/Qv4H/yJ/8C9n36Q2qy1qq9qmtqsdaqfapXar3Wqv2qv2q/0qW2WrA+qAOqgOqkPqkDqsDqsj6og6qo6qY+qYOq6OqxPqpPpJnVZn1I/qrDqnzqmf1AV1QV387TUQGrTUSmsd6Fw6t47ReXSsvk7H6et1Xn2Djugbdby+SefTN+v8uoAuqAvpBF1YF9FGo7aadKiL6mI6qm/RxfWtOlGX0CV1Ke10aZ2kb/u38/9qfS11S91Kt9KtdWvdVrfV7XQ73V6318k6WXfQHXRH3VF30p10Z91Zd9FddFfdVXfX3XUP3UP31D11ik7RffTruq/up/vrAXqgfkMP0oP0YD1Yp+pUPVQP1cP0MD1cD9cj9Ag9So/So/VoPVaP1eP1eJ2m0/REPVFP0pP0ZD1ZT9VTdbpO1zP0DD1Tz9Sz9Ww9R8/Rc/VcPV/P1xk6Qy/UC3WmztSL9WKdpZfoJXqZXqZX6BV6lV6l1+g1ep1epzfoDTpLb9ab9Va9VW/X2/VOvVPv1rv1Xr1X79f7dbbO1gf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9Al9Sp/SZ/QZfVaf1ef1eX1BX9AX9UV9WV++ctkXyEAGOtBBriBXEBPEBLFBbBAXxAV5g7xBJIgE8UF8kC+4OcgfFAgKBoWChKBwUCQwAQY2oCAMigbFgmhwS1A8uDVIDEoEJYNSgQtKB0nBbUGZ4PagbHBHUC64Mygf3BVUCCoGlYLKwd1BleCeoGpwb1AtuC+oHtQIaga1gvuD2sEDQZ3gwaBu8FBQL3g4qB88EjQIHg0aBo8FjYLHg8bBE0GT4MmgadAsaB60CFr+rfW9P1vgadfT9DIpprfpY143fU0/098MMAPNG2aQedMMNm+ZVDPEDDVvm2HmHTPcvGtGmJFmlHnPjDZjzFgzzow3E0yaed9MNB+YSeZDM9lMMVPNNJNuppsZ5iMz08wys83HZo75xMw188x8s8BkmE/NQrPIZJrPzGLzuckyS8xSs8wsNyvMSrPKrDZrzFqzzqw3G8xGs8lsNlvMVrPNbDc7zE6zy+w2e8xes8/sN1+YbPOlOWD+YaT4yhwyX5vD5htzxHxrjprvzDHzvTlufjAnzElzypw2Z8yP5qw5Z86bn8wF87O5aC6Zy8Zfubi/8vGOGjXmwlwYgzEYi7EYh3GYF/NiBCMYj/GYD/NhfsyPBbEgJmACFsEieAUhYVEsilGMYnEsjomYiCWxJDp0mIRJWAbLYFksi+WwHJbH8lgBK2AlrIR34914D96D9+K9eB/ehzWwBtbCWlgba2MdrIN1sS7Ww3pYH+tjA2yADbEhNsJG2BgbYxNsgk2xKTbH5tgSW2IrbIWtsTW2xbbYDtthe2yPyZiMHbADdsSO2Ak7YWfsjF2wC3bFrtgdu2MP7IE9sSemYAr2wT7YF/tif+yPA3EgDsJBOBgHYyqm4lAcisNwGA7H4TgCR+IofA9H4xgci+NwPE7ANEzDiTgRJ+EknIyTcSpOxXRMxxk4A2fiTJyNs3EOzsG5OBfn43zMwAxciAsxEzNxMS7GLMzCpbgUl+NyXIkrcTWuxrW4FtfjetyIG3EzbsatuBW343bciTtxN+7GvbgX9+N+zMZsPIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfwFJ7CM3gGz+JZPI/n8QL+jBfxEl5GjzE2j42119k4e73Na2+w/zkuaAvZBFvYFrHG5rcF/ilGa22iLWFL2lLW2dI2yd72p7iCrWgr2cr2blvF3mOr/imubR+wdeyDtq59yNay9/9TXM8+bOvbJ2wD+6RtaJvZRraFbWyfsE3sk7apbWab2xa2nX3WtrfP2WT7vO1gX/hTvNAusqvtGrvWrrN77T573v5kj9rv7AX7s+1pe9mB9g07yL5pB9u3bKod8qd4lH3PjrZj7Fg7zo63E+wo+/vF1a/xVDvNptvpdob9yM60s/4UZ9hP7RybaefaeXa+XfBLfGVNmfYzu9h+brPsErvULrPL7Qq70q76j7UusxvsRrvJ7rZ77Fa7zW63O+xOu+uX+Mo+9tsvbLb90h6x39qD9it7yB6zh+03v8RX9nfMfm+P2x/sCXvSnrKn7Rn7oz1rz/2y/yt7P20v2cvWW0FAkhRpCigX5aYYykOxdB3F0fWUl26gCN1I8XQT5aObKT8VoIJUiBKoMBUhEwiyRBRSUSpGUbqFitOtlEglqCSVIkelKYluozJ0O5WlO6gc3Unl6S6qQBWpElWmu6kK3UNV6V6qRvdRdapBNakW3U+16QGqQw9SXXqI6tHDVJ8eoQb0KDWkx6gRPU6N6QlqQk9SU2pGzakFtaSnqBU9Ta2pDbWlZ6gdPUvt6TlKpuepA71AHelF6kQvUWd6mbrQK9SVulF3epV60GvUk3pRCvWmPvQ69aV+1J8G0EB6gwbRmzSY3qJUGkJD6W0aRu/QcHqXRtBIGkXv0WgaQ2NpHI2nCZRG79NE+oAm0Yc0mabQVJpG6TSdZtBHNJNm0Wz6mObQJzSX5tF8WkAZ9CktpEWUSZ/RYvqcsmgJLaVltJxW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nXbQTtpFu2kP7aV9tJ++oGz6kg7QP+ggfUWH6Gs6TN/QEfqWjtJ3dIy+p+P0A52gk3SKTtMZ+pHO0jk6Tz/RBfqZLtIlukyeRAihDFWowyDMFeYOY8I8YWx4XRgXXh/mDW8II+GNYXx4U5gvvDnMHxYIC4aFwoSwcFgkNCGGNqQwDIuGxcJoeEtYPLw1TAxLhCXDUqELS4dJ4W1hmfD2sGx4R1guvDMsH94VVggrhk88VDm8O6wS3hNWDe8Nq4X3hdXDGmHNsFZ4f1g7fCCsEz4Y1g0fCsuGD4f1w0fCBuGjYcPwsbBR+HjYOHwibBI+GTYNm4XNwxZhy/CpsFX4dNg6bBO2DZ8J24XPhu3D58Lk8PmwQ/jCXx5PCXuHfcLXw9dD7x9U86MLohnRT6MLo4uimdHPooujn0ezokuiS6PLosujK6Iro6uiq6Nromuj66LroxuiG6Obot7Xyi0cOOmU0y5wuVxuF+PyuFh3nYtz17u87gYXcTe6eHeTy+dudvldAVfQFXIJrrAr4oxDZx250BV1xVzU3eKKu1tdoivhSrpSzrnSLsm1cC1dS9fKPe1auzaurXvGPeOedc+659xz7nnXwb3gOroXXSf3kuvsXnYvu1dcV9fNdXevuh7uNdfT9XIpLsX1cX1cX9fX9Xf93UA30A1yg9xgN9ilulQ31A11w9wwN9wNdyPcCDfKjXKj3Wg31o114914l+bS3EQ30U1yk9xkN9lNdVNdukt3M9wMN9PNdLPdbDcncY6b6+a6+W6+y3AZbqFb6DJdplvsFrssl+WWuqVuuVvuVrqVbrVb7da6tW69W+82uo1us9vstrqtbrvb7na6nW632+32ur1uv9vvsl22O+AOuIPuoDvkvnaH3TfuiPvWHXXfuWPue3fc/eBOuJPulDvtzrgf3Vl3zp13P7kL7md30V1yl513aZH3IxMjH0QmRT6MTI5MiUyNTIukR6ZHZkQ+isyMzIrMjnwcmRP5JDI3Mi8yP7IgkhH5NLIwsiiSGfkssjjyeSQrsiSyNLIssjyyIuJ94a2hL+qL+ai/xRf3t/pEX8KX9KW886V9kr/Nl/G3+7L+Dl/O3+nL+7t8BV/RV/JP+qa+mW/uW/iW/infyj/tW/s2vq1/xrfzz/r2/jmf7J/3HfwLvqN/0XfyL/nO/mXfxb/iu/puvrt/1ffwr/mevpdP8b19H/+67+v7+f5+gB/o3/CD/Jt+sH/Lp/ohfqh/2w/z7/jh/l0/wo/0o/x7frQf48f6cX68n+DT/Pt+ov/AT/If+sl+ip/qp/l0P93P8B/5mX6Wn+0/9nP8J36un+fn+wU+w3/qF/pFPtN/5hf7z32WX+KX+mV+uV/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrvf4Xf6XX633+P3+n1+v//CZ/sv/QH/D3/Qf+UP+a/9Yf+NP+K/9Uf9d/6Y/94f9z/4E/6kP+VP+zP+R3/Wn/Pn/U/+gv/ZX/SX/GX+nTXGGGOMsf+SlL843vtf/J/8bVzRRwhx/bZCh/94XAkh1uf/dd5PJrSLCCGe79Xlsd9H9eopKb+fN0uJoNg8IUTkan4ucTVeItqKZ0WyaCPKiN+fsPxRP9ntAv1F/eidQsT+ISdGXI2v1r/9X+6/nxwz5y/rzxMisdjVnDziany1ftn/Tf0Crf6ifp6v0oRo/YecOHE1vlo/STwtXhDJ//SVjDHGGGOMMcbYr/rJSp3+6v72yv15gr6ak1tcjf94f84YY4wxxhhjjLH/nl7q1v25p5KT23TiyX/HyS5uE0+uzeQa/2BijDHGGGOM/e2uXvRf65UwxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGM51/+PPyd2rffIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXWv/KwAA//9fYSkr") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000076c0)=0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000007700)='./file0\x00', &(0x7f0000007740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000077c0)=0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007800)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000007900)=0xe8) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="2f18f97a5143098bc974c475f5c4bb2777f4d142856aa87ea653ead6e856d40f02d70377fe40e1"], 0x6b) (async, rerun: 64) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000007940)=0x0) (rerun: 64) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000007980)={0x10000, 0x2, {}, {0xee00}, 0x9, 0x6379}) (async) getresgid(&(0x7f00000079c0)=0x0, &(0x7f0000007a00), &(0x7f0000007a40)) (async) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007a80)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000007b80)=0xe8) (async, rerun: 32) r11 = socket(0xa, 0x2, 0x0) (rerun: 32) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r12) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000008ec0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008f00)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000009000)=0xe8) (async) getgroups(0x5, &(0x7f0000009040)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee01]) (async) r16 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009080), 0x141200, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000090c0)={0xffffffffffffffff}) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000009100)=0x0) (async, rerun: 32) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000009140)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000009240)=0xe8) (async, rerun: 32) read$FUSE(0xffffffffffffffff, &(0x7f0000009280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r21 = getegid() (async) r22 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r22, 0x2007ffb) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b640)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000200)="830c2958f3642ae05128a50e", 0xc}, {&(0x7f0000000240)="82e7f0bff424e6d9235b5ce3f1bd120adb988ee44eb91e98cfdc38189a68ee03642e82d36f48cb0ac10d376f90a002f288630b2163e4d952cfffd8261f6f64e0962536d53ff316633294700b7d8d80ce5a994ad381507890f16ea46d7703790bd8de7e0c2dabcc90c1a58167d6a86df0fe3806f1876eeac176e3a80c47d0e04b92a29eb3ae63d709b57a0668b875ef39edf3e0fae90453636ba253c8662c89c2e2853c7f1f6fed2a4c272d87685497bbebd900dad240884ac353eec4fd2baba59034a0f1b0ac334b02a0f8aabd93e3646100449451cc859bb27a6a10a747ace890fd9f2aa9dcde7ef261b8c852b8832ec0ce3449325677e244541453786d57128beee551419022171629420564988ed2948229ccc757a7899686a7c96c161e05d78334f0d22a42d6717b7a017e054e03c8252e0c825af66cb86f18f55c08372e5f4eca1bf4b6d65e838a0ec2ad13c6225d8eaab0540c8f0eaaff81e8e467d580619e226c6917700e34dd90c5e4a7881670a824b915007639fa1d46c07a61b813c48be98d5edf06b5e2993c6c9fbed75f36cea671692d4c1bc1f05f651b749c4d87c3c1b16796c49f0a313634adaec664dad037551e1449b3b438a5e31e550f4fe3ec4c7cb97751dcaf98b1b6dc7f3ee266aa2a9b3172024f3d07c66e2ac7a81fd320905dd2a4f41b54b1a6d797c49f66cc4e239e9a77dbaa8ebb9dc2194d8e2ab4d0c1a1666277f9dc1b0ccc67e064bab2faef35ac14de72d9a627e3c0746834e389128500cc86e6e28e086fc91d240e457c5696956998b8b69e005f3bf0f248ea477be481058060923dd39b3b975744b26b77220f59e0b7afab2f1c0cad5e490a4e4d9ed43ae5b36906e372a5f671b019f083702588b03fea6cf52b2dd2abec45f37c9301e10b3846318cd7617c534076cfac4c723831d6b4bbbf5cdc049f6e856ca4e5647f917faf31fbddf29b43f7e6d2964201e027b60eae9eae3827ba9e4359dc6401eba40a58369f7c8b8c450d88e9ded4eba439c7c058a5f987bdcad184055ed9fe087bb7ca436f7fe319019513b41a7a6225075fbea8790d04208681ec08ce430e87a128d2bc420516b1097904b4ab93e2eeac3a4ccbdf09f71286f4ee53eca0e2e060e012d151e576a3d8ca34281e6351856738604c9eb0b77505b40ce5a6ff7373e78a196f675217bf1eb2161f91ad3af8e8c4b4a7914b0893a9e33298bcb9b33170f7e1f2b193b49a7ff3cb331a15f57cc47c3911cf5089c4fb49344ee0559b675e22bb656d74317bd5731273ffffeef84dc4a85e26e9df99abb38e41eba1024996b560c27d6d70a326fcfc2f1df8f2f48e3b7f3119df45c71ca495083eff5972ee5b949f738355c03d2a476712f26577249e289ff71add449f0a9871773cb3f1591c61fdc545b85e1d019f2b76c7074b243ca829a88af380678958d465821127c41290f4dd27bbca856052235eec57583b5660779f615a2500ec665031650b34cb5cd3fe81bc8835f5ed9f19ef1d12e42f9de8d9407cad1fc3aceac585f00745a1bce90723367456dcd1032f8440774f1d7545b63280a0a5e9d383d7c1f80fb1f2c4dfc173f92c6c4d5cdd22cd69cd91a3499e08d671071dce637cddb91be17b63a60a4280986dadd341c58ae476be332015c0bcc4a96423c3c0bb8d5880046e58df017bf9628137de5d1f0664fafae300456090df8a1acfed314a49cdf133d8a7f74262a3bfd6b6783695187964870ab2d9c88acaa15501ad821dc4fb14d371af6acfb5765896318415da45bdea74e5c70ed7215aa24957cca26e4410db4798cbd36ea3069b2636784e5cef16676238ddd3c12fa2154e7569c9ba2e885fd7fb63948c00f42bed9f3389d644241d0945fc8cb578f7097953067af2fdf2ee268e9cf9e157582496aeb5d760043fe8150fa55f6463142857fbd8c8dad17292c81977ef3188bb4832a91fee872f6ba3e7bcec3e8fbfcb6b0cb2613cb0cac2af4a2e72b61befed4c15e0e7038c9b400aa048b3c4f3a9f2380e7261df266b8a57e9a6be3985270edc6883d6dae04d3a9279ec320d8693c601f52b1a10f5dcbf172c6adbe138122493259ac2b865655ec36ef854e00812b22d84d200ac84766e14cbe62c6d3f35fefc1c2b75bff61dc4e90c203557c8f69f56f242e41357c6e6c0330a9a28d1548fca466f54c9d18b3d03cfd5d44a0587834b6342db0d579aef70d95194717235b2f8d68ca0b131cc20edd7fc9a8c34831ad16f8daacbfa4d80d80e62615d897bbdaf679654a6a569c5fa3a4bcb44238ae24ca4fe380eabc587510fda213654418ad0f3dc5c2beb38bdc9eb046fd867d1e9166e3396863eb99477d7b219bf3c117b53a101a000559fe7d59479cb5a905b6c9a6cd98cd1c8118b485041049dcb17df678fea44640eaaac01a6071b03f0b7a8af82525659b2a1454a446bb111cffa8cf36e4387f833c3458da9d0b479ea0e842cb1f4fe3e961e803f3fd19f5f2289aa20da5714c53669ec2d47ecfbed2903de631fe0ec304d4f9ec85864ff37d3c159208ed09f0319bbc0e1a43450fbb8b0dfa99933a19f129f7d70db76cd17ada9475902db787125d0fe767b8b2b5cfb3dd608fa830fbe762ce0f45f86666a42abdcb102f4a28411b837f5bed671387fe31e06073439c2ebb6440c92051e39e82a2508831d4c94fdc22cea89edaee265f656d9455ca61659739895c54f98fbd85cfcd6b6a1bc6cca63d69dbdd33ecf38341af5a7a87b92fe488e0e633073acb1e97f024921b0ecd607faa157f5a06900e03f366268b21e35813d751a1ef74d8bacffda59a140de881e452c0731aa41d09a6598a6d08038c2f5728fbb1b87d069d85b990c98f78ad9d7292188f395920815c1b8923b363b31c1c1d6d30525811538df47e7f6bacd7e88e217b58a7286ca9ac34e4ba8e195dfd9d2ed4c7f16880ddc4404445bec06057163eb682f56d52960d6cb2c0288fde793e4ca5da8f96a92fa39f2346f4306db3a16ec1494de2f60e201cef3e707f94af8796b0059ff428d0eae64765bfd0a4e28b914e2675024c06b76894b5e2aa42fec32063c1e5e201818ef2c65e60ed7e27a616f915fdbcc7ff32d6c63606db7ba4b3ce5001e31c84af5e4828cfb4e20fcc342c8592e75973793352400822f5cb25e59097c792bf4aa8ab03213be939e57f34a29798af65f1e75c26d0eef277e981c951cdf21f0e7534cee069946d1d5d7aaca07098775172bd573c773996abf9c651f79628d9061a9e87c51a2d6a045e5ddc268ddee091638bde761993d4f6d6ec3d22683669c4180568d3292d3a1145925677cbd00f801979108f5f8439a832585b1a2bd088e795fd380b02340c8be66d4c02cb65995236e715e59d321a0905579026e5114ccb2f0b9038f9f93ea21b50bd91da05055b8f26cb8479818fa10aacb99948aaf7efdcd08c57864c4d050742e63ae92687a5a5eee21e9b075a48403c36fc0f6f8ca1e775ba5306006e47e70f241fabc7157b0ac68fcebb7c5be3ad641d0d5cd78675dc15c9cb8414d162d1edf48e3f62a5c91eb0164f68fbad4ed11f08910781186cebb1a4b780fca5cf2e26eba52f01ef0281b6d4295ae15d9cf1e65b92e387d342700abd8bce9238541c79606766e03f69041e91fdfb955f5d6c62352dd86d53b95c238984103d91cd88bb3f0da582da76ddbe5ef3402120b630accb5229744d061d9f22b158eefce735a4ea73995539a978e218c12ec5a7bf98027aa9432dcdaaa5b4eb8454f8eee1e193791b8f9c39a964cb4084f388029cafb87f8269db6d963953670fca2851e00810db702c4e185a75da3d4f17becc1b7e359f8c0568bd30d5598e15558f47b7fbe19af8355d5272a00792a981768002f77ea5e4154bbb3e5be5acd7247b4d00d629055b33c1d9c28c937e5e7176cf1461951e58401554b74a9db2ec9dc9e91b768735f1b6f53de05c2e987afd87c82173d1e54ba7122e63b1efff0ce90fd36d592602e125cad156bbb36d0d83f187f389f20a083f09af8a01bf21b339e4cf34dca114dcc687c355a0a84a5a6312b58b4f521d0cffb4814fabac9eb897bd4e8e30ed4d3bfaa0d5cfc374cba9faef9ae6ad97ac709c726b4437f0b722fe98d9f61d7438f88823bf2126843b051839ffb5ce2eb5d151e95051aeddae79b22d99582ef6204b62695b770f59e2c693f3d08448633b0750a535ae47bde54f73243ab278ba486af19ebae417eb3f1b576f985d0f9c1880098218718e40309c92c0189b53a5107fe92a974a65176a2658b42c57bd8fc24df62bb1b6a318eb04aabe7bc66747dff78ec7cb0aa63cbc5de3e8122957ad7345613397256616719e7b6bdfbf2097e19102cc9d293a41aeba7944f370d166235fb8bc40bd6c758ee122655469e17e70397ad4c2be4a17fe8abed723a053d5321c5ddee4bf17556fdb5718d1d3b23af73c1eeec713068fc5f9a9e54a30649c7030b3cde355ca80f09a3c3343a7601e0f1360dbdb6f62c9fea2c85df6366852a21165dbed1b54a0084b32b9f778610d2c6b543c603e100dc0eeaae2e3d9f4ea4849cfbf7f7916320b3ba580eb162922d6d46c8a4eae90508f14051ad3d2b4f3639b88bf3960a9036f8404364179e078b7981c432b8d4cded52424a55cb843d3377a4b56c0c09ddc27344eaa942478890fee9c0e862790d05802b376d9fa0c06d3d5603bf89054244201dd3ba01e1af2a5b892c3b6472cf8b003050b7ec72dd67c06ecce0ae91ee718d325c645c9a9d6c16721928edd40ead3f067e179c5feffd6c05ecf9c0d5bfcf49c5497f2aa2799d6f9119bcf40edafc05d631f3a55b5a786ae5e3d4278f3058caef97d52a356777d960b85249f09278e848bc426cda96a263e1d0065dd2e848d28879782c2e77d2f689929318db39f0a7b6df84546da8e0a2c1fe57c1bdabec6689be97124b7421642ea957f42edd1dc062b407798add5937346c7ce86af57837dbcef10e156fdfbebbf47e06fe4d40887bdf3fc1f98a65a19817ca4da5aeb489751cdfd8bbe742e99e3a6ddc01a8092bb382f3edc87a3905083c1bcdde5761fcb26fe2952b45461c5742b20108b933f99717588afba2372bf3abb4544976d9552d31da6c27c3e46552174186ff0790d7187521e03596c24b792d34921e62bff8ebee3a7e10ddef7559819ca323a085ae88476c14a579adf483ca8b125575f3e4bc932de6aeda738996aeb668cbaa1b005f3ecfe241989d736524c3281148818a0e9e02e184c29a39102dfceaff52d1f4bffbb37d6a829897d477dd848d3237a51944fdbf781c1ba290ad6f882ab90a8604de619e5b12772da00ddfb49d3ee7c08397ee7e7a6ace9044f123731509e0a4bdba3157943f90f51c7ac53350ffd2f4b41b57c6d1cc501be45e1aab4d82bc9e37a45a7f265f6bdee59532fe40225bc484c1335680f5e77fcdac2705d3e648a24e60ad0ee4617effa84bd8bc913eb1743dfc2ef691861cb8ef2563882137c91b9f82fd5eaa5a3a891bbe244b64c27bd5c2c2b76968c594ab0c6190aea023e3ea2f588eda3f7d1b4579190ba2e568c1a28142484dc3cfd53720be2ffee2e076233473809fc3159ae156765c47563d374e5dc49b697fadae0f8c8d129837bf888809263a62d0822ea02609edd2aacf9b973e3e2655f607f129b1916beb5e8a380dd60de95819f087018565d5ffb88384fa1eda089705d2ecd7e6f356cf4715272f7cc604c9141dcdaf614b4ff55b5edb691d35e75fce66361987af93a06d41a788d3386fc46e", 0x1000}], 0x2, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x8080}}, {{&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001800)="2f772913b1f4720b52c8db04708e7b8217bdcc685bee9fac50d1fd610e77e4124641bce7d41abf8f76831f9f60881c47644cfab1c345ac7afac7d8a2d6339f6f32dec8cdb8fb77694bf358759a4b9fd970e10914ac7bb1cd278e6585dea8229de53f098c4754fc6ae41fa00936a5fc8c380f2e01b29f607f10", 0x79}], 0x1, &(0x7f0000001980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}], 0x40, 0x80}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)="8d4ee5b6cb474bb1668ceb28e22e0380457b9013a4ff3265d6cf4e5fdd87b673503cbb5bbf7df401dfca728ea1f1e8b734406cbfd421519289fbf0d638ac88813a3981043813f2260b4cad22c8254c36d2566db93f867a5679735afa58b892d31314e61ea4d5344e1912489468dcbb982ff04694c10e37a742b5c63caa8483def4bbb7b66c7040a31f23c2dbde71524ee721285e274a9ba8547d4654ff4994a70f71f9a1e7e9a4dc5eeeba1a05bfe18cb7b800d6313d025bfecb64f1111eb588ef74aeed481e7109cc200e04b9e8148da0ecedb6692871", 0xd7}], 0x1}}, {{&(0x7f0000001b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="7dfa9bec5e99702d5154883074b783ee59a886dc1c4b7b3a547b1938ba43304cc7efda3e155f8d543037e147b19caf3e15bd36e89a635471d8c71b9c403e79946ac8058b3fa6", 0x46}, {&(0x7f0000002c00)="40a6aa634a9ba5eb9febb3d3c0dbc4ddaceefd2ee22c516c8876655642a04edb2d7666f6a6db3aab8c9c921c9a3f30cfea57a1dbf8d49fc3c25bea43c6ff4576c8e6205b1abedb8a29c3991856920db666e9f8600bccb15ba1991d8b43cc03acd2aa8e5bf4cb4291b1871287bb6e403a2de111d1193565d54b54559543fc9497351a92f266a4ca964f777e6cc52b5947b7e13175e6768fcb666a267b2e825b290d009910cb6d3be39c6897f5ab337a8bb36234bc82d2d376918cee765e879dc13e8c78642b8661055b", 0xc9}, {&(0x7f0000002d00)="3d4443cba87acdea55aba61427648d01c68c0cb049d9f8c830d8a24590a11c544b78bae82a5663ad42feeb407403a70f2a04739380199f322c8336e2636b22441fbb27169b9b71bf67008c3630dc6e5d84eda75693f1e20e0835f5db3ec50d6e9ce8123f3ba8269bfdc5c6d60349d5eadc5893caa449bad2d202cacd0f3e9c5720f7c29ffff1948aa779d9bfcc675a371a38efc9c641175fc0de1c74f69bd0ba580008be62ed40277b04fb9f4ad7", 0xae}, {&(0x7f0000002dc0)="c052842eda778deebe78e6e063b3d0bdb84574104875b952c5c4c606418f17f0dd09b7c58ed8ea5980a9fab6217b1667e300b62c173f5a0fe0b1133d1a0ed7aa0a0e578b5aa3b3e58bc763963c1eecac5a8b75169fe8f45d365af5e1ed6053115192f506755ea6b2f4", 0x69}, {&(0x7f0000002e40)="bf22ce65b55e1d7e7e70d5044d4872da352575e0cd9d91f2cdbc8a80e5588a7f69ca20bd53d958e0d9c97eca7200307e4fc9bbb54d0c7c9fcc102942565a34bd0cf9bad9bf412370ccab253e54fce5b67cda6dfbf0184a208359c34b3bda830cece3393e4d305ae5408af94b676d93d39b7e421bcec00346a955de254c6579ab803b1b13df159cb7c370f98b124aa4ea5bf2125aa7dc3635c9e3e703b5af873bdcf3758499903ddccfb66f628d813a42cba679d0022e0e5b30a48f772d50ee8a9f59e5a9fe9470a0bdeee4b60adc4b94d3acbfe36b90d360bb7233265172629a4fa2", 0xe2}, {&(0x7f0000002f40)="453b389d2bbde94a6112b7ebd162e941f2c08fa9924e9927cda96d5f5a257f6a984ad637eb441c41bf8901083b5151c0df6b1d188e3b424030e5db722bd0a85b5851f4278a3e5c535cea176ddf28a85b1418e4593ef5052c785bbe51fe0700f919b4f76cb665d4e96b81994b0dbf46e66f8bfc6894dcfde0998c86d2d025e6b5d843a183319cc1377c4f87b4fc0e3eb2e0b1748573b67c824ad1fff5df9efe43e55c9eb769bddfb283955519dec008ba35a98d99d1782f81ee8869f8c98ffb6de618de5b64e1acc98cb3d111c6cfcd1864348697a289722d5b9178df22c77192a22e00efbb4b0951ed1d55", 0xeb}], 0x7, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000030c0)}, {&(0x7f0000003100)="658d05c0ec29f2c0a1e3ed3822f1bc3975940b89996f7316b02a1a7b623141756bbc8f1a2fb602080462e4145eeed4ebfc764a0289215dd8ae2244c5c63c75ab7d1fa23452760c835c739d1cf4536d00ea4ad6dbb7b3e4ab97db6fca23b7f226355a8b8333d02bb7cc4e9b2c5f2159491ea50f5993ee202a55136859f7804e41bc1a7375a403ee096c3d9929465374c2ac48b1f28447cb105d0eb18219c1fbb851d4ba61170ac18a3d043e287db2c921c9b194eb0abf8428aee0ac1339e740a24ed4b77f49dda57639bf10cc2b66a4054366c58014b7079c381eaf1c874d99a0b54b051cfe73", 0xe6}, {&(0x7f0000003200)="90eef0e0c12e2cf7223e953295e8d855", 0x10}, {&(0x7f0000003240)="6fca989d9100ea5334347e1d21b2a8c10c77692dd978e8ad9d225ebba488e6a3e7aa2c992dea19a51ad64c42cc208da7fd9c740d1ce58c92493e1133ac94da11644c787444e2204997f9c21bc792d94fa211d049583c030dc425d7c7f59099ef8f56eebda2b490c120f2eb81d654c4ba2b366edef89744cd75f460d54a1be7c2f9098eb9a344257af1ddc457169a2faa198181577c0d6b34", 0x98}, {&(0x7f0000003300)="0697a880d9592c2ee6ed7df10d4bd53bf29a9b6b05de03d969977a7d157630ee", 0x20}, {&(0x7f0000003340)="096aa1d8711b1fd1b18d05bfb6f1df14b5957fba808cb00e1b9defd5d90e0a15bcf166b8ed77d6684d7a5957588bcdd5dfe7", 0x32}], 0x6, &(0x7f0000004040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118, 0x2000c040}}, {{&(0x7f0000004180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005540)=[{&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="75cbdc6483", 0x5}, {&(0x7f0000005240)="ea6abb1d67fb7e46efcf8a13931f13fcc2472ed625544b2097f206a15675023fee1648820666af6f8a7a13601feca352981abf183f7a", 0x36}, {&(0x7f0000005280)="9d97390cb98a4874c22e13ab0b5536bcf07aa5d7a5a5aaf178efa63b5ff0b80ccdeb3c218e32cf7bf3edea250f7d003ce22895decee50be7f912f465eb121a31bdbfb206e7b26756aeead303467e81ce47c9f27c87c28871f3e6321bf832e855d78a2668dffba35ef1d82436f62fb2b771c01831564cd378b719541541a9f4499763d3f01234ef038f4e9a3169b88436bf59217366ef8ac6c46fc9e8eacf67a95a52", 0xa2}, {&(0x7f0000005340)="6d084ced89fa0522bd19d297a01160538bfdf1760d611cded0315878b2c1393c842ff775f8be7b5d168c6feed4029407827ff04296905473c991c98372d0f7e970117479", 0x44}, {&(0x7f00000053c0)="a1622523c61d5f3f6935e309f325c220414076278d3b31f852a40ee2061b749fc370be7d5b96fb5ea2cb1318c7d4befc160a4f375d45093f2515a46415315f1c671b1698c3c4fba53f60a9e6", 0x4c}, {&(0x7f0000005440)="738f8bcdb50308feb4132044bc287aeb90080081a27008947d1842020ea6117fbed097a6c45ad845e7914134ac1d281d346b0e0496fbc2091c7ba50660cd0f51c9f8863b402c6c506f2a512ff2b1364e0807c1c2c083acad16700b84d14ef6ca9332815de8e79c143e9997a159abdb3f30ba50648df7d30394208d16c8dabd318fd8bec1ca78d12c8e66fafe1d039b6b12f5f84b66b4d4f0c760756d12ce2d7fb3c8add16da4768a7f256f6a277689157193cb2d895b0267acca9b78f8900a87d0a5caa9faacece26eefcd387d75986260e40deac9af5451a184a0fb87d2c8161730c8e68a5ac01a3aa0d9b57ed4e43bb97b5c", 0xf3}], 0x7, &(0x7f0000007bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r12}}}], 0xe0, 0x4000080}}, {{0x0, 0x0, &(0x7f0000008e80)=[{&(0x7f0000007cc0)="ac0831f52043f5f34b1550228da8329677f0cbb3113eb9ad731238d3874096b49277139d5e6c2b3a3d58660f3d24ee5b2587c8ca165c9988580e4c58284e2e4e757437a3891157774234b03f7275330ab357406f1e117355a8a3612d8db128441684c82720ec66f9672604091b569dda8196745d2d0fa5b22746bc5b60fd495430a6b7638456a947407216adbb0e3aff41ef4e77101388031071b281912427e5b520ed02327abe22837377774f2195907e47fbaf48a1343f4cc9ffe136eb17501c79c85d334df61f2866a97b0cb7c584194e97581f82b85877646d68accf752fce1df1ad9533666f095a5936439121c7eccc5a7c4a2754d7841b9e0c35f2ccad07f4ff37e5929944f529578c54271838e693a401ccde2f5cd958dfca6fb791a486faac1d38b7f0dc6087fbb300480db3b798b2537c31fb70f8dd0545252f789a618347fe7e12e3d4e80b769367b702645ec9814362073aac2be9481d4c91e73e9739b5a9dc078c429f89afd3d714b3de078fbe18d89d917f1c5057034bb0de6c104809a1a2bb02ce7d573be9c19583934ae826d63f2b01e48c84c14caad43abf9cc0082e03ad4a0003a3862433be37b1f1c0c6aaa558d94c64caed53a81af996dfc1d67cedb9e0be712c539d6c93e92c9605ad73a5a3df9e6fb7f2977bdc443a3ada036057671d1f453feadcd30931945d6fa452acdffa8e57f76b1a7697257c692ce21c65ccadb4f74a2878901fe1da868c0af52533545cb4823c2b0e118a50f557203a5963b59c34ca98812a95e8b05a18f535c55539788e3c9ee0b77205a8aad75c66b581b0fd65004301f5a82f5930d3b3121b15c9d7f7c5f6703cb334af6c8fbfa28657fb85c17b0bd6c67e285f2e63ecc6e895b4ff54d75d37146dc845561b2d1c8503d7ced7826095283a0c04f3d91220fe3c435bddc9af6437efe4f807818bb0e796a243193cc434c1dedeed17dc2f263f7702f2a364d114d55b034e35b9e7e7970b52417268d408aa46f57b2d531f048c926b08052e87b39ab6e719d34e6832c94fea20108665aea5b6dc862988511473df6a2d91f8c17b00faefe7b54b71d7cc6a027e01cf6fba3c0c27a3c364dc2abe990cf97df72b5f64a870fe544ee93d421c537cc35efd48e3d396a39e8db040bd12bc2c01a13344519fc4b6cd4cc58a692cc542d3e873e271d839f2750554a68e09583418030d79f3c155374d2f0b99a5b459be014f514a9755eb1b4311908b80b6b3d4dea1467b8e5823af5adb80257dd8721486508b5e7f21217fdd086eaa4e8074d0abdcc886c5a1d46d873bd79133e1112b67535c171b3a5442c189c4edb82142ce2c615a10c6a91c7627cc850c2eccbaa17b5338a828883a0adef4d2c084288a6f91ca6c20b989b206c337f5c1bf8f61e85f401748481d4a3201fa24a85dca3376a4d2d21082e076784632b754c1bde06dd1181cf43a38abe0a77bf6172fa6b76749ef2217d535a207649ae1c9e39e577d26d19498f34dd5060402c28fe122bac234b6f67825270ed07ea2ed07a7da32016beb7e064e82342226719f726a63ba1c3a3f03ea7a9754a21e5721b9723bbe507e417c9d98d49cdcc3572530ccf9110e403d7b5f5b22a5e172644beaee3553e89f7622701076087ec74f11467ab7510151253142d085cacb573a6f242bfe7dd9d1efddbd2ef4fa05413a4df3a6fcb909f05dc499cb50eac0d1802c4b44b4a7044a3837218eee084bd913926ea1e2cb0f79d88b4c16f1ce90250c1057c35bf762f2f15f955ac58da6dfd657f3fe02ea3fb20fa44f382d1652b38dab0c3e000e4db3680794ee61cd8d547658f7ccc3b083d2a22cf1503d87e19a8f628d2282e82acf1df8cd5ecab0cf5a849f6e5c4fa75dabae842e4edb66a8546d348cdfcb43cb4999649c2f01ae3758cfb661e71208c3f92c677f013d69e96d98486cdd6ce2bbeba9f93ff6a23a1807fa81df527f353c47aaa1e04508d3f02bad95684c1f75d56d3e855e33f1c6436f22a409fcaa615489d3bb7310d52dd5cb8dda7a723ff924e9c508a21b09773fd0ace0fe2e843296ddde68d07f842c48354cd3f3a700bbba5842a75ceeb66b2ed2620cad02f88885a690b3c579b29d62265a38104614f7525f04360a6e3771ac9994b75ed7372ca33eba7724372f3314e1b7678bd50f2e51930e26c08a8c70d8dc787b642e81cf3aaf0e79cd3e0bd8f459da8286c386652cd70a4b557a8a4865d66d4fe7b6adf179f53c3eb15710d0730650455efdbd38069dc3f7cd4c990d68a2791592561342e79d1ca9e77ca579f46a0f24781fc77fd9dc1521a1b7ad1e106563af781394d42baa0ec1cf7498a99fb2e9c3657eaafc5b0ddb42942d1a0ed7f2ed3d768b07e2a98b63b7ab8641c144e55d2a4be32fabcd4007da09f645f753466aff44de2c5c3363ecaf82396fac9596f2655339ecd4b0d8597b00a51b61ef9f5a7ca0ecb90ffcf7d3a2037e9398de921e4cfbe355e028fcc800c43c813065b237a1b3c798154978904706903803c8e608b9e35d5511fd931c78a6193134744f2faa0e878e181fae57a8f110744d425908c4c018d5861972e62f08bc4656b208ec4823698f95df0462576147481b6e72e6c41242ae0fe36b54d19877e4b7b04a5e434461e7fdea1542122ffa62ebc0f64e8653936460f650a4b098494a32ce6ac306f13ccf4b527b080771df3f8eb99fc8f0d1fafbbfa348a2dc1f992568042352571fb52508a80a910a916f94c2634426791c42ced22c43f000e6ac35791a149cbe115decf2a5f9a786db475f2f64eb8fd6ddb1c0e848dd5d2ba6257488b48f18d2b8d26f291b5a793ac109780c8c9d34c3c9c0618e7c3a7d32d5f444d70701362749a644aa6afcb73c11996957fbf38db213f3c1bcfe0e803362100778d474c607e7678febeedbfcedf72b45796ac02222520f4249716256b396a87ca21fa465b5c6b8a15b2ca926aca9ba5aa97c0c41fc8f3860e1f5e43b6dc699b8f4b50329459c4a6f524e9ee37908c8aaf99868b1e91954903890f93c039cbc6a3ac73971b2b4d5629f0f04c972eea3213e8ba9ec49c977a1fb225cc65e81fc27a56526efafa77feb75b4df8754332f6a996e5469b054dded2ca56b015e562a7cfd65dd59b8d02f85b66f48edd77c8b2629e3293914ddd8ddc6ceba1a493e88657094c79b07e97285eb92579e2da03fce133a9e537e5163cfcb36f79d0d67db1850fe79daaa4ed0a30b19e0f128b917b689bd642b820a785212ea72d6c1335691bd9d65f3d2903f50f520ebbe036dd2bd9c0fc6da1940d33b40c34757fc93138c3519c43dc30e0b1e3e41450459322a405a343df160981b99c957f5aaeae92aebbf5cb4adf4c4284da95a852b42fdff9d80dabebc0ca2f15b6ce56b1689923afd1e48c713c070a76dafe7e7a12e141109ac93d0fd31ca8a5b7b12f634d12e35f9d34778f210b3590c800085b428a5ca1896174cea02f2558ecfe009b11fcb18e71be3cc98ae123cdad841e87e3059b8163df3b463ad4b35907b0714f98521c6bdf494a6302a50ad232f41d7c18c287d171f105cb86d01e53129343533bdc7c5a7d3378df57333766b77d5c8012e7dfc9e7b9425f3f7ed1ca2cf4e0ae0d7d5ee90d09d59233cdff76bf70b92f9b1089285f6a92d3cd084502898d27e166428e15a722c289992ecb0fc569b3c8218060c1f18d24d88068370999b79bf77da4e7701475b6a643b07ddc503c50f32bb845281e6b3e967c1e885e54bb8dbb98e53047771f5a1c5a37332dc4a47e1590eb4d8b467df6bea65cfb3f1de113d9b38d690b32950f986c3ea6be5872438a3dd8c88df76e088748248143a01643cf27ac25ebecd994191864c61a8dd6dc482bae876117f8395b5b102a2756ad17eec1aedc3f3dd7764661782aed4a080d086e8284205499e81f0faa2f2a9458c0836428850227c45ff0c60eced5ae509bb8a67ed315e1627a03e4a5021a211e2d6275759faf90459eddec32772d312173be15d62fc1874fad76e0114bdbd3ab126dc373a6e0219be443526420a3bbbf070abb6a3f7f5951080a6eaf6bb7b334e384aeaf31e5c1e92adf8d6d6277cb37b6ae831f20401bfac86ec6fb459efb0769cd0651116101f4ca6bbf701387b053676de276111a18738d0bb0677af72a0919edeec21410dce2c1c2ef871eef232231697ce6217eae867425a1fde83353c7cce228c0877483b2b8e7d38aa96bd9587907eef795fdf998b554d3478a8cd8e48834d15f5e5955a47975526596f525c5273ac002cf67087ae749531a1dd29e796b4a2b41d22164cc19092a453af72a9ca4131dc0ca0e63ac82f01feb67abc3beebbdb557fd44d41e2bf4e50862bf9e4fa610780106f38ecb8bc9a2af9b8eeda2610c1022320f1ad1b2b02bfae37edff1273b304b5518d127676b1360b74336ff0242d727c4bca2d2206f3da61613350fb4f67c8e6929af04485a5e6f379f6cabd5c41bd2083d59f19cfc2cc671f50fb436f4dd9f7960cba4d89773f4729d04d844dda0708bc83ceafd162a8b674050edd14b6e4f94159df1bb423b2690b896bf29bf1e546645e4553cb7d61fda487fb4cae8aa7df8a5dfb25924f65be8fe17570411fd1f4f1d0d43b50f8c16754f2156fa19102eda94c74c531fc25da4a4e649aeeab8390df20c18034377f9c87644e1f39922f3cfd99f6d53612dbb88eb1d7e5bdbbf33acb6e807b5ab64e5f5e5729ff7176c3cc9154d1d6987051f3fb96cb62e67bf443044daf511ed41cd8ce586eabadf8ea45286a8f2f0b25a4b1587d7a0849b53b55d8ced31282d69e2465593d2b7a8b1ba4da61f1ce605044fb0372162722a7c1c2df96f3de2249cc58c68b0d069fb9a4b939f7d07687d0d68a245a02221fa68748fab0caff82afba4983e4c1be30047efffe51944e56bc596331a7544728feaa035560ec8d148bf9d9e5be04d5dacde3e947230bcc403b31baec55fd971c139bbdefa9aaa2e089519d399518ec4f6880e2957808a4f6576f70daf584b44e8eb344fb787991f42a6e13cc7d727a31bc0e9a7bc88703da531603d2c4e11d42c69aa68538c485536ebd717523386864ac35531965f9d5c88f2ef72deca0ad4d866ba861eb9b682bbfcac14558e83e0fe6a8ebb38bfc23e64f76fa02b5ee234d61160c5b752b1fc1af7853240147bb3925c2dc3c12960213818d19e0a048f806d00beff21c44b11cb1d76ff5e86c772ea3b831facc4eb0784c428447a0b11ec8a2dcc4abe613fb78467f0e77236d75d6245cd9d60d2741b0b9ba2e7df3d5e5eca380c9c92c749a42311dba9782a3a4aff0e43c9d46a47232fb7e72cfb07c601798ed66bfe63cda8e0ca2510be8986ce5f60b32c9aaf7331920d17a6e871a66c657713c666428da079e0de476e8d2986b3387f59ddb932db4a794799c376f0e6c160272f9c11b53803c50bb8acd108fa7eaa52404805e56d5b92d4c53eb947a8736a02623eea04ace8af683ea425c423e507415f5d6b1cd655199140faaf3d6ea9277870b740b305b66ecfe5e51d528b67c9e13a5524b61329c670604fbe704772d608e4bbc8df1b962e0eb700aa0b96ec99c9c43c3f2dd226ea4d305c04b53f323e6bc7fa91d6d85952510ddb54b5e17b2e8052e3a151e201df8d78bf12cb62b127934a7a91fa9184fdd2087ba1e507007485b2bbbfad5eb862d212dada9c64b70b2c4d29025c7bbff5344fdddb71b1abc52265e8f5cc4ab6597c7ac0d0bb7136d3e06e294a979e3d36a555e2f454a6a4556708efbb37e", 0x1000}, {&(0x7f0000008cc0)="3e8b", 0x2}, {&(0x7f0000008d00)="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", 0xfa}, {&(0x7f0000008e00)="341531eeeb0f209c0395f5afb31b99c12f6edfea7b52d324fafc9ba33720502ab40125e2c9b7c030d2df1b6831040226a9f54a23af75713fc5e23c5fb2a0c5eefcd29e3b53457f9bc7", 0x49}], 0x4, &(0x7f000000b2c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r20, r21}}}, @rights={{0x1c, 0x1, 0x1, [r22, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xd0, 0x24000091}}, {{&(0x7f000000b3c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000b600)=[{&(0x7f000000b440)="de1516", 0x3}, {&(0x7f000000b480)="67473eeb30cd0ea9ee3a513389723f128e96f3698a12fc47510237bedceb8aa940cbb8cac6d1d9f6b292378630f6681127c9447c183890c425ca244381fa7cf19b0ffd7212281df94fb3be738a040c68ebefd133bc04a9ba1478c01fc9593c5e49978c8fc3760b44fdf0382a9a09ad260dad983f621e8fdc5b869b70ac8803dfb9fb5fa3ee02f3ec258100383fdb9b3fd482b5bf86d4d73628e0621e86ce5212ac16c02d282ac325d6bb05ebcd7a1898df64c773260bd97fec9d151f5e898f4f74cc80d4e19dd8dbdec9e8041a1f28281d79d1ec6e373b0858dc225f0eaf1f449da7", 0xe2}, {&(0x7f000000b580)="31d1a9ec2ef141fa03f257e9500d4186c43beced0d2ca77598d472d5eb8d5ef1161da42d45667a2a6b960883272236cc23f3da04783aa6d655176a1fd1407b32e5d87429794064a8ecab0209047f1180ad7f90b949273f", 0x57}], 0x3, 0x0, 0x0, 0x40000}}], 0x8, 0x4040404) 11:34:45 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r1, 0x9447100013401bf5}, {r0, 0x482}, {r2, 0x8130}, {r1, 0x80}, {r2, 0x100}], 0x5, &(0x7f0000000080)={r3, r4+10000000}, &(0x7f00000000c0)={[0x1]}, 0x8) sendfile(r1, r0, 0x0, 0x0) (async) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80780, 0x210, 0x1}, 0x18) [ 459.599370][T11180] binder_alloc: 11177: binder_alloc_buf, no vma 11:34:45 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:45 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 459.876420][T11190] wireguard0: entered promiscuous mode [ 459.883137][T11190] wireguard0: entered allmulticast mode 11:34:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20a30083, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES8, @ANYBLOB="24643030ff070000000000009805303030303056378b39ffc91a882c67aa763dc50d1e751f957abff7301941b5f003c00227d1282a0923b4dfd4eff05dd3caba6aced265d667b6d574ef264ce8ef000000000000000000", @ANYRESHEX, @ANYRES32, @ANYRES32], 0x1, 0x14e8, &(0x7f0000001980)="$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") (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000076c0)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000007700)='./file0\x00', &(0x7f0000007740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000077c0)=0x0) (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000007800)={{{@in=@private, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @initdev}}}, &(0x7f0000007900)=0xe8) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) (async) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32=r3, @ANYBLOB="2f18f97a5143098bc974c475f5c4bb2777f4d142856aa87ea653ead6e856d40f02d70377fe40e1"], 0x6b) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000007940)=0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000007980)={0x10000, 0x2, {}, {0xee00}, 0x9, 0x6379}) (async) getresgid(&(0x7f00000079c0)=0x0, &(0x7f0000007a00), &(0x7f0000007a40)) (async) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000007a80)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}}}, &(0x7f0000007b80)=0xe8) r11 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setfsgid(r12) (async) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000008ec0)=0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008f00)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000009000)=0xe8) getgroups(0x5, &(0x7f0000009040)=[0xffffffffffffffff, 0xee00, 0x0, 0xffffffffffffffff, 0xee01]) r16 = openat$dsp(0xffffffffffffff9c, &(0x7f0000009080), 0x141200, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000090c0)={0xffffffffffffffff}) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000009100)=0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000009140)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000009240)=0xe8) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000009280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r21 = getegid() (async) r22 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r22, 0x2007ffb) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b640)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000200)="830c2958f3642ae05128a50e", 0xc}, {&(0x7f0000000240)="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", 0x1000}], 0x2, &(0x7f00000016c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x8080}}, {{&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001800)="2f772913b1f4720b52c8db04708e7b8217bdcc685bee9fac50d1fd610e77e4124641bce7d41abf8f76831f9f60881c47644cfab1c345ac7afac7d8a2d6339f6f32dec8cdb8fb77694bf358759a4b9fd970e10914ac7bb1cd278e6585dea8229de53f098c4754fc6ae41fa00936a5fc8c380f2e01b29f607f10", 0x79}], 0x1, &(0x7f0000001980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}], 0x40, 0x80}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000019c0)="8d4ee5b6cb474bb1668ceb28e22e0380457b9013a4ff3265d6cf4e5fdd87b673503cbb5bbf7df401dfca728ea1f1e8b734406cbfd421519289fbf0d638ac88813a3981043813f2260b4cad22c8254c36d2566db93f867a5679735afa58b892d31314e61ea4d5344e1912489468dcbb982ff04694c10e37a742b5c63caa8483def4bbb7b66c7040a31f23c2dbde71524ee721285e274a9ba8547d4654ff4994a70f71f9a1e7e9a4dc5eeeba1a05bfe18cb7b800d6313d025bfecb64f1111eb588ef74aeed481e7109cc200e04b9e8148da0ecedb6692871", 0xd7}], 0x1}}, {{&(0x7f0000001b00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="7dfa9bec5e99702d5154883074b783ee59a886dc1c4b7b3a547b1938ba43304cc7efda3e155f8d543037e147b19caf3e15bd36e89a635471d8c71b9c403e79946ac8058b3fa6", 0x46}, {&(0x7f0000002c00)="40a6aa634a9ba5eb9febb3d3c0dbc4ddaceefd2ee22c516c8876655642a04edb2d7666f6a6db3aab8c9c921c9a3f30cfea57a1dbf8d49fc3c25bea43c6ff4576c8e6205b1abedb8a29c3991856920db666e9f8600bccb15ba1991d8b43cc03acd2aa8e5bf4cb4291b1871287bb6e403a2de111d1193565d54b54559543fc9497351a92f266a4ca964f777e6cc52b5947b7e13175e6768fcb666a267b2e825b290d009910cb6d3be39c6897f5ab337a8bb36234bc82d2d376918cee765e879dc13e8c78642b8661055b", 0xc9}, {&(0x7f0000002d00)="3d4443cba87acdea55aba61427648d01c68c0cb049d9f8c830d8a24590a11c544b78bae82a5663ad42feeb407403a70f2a04739380199f322c8336e2636b22441fbb27169b9b71bf67008c3630dc6e5d84eda75693f1e20e0835f5db3ec50d6e9ce8123f3ba8269bfdc5c6d60349d5eadc5893caa449bad2d202cacd0f3e9c5720f7c29ffff1948aa779d9bfcc675a371a38efc9c641175fc0de1c74f69bd0ba580008be62ed40277b04fb9f4ad7", 0xae}, {&(0x7f0000002dc0)="c052842eda778deebe78e6e063b3d0bdb84574104875b952c5c4c606418f17f0dd09b7c58ed8ea5980a9fab6217b1667e300b62c173f5a0fe0b1133d1a0ed7aa0a0e578b5aa3b3e58bc763963c1eecac5a8b75169fe8f45d365af5e1ed6053115192f506755ea6b2f4", 0x69}, {&(0x7f0000002e40)="bf22ce65b55e1d7e7e70d5044d4872da352575e0cd9d91f2cdbc8a80e5588a7f69ca20bd53d958e0d9c97eca7200307e4fc9bbb54d0c7c9fcc102942565a34bd0cf9bad9bf412370ccab253e54fce5b67cda6dfbf0184a208359c34b3bda830cece3393e4d305ae5408af94b676d93d39b7e421bcec00346a955de254c6579ab803b1b13df159cb7c370f98b124aa4ea5bf2125aa7dc3635c9e3e703b5af873bdcf3758499903ddccfb66f628d813a42cba679d0022e0e5b30a48f772d50ee8a9f59e5a9fe9470a0bdeee4b60adc4b94d3acbfe36b90d360bb7233265172629a4fa2", 0xe2}, {&(0x7f0000002f40)="453b389d2bbde94a6112b7ebd162e941f2c08fa9924e9927cda96d5f5a257f6a984ad637eb441c41bf8901083b5151c0df6b1d188e3b424030e5db722bd0a85b5851f4278a3e5c535cea176ddf28a85b1418e4593ef5052c785bbe51fe0700f919b4f76cb665d4e96b81994b0dbf46e66f8bfc6894dcfde0998c86d2d025e6b5d843a183319cc1377c4f87b4fc0e3eb2e0b1748573b67c824ad1fff5df9efe43e55c9eb769bddfb283955519dec008ba35a98d99d1782f81ee8869f8c98ffb6de618de5b64e1acc98cb3d111c6cfcd1864348697a289722d5b9178df22c77192a22e00efbb4b0951ed1d55", 0xeb}], 0x7, 0x0, 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000030c0)}, {&(0x7f0000003100)="658d05c0ec29f2c0a1e3ed3822f1bc3975940b89996f7316b02a1a7b623141756bbc8f1a2fb602080462e4145eeed4ebfc764a0289215dd8ae2244c5c63c75ab7d1fa23452760c835c739d1cf4536d00ea4ad6dbb7b3e4ab97db6fca23b7f226355a8b8333d02bb7cc4e9b2c5f2159491ea50f5993ee202a55136859f7804e41bc1a7375a403ee096c3d9929465374c2ac48b1f28447cb105d0eb18219c1fbb851d4ba61170ac18a3d043e287db2c921c9b194eb0abf8428aee0ac1339e740a24ed4b77f49dda57639bf10cc2b66a4054366c58014b7079c381eaf1c874d99a0b54b051cfe73", 0xe6}, {&(0x7f0000003200)="90eef0e0c12e2cf7223e953295e8d855", 0x10}, {&(0x7f0000003240)="6fca989d9100ea5334347e1d21b2a8c10c77692dd978e8ad9d225ebba488e6a3e7aa2c992dea19a51ad64c42cc208da7fd9c740d1ce58c92493e1133ac94da11644c787444e2204997f9c21bc792d94fa211d049583c030dc425d7c7f59099ef8f56eebda2b490c120f2eb81d654c4ba2b366edef89744cd75f460d54a1be7c2f9098eb9a344257af1ddc457169a2faa198181577c0d6b34", 0x98}, {&(0x7f0000003300)="0697a880d9592c2ee6ed7df10d4bd53bf29a9b6b05de03d969977a7d157630ee", 0x20}, {&(0x7f0000003340)="096aa1d8711b1fd1b18d05bfb6f1df14b5957fba808cb00e1b9defd5d90e0a15bcf166b8ed77d6684d7a5957588bcdd5dfe7", 0x32}], 0x6, &(0x7f0000004040)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x118, 0x2000c040}}, {{&(0x7f0000004180)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005540)=[{&(0x7f0000004200)="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", 0x1000}, {&(0x7f0000005200)="75cbdc6483", 0x5}, {&(0x7f0000005240)="ea6abb1d67fb7e46efcf8a13931f13fcc2472ed625544b2097f206a15675023fee1648820666af6f8a7a13601feca352981abf183f7a", 0x36}, {&(0x7f0000005280)="9d97390cb98a4874c22e13ab0b5536bcf07aa5d7a5a5aaf178efa63b5ff0b80ccdeb3c218e32cf7bf3edea250f7d003ce22895decee50be7f912f465eb121a31bdbfb206e7b26756aeead303467e81ce47c9f27c87c28871f3e6321bf832e855d78a2668dffba35ef1d82436f62fb2b771c01831564cd378b719541541a9f4499763d3f01234ef038f4e9a3169b88436bf59217366ef8ac6c46fc9e8eacf67a95a52", 0xa2}, {&(0x7f0000005340)="6d084ced89fa0522bd19d297a01160538bfdf1760d611cded0315878b2c1393c842ff775f8be7b5d168c6feed4029407827ff04296905473c991c98372d0f7e970117479", 0x44}, {&(0x7f00000053c0)="a1622523c61d5f3f6935e309f325c220414076278d3b31f852a40ee2061b749fc370be7d5b96fb5ea2cb1318c7d4befc160a4f375d45093f2515a46415315f1c671b1698c3c4fba53f60a9e6", 0x4c}, {&(0x7f0000005440)="738f8bcdb50308feb4132044bc287aeb90080081a27008947d1842020ea6117fbed097a6c45ad845e7914134ac1d281d346b0e0496fbc2091c7ba50660cd0f51c9f8863b402c6c506f2a512ff2b1364e0807c1c2c083acad16700b84d14ef6ca9332815de8e79c143e9997a159abdb3f30ba50648df7d30394208d16c8dabd318fd8bec1ca78d12c8e66fafe1d039b6b12f5f84b66b4d4f0c760756d12ce2d7fb3c8add16da4768a7f256f6a277689157193cb2d895b0267acca9b78f8900a87d0a5caa9faacece26eefcd387d75986260e40deac9af5451a184a0fb87d2c8161730c8e68a5ac01a3aa0d9b57ed4e43bb97b5c", 0xf3}], 0x7, &(0x7f0000007bc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r12}}}], 0xe0, 0x4000080}}, {{0x0, 0x0, &(0x7f0000008e80)=[{&(0x7f0000007cc0)="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", 0x1000}, {&(0x7f0000008cc0)="3e8b", 0x2}, {&(0x7f0000008d00)="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", 0xfa}, {&(0x7f0000008e00)="341531eeeb0f209c0395f5afb31b99c12f6edfea7b52d324fafc9ba33720502ab40125e2c9b7c030d2df1b6831040226a9f54a23af75713fc5e23c5fb2a0c5eefcd29e3b53457f9bc7", 0x49}], 0x4, &(0x7f000000b2c0)=[@cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r16, r17]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r20, r21}}}, @rights={{0x1c, 0x1, 0x1, [r22, r0, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xd0, 0x24000091}}, {{&(0x7f000000b3c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f000000b600)=[{&(0x7f000000b440)="de1516", 0x3}, {&(0x7f000000b480)="67473eeb30cd0ea9ee3a513389723f128e96f3698a12fc47510237bedceb8aa940cbb8cac6d1d9f6b292378630f6681127c9447c183890c425ca244381fa7cf19b0ffd7212281df94fb3be738a040c68ebefd133bc04a9ba1478c01fc9593c5e49978c8fc3760b44fdf0382a9a09ad260dad983f621e8fdc5b869b70ac8803dfb9fb5fa3ee02f3ec258100383fdb9b3fd482b5bf86d4d73628e0621e86ce5212ac16c02d282ac325d6bb05ebcd7a1898df64c773260bd97fec9d151f5e898f4f74cc80d4e19dd8dbdec9e8041a1f28281d79d1ec6e373b0858dc225f0eaf1f449da7", 0xe2}, {&(0x7f000000b580)="31d1a9ec2ef141fa03f257e9500d4186c43beced0d2ca77598d472d5eb8d5ef1161da42d45667a2a6b960883272236cc23f3da04783aa6d655176a1fd1407b32e5d87429794064a8ecab0209047f1180ad7f90b949273f", 0x57}], 0x3, 0x0, 0x0, 0x40000}}], 0x8, 0x4040404) 11:34:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x75f, 0x103382) (async, rerun: 32) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (rerun: 32) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) (rerun: 32) ppoll(&(0x7f0000000000)=[{r1, 0x9447100013401bf5}, {r0, 0x482}, {r2, 0x8130}, {r1, 0x80}, {r2, 0x100}], 0x5, &(0x7f0000000080)={r3, r4+10000000}, &(0x7f00000000c0)={[0x1]}, 0x8) (async, rerun: 32) sendfile(r1, r0, 0x0, 0x0) (async, rerun: 32) openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80780, 0x210, 0x1}, 0x18) [ 460.617108][T11199] binder: 11194:11199 unknown command 0 [ 460.640330][T11199] binder: 11194:11199 ioctl c0306201 20000440 returned -22 11:34:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:46 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000000)={@dev, r3}, 0x14) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='generic_add_lease\x00'}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000003480), 0x20000, 0x0) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000034c0), &(0x7f0000003500)=0xc) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x6}, 0x90) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000880)=""/111, 0x6f}, {&(0x7f0000000c80)=""/90, 0x5a}], 0x5}, 0x40}], 0x1, 0x10100, &(0x7f00000005c0)={r10, r11+60000000}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) (async) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x74) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x34, 0x24, &(0x7f00000002c0)="5417163e63e4d8c0d108aa58f17ace35313202db251bc1af2f2648094423886288d1dec0581833eb7ee6679ece9d8c1d15575cb3", &(0x7f00000003c0)=""/36, 0x8, 0x0, 0x86, 0xd8, &(0x7f0000000500)="d73eea3e2506006c808fdc4b6ff82ebb1db300eee1f295fa758d1c70d8dc974aed586fd2636b9bb3580da62ae05ff08ac2809b1f5a61b50271a617658837fb64a4bc2d629a02a3b04c6d28f4bfa00a5c573c0527c723ba28e22255bda16d208a17ab4d306fbfd9cd2162ace4e6fb5fbf60d3b69dcb2714dc44b105817b2754ae45c2cf32d764", &(0x7f0000000640)="2e0374bcb545fe9b95cc150bdb02a205d0f7e71557da6fafd292c66d015069115ce3e78256858213dd5244dd31b9599e100ccf41c17503b467c3a40ff04abeec053d11831d7937f8ffb98fd1c51086d1f0802cef9f92d14b5195a85a1afea6898cf3b96f6281e39a605717397acb59f1a187f012320bac12d8a10c0aca7f000854fd29d705ae76a94f6b67a6d7c585c1a7eb5f3138b41ba41f04ecb90fc79071c2f4380d96c635dfce9dfaec8048125c21e73df60f5e9a94b8c8f310a9bb5673ac24108b12646891f7fda8ad85cb1a4dfa9d4bfaa02b4ab7", 0x2, 0x0, 0xffff}, 0x50) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) [ 460.699733][T11200] binder_alloc_mmap_handler: 6 callbacks suppressed [ 460.699756][T11200] binder_alloc: binder_alloc_mmap_handler: 11194 20bfe000-20ffe000 already mapped failed -16 11:34:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 460.837994][ T28] audit: type=1800 audit(1706355286.358:304): pid=11208 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0 11:34:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x5, @sliced={0x1, [0x246, 0x81, 0x9, 0x0, 0x5, 0x9, 0x0, 0x5, 0x7f, 0x8000, 0x2, 0x9, 0xfffd, 0x2b, 0x4, 0x4, 0xfb2, 0x100, 0x4, 0x3, 0x4, 0xa47c, 0x3, 0x3, 0x5, 0x1000, 0x5, 0x2b6, 0x20, 0x30a9, 0xfffd, 0x3, 0x7, 0xa680, 0x5, 0xf1, 0x8, 0xbc, 0x0, 0x7f, 0x35, 0x1, 0x80, 0xfff, 0x101, 0xdff, 0x6, 0x2], 0x80000001}}) 11:34:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x238, 0x20) sendfile(r0, r1, 0x0, 0x100000000000042) [ 460.956440][T11221] binder: 11220:11221 unknown command 0 [ 460.969569][T11221] binder: 11220:11221 ioctl c0306201 20000440 returned -22 11:34:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 461.000883][T11221] binder_alloc: binder_alloc_mmap_handler: 11220 20bfe000-20ffe000 already mapped failed -16 [ 461.033096][T11221] binder_alloc: 11220: binder_alloc_buf, no vma 11:34:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x5, @sliced={0x1, [0x246, 0x81, 0x9, 0x0, 0x5, 0x9, 0x0, 0x5, 0x7f, 0x8000, 0x2, 0x9, 0xfffd, 0x2b, 0x4, 0x4, 0xfb2, 0x100, 0x4, 0x3, 0x4, 0xa47c, 0x3, 0x3, 0x5, 0x1000, 0x5, 0x2b6, 0x20, 0x30a9, 0xfffd, 0x3, 0x7, 0xa680, 0x5, 0xf1, 0x8, 0xbc, 0x0, 0x7f, 0x35, 0x1, 0x80, 0xfff, 0x101, 0xdff, 0x6, 0x2], 0x80000001}}) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x5, @sliced={0x1, [0x246, 0x81, 0x9, 0x0, 0x5, 0x9, 0x0, 0x5, 0x7f, 0x8000, 0x2, 0x9, 0xfffd, 0x2b, 0x4, 0x4, 0xfb2, 0x100, 0x4, 0x3, 0x4, 0xa47c, 0x3, 0x3, 0x5, 0x1000, 0x5, 0x2b6, 0x20, 0x30a9, 0xfffd, 0x3, 0x7, 0xa680, 0x5, 0xf1, 0x8, 0xbc, 0x0, 0x7f, 0x35, 0x1, 0x80, 0xfff, 0x101, 0xdff, 0x6, 0x2], 0x80000001}}) (async) 11:34:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x238, 0x20) sendfile(r0, r1, 0x0, 0x100000000000042) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) pwritev(r0, &(0x7f0000000100), 0x0, 0x238, 0x20) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) 11:34:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 461.223597][T11234] binder: 11232:11234 unknown command 0 [ 461.240943][T11234] binder: 11232:11234 ioctl c0306201 20000440 returned -22 [ 461.265139][T11234] binder_alloc: binder_alloc_mmap_handler: 11232 20bfe000-20ffe000 already mapped failed -16 11:34:46 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r0, &(0x7f0000000100), 0x0, 0x238, 0x20) (async) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:46 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x5, @sliced={0x1, [0x246, 0x81, 0x9, 0x0, 0x5, 0x9, 0x0, 0x5, 0x7f, 0x8000, 0x2, 0x9, 0xfffd, 0x2b, 0x4, 0x4, 0xfb2, 0x100, 0x4, 0x3, 0x4, 0xa47c, 0x3, 0x3, 0x5, 0x1000, 0x5, 0x2b6, 0x20, 0x30a9, 0xfffd, 0x3, 0x7, 0xa680, 0x5, 0xf1, 0x8, 0xbc, 0x0, 0x7f, 0x35, 0x1, 0x80, 0xfff, 0x101, 0xdff, 0x6, 0x2], 0x80000001}}) [ 461.306997][T11234] binder_alloc: 11232: binder_alloc_buf, no vma 11:34:46 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x1e65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 461.544108][T11250] binder: 11249:11250 unknown command 0 [ 461.566732][T11250] binder: 11249:11250 ioctl c0306201 20000440 returned -22 [ 461.606863][T11252] binder_alloc: binder_alloc_mmap_handler: 11249 20bfe000-20ffe000 already mapped failed -16 [ 461.647793][T11250] binder_alloc: 11249: binder_alloc_buf, no vma 11:34:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:47 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100001003f000000230e000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000000e00000008000d0000000000280008801c001a0000000000000000000000000008000000000000000200000008001b0000000000"], 0x54}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000002180), 0x4) sendto$inet(r7, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r7, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) lstat(0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="6fd14b5d036705c2bd00f349e9a426fb4f935b4f251215481c87b90ac6dd5116d16adbfd1d1235aa4d2d18a04a47873dd91474de69aafaa9d25ad694caa17cba9245902c058003cc6c0f50f5396391737912acb540a46eeeacb2a0c6d98de870909813f47b6d3e73816330ea12c63a705000daf2334d74b55f48592406a95b3e5da9287894e1541d4c145c53ba82af4288b91dbe5576b2684b185ddad9a37e915b563ef9a04ccb73ab0df9441a514496b491a2026a926fcd11ac086d422226475e956993eb6849536189f1cfecbf428346a427e951831bc1fa91c2439a5d50", 0xdf}, {&(0x7f0000000140)="b4122bdc972e029509f5053030e73645a0f70061e9e30d", 0x17}], 0x2, &(0x7f0000004080)=ANY=[@ANYBLOB="1c0000000000000001000000020000006c8e06d37a514dbd3309b547a1a017befca383bdfa8f7939ad4f657db001ff3dcd9e3312764c2a4415d36f956a6fb2d21ef32c11403a0580d2fb2594990d787aa1bb8c96b089908f40f4711575b2d1060051eb996462954dff586f97849b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES8=r8, @ANYBLOB="6b2b97e594f6f41c5c5cfdbd992d1f45cd476b54a8bfa95b123ab71118305ab54684cbf48fbdc71e53ec0a2632880cd2b5a06fcbd4e8f56faa1e0c668bf3f613c0c337e14a337095619224fdea64a7574d480a84f8351450be933baca117e0a10ac5c4e7b43cb1d1cf53210bc928cf57a178b5212a6ca4b9260fbe6fb19b7498a0141499a35db9bd110242bd8819c56119ba78dcf7a83ff022b0eeeaa45331e88186b8838b0bb04eb0e719ae02aafb2dec5fbdc7621828", @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES8=r6, @ANYRES32], 0xb8, 0x4040001}}, {{&(0x7f0000000440)=@file={0x1, './bus/file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)="771d0defacef11b43dd99be98b2162a4130599ce4d6cb56c0f67c77d18eef4e5963118c176f014061a1653617e27524961a56a151ebac6b2e722287f07d353ea752c6b7430449ce6399e18e18c03d1e10edf21a842faec8c076bc95b183d4684feb7b7bf31523499141395aa65165dd22c470c", 0x73}, {&(0x7f0000000540)="4d9264f7a529a959f8109a69c2c19084fb3be0e6d28a632b55cadf467acb382a5ffef920727df80bdc689d4c4c292af3739659ad8ad4074477decc6373a1a8b829b50fa7b005", 0x46}, {&(0x7f00000005c0)="f50c2fb2caca1ed26e0047d0f84ed384713ee48307a339c2a3a4bcb58589a1223d7aeb8029625b554c713915bc82796dae09750edc9511db1976bdc8566419885cf79d9ae82cfe648cf8e82c9f1e36cf058e92d3b919d876fde376847b6ead6c1f62be421d4ede8a48de7c51a1394deace99dd0c4fbd14c19dffc827804868ac08f41bf9aa3d3b21aaa21d350fc79215c4e4a6c6699e1a7df82d", 0x9a}, {&(0x7f0000000680)="2a58f44e31261c2ae255dd78b56a9eb42e881219c26585aa69adc6ca3d9efa20c6415e3d511a0a1c5d6021313de25c8128e0c9b3b6f6f739cf0b643440aeaece1701a6add7009d170eeff751a6b1f9210ed12a372b476f30ae2a6042daa1e7", 0x5f}, {&(0x7f0000000700)="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", 0xfe}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20, 0x4c080}}, {{&(0x7f00000008c0)=@file={0x0, './bus/file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="e2111e367fc3534a2b6b3a167cadfda92e76fb1adbfd31028420d28e87e81346c354f00dc26aeb2ac01b4159356893a3f1f3c176afd31eaebec786c198c0d1f02b99d298ed84dca9d8320762c27d991c65dac6036e87d462b885ac9e09089785a29243931fb6abaf4cceadb23156443bdf4bb884d93b62f6a47727683eca828f27b4a12f4fecfddfb60aa6541464f0d4c92938b53309b3068865846ec7bdbcf00395dd995990cf331102f2516d5ede346869e6bf253bfd53888ec75997239b739924594e9e91bd8397850064", 0xcc}, {&(0x7f0000000a40)="ebbcc0c387278e24e1dbdd4f39a8c11f22c1f74e95d1ea4534d33a2b1411c1e989ea131f1429d7e102cfc8f3a3cc339c35558efb5cfa3486d660d4c1dc2692751f88c217588e957d8256b2a9472ad75dec0917e24141fc56e99bed60cb7b6aef3f770e6b5ad9585d2731f7f7143d719688e289a72dad697f3a2a329e6a5e5e6a3095b5224a8ff61e2ee006045ab0045e217386126aa6ee22c545c5c4b801", 0x9e}, {0x0}, {&(0x7f0000000b40)="4e0147", 0x3}, {&(0x7f0000000b80)="a614bfdb0f0b79259ed430f5d5d27cac7badb3b62c162f63b354cea30f5c96ccaf423ed5fa25a169c2d5262e8660662e28802e0822c08af00428e3e0bec41a3b90bdcd8a84de04ce01ea31", 0x4b}, {&(0x7f0000000c00)="3aedfd65462e953afcc032068cebd13dd4a35704ceacd3d0cc5073d2fdad8565fd63194239d674c1b52ac86f40585df34e12fc24dc9c36d59c3f94b298418e", 0x3f}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff}}}], 0xc8, 0x7c60c9c9566d109}}, {{&(0x7f00000020c0)=@abs={0x1c5eeba3541ef870, 0x0, 0x4e24}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003580)="c3049a39d82428cf61232c06e7368e584e603f3edb272a4137c232b026311faf03477815d448d39dc231c9c41364acd704715c717f830ffeea9e3d5de9d70f3b3ddf1c42984a4e620a70715d7a8c5290ec88921a494e0d5fde08257188eb62618062fc0723b776de76fb5e92e94c93dfb5da20f0db2c1b5c282c4b94d0606048f4fb0fb62331c848d049ff3b0d89a09615b5f8b2eda06f88b0efaa4210cd26b9314e5a765907c63ae3ecb5e96f7fab68b921c74bf61c38902531d0bfffce5d2299c7272317a5e34c93cae647", 0xcc}, {&(0x7f0000003340)}, {&(0x7f0000004d80)="e3fb3716cff3efcf946fcde66e537e0b84d0a658fb3cb5157172172a286deb2aed1216e430c5fb54c1dc9df55f21488509e4ee1706e73a7f23d66ddcdc93210adb7437be35d0a7392b42e25ededc50a6d32d0cfb015ea368fbe2ec039935483e63a62ec389bcbc3ee40ac372efd4d306ab178ad7eb8ad330083df34d94c55c07000dedb106a9dd1a84f67aae5633e81a8af01b6c01e560607dd3487521f8c9c753ee37e187567fc12c6bfa5cb7e8bc8b36dacf66f95d3d883411d483b1c6ae6f05b909b4506157ac9273f805eb4d96ad6ea66ca81977279a8ca8104157cb8cd9a52d57d62652e9d14b", 0xe9}, {&(0x7f0000003800)="6096e2effb93f21710d3387ea9887ca778cca0c8b538386974f843e97cb711d2416b605517723e17c28485ae7a955e69fc83005e8ac6debc21cd893bdae3dc673799e98ea1e0f530f0c426eb3a0d00271f80c7c3d383b76fa9c547c01542471ffdb1d4fd9efc8c966982f1498092d293d802f055470bb5e0c10345ad900b004942a659cbc313d772285ba63e7811ebc72db041844fc57fc15b98c560d9e54a69dc5579c5deb0f546beca8931a528e41fd97917dfc74135e8c23a7bcc47875e0e8dab12a3a9d569ecc5d7091169aacf27c9c1677884fd4dfe7283e9c76f", 0xdd}, {&(0x7f0000002140)="2d337721a2aa6af8fdc97b1211", 0xd}, {&(0x7f0000003900)="43617be377b15406b775ba9d88e0a99d586a4ca8de9f79645401c844fdb9b7a4a746de01355b656cdfdcf87353cd4b50a092d67497bb674dffcebfa9a68031bac4b2b9c8", 0x44}, {&(0x7f00000031c0)="5e0d4713f023f734bd26ad0790c7fe7769ace621f89027fc95cd7ca098a4598627923454155abcb7f97cc33d68b2f849f5d6dbfab0a0a7717a65b907187382a12747cfd7c49a89c06592aa9da9ccc015bab4be83f430ff015f3b718a6f3e0d3f88094e36e4701ded3c19c6af8cf127baa795fed20d007e00c2217c7743abe4b0f2df4f3b66373076afa910baa56f8f0205bd3fdf322c38b433ddf02c2297c6b843289a1b7ce37fc2e7a675c8000000000000000000d6f25f7e01ec39b2cf0d85555a88e82506ff128b6f78c59869f690df347bf27d53cdaa8fa59947", 0xdc}, {&(0x7f0000003a00)="4087dd67c01fca8db2c355a272d1ff223302486675cf1e4b1c5c76bda392dcbcf04776cea62bc7096f97153fde1ea7506b06cd9a26670e0bd385da6758d054a9890ec1b2faa9b1166a26c4b66806397a0bb62d18ba59a5c939dc2a39aa996e91a891279e6d40091a2cb3c1c9d66841b74238a9cb533979d012413bb81d17f1a3baab5f6cb00ad485b1675a255e69d753b8d874f908d7de4d38aabeb464391dccb4b3bb099a1ece4acebd48e7928a500ed93ef764a0045d2cb06c9b2b9771f7a79cbc2438b3a2c752c75a", 0xca}, {&(0x7f0000003b00)="c330b03d6640f57a8539b5552cf26ceeb86af50014349d76dc7e2528a5599da356aa8deecd84818634f8afa4435f64e961efc58626ac976f662cbf50cc21ba9ce0b7ca12009c1faee01d7b62af", 0x4d}], 0x9, &(0x7f0000003400)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r9}}}, @rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r7, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r10, r8, r9}}}], 0xd8, 0x8040}}, {{&(0x7f00000042c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004340)="bf829869f37edd9c7561fb0cce54af7f2789ff89fcd0cfff575c5b8752b1", 0x1e}, {&(0x7f0000004380)="c34c451ae1b59c54cbcdd3e49331081b750501bbb9bf04198d097e6cfdef4a85bd94d7d8b1951e72556cea8393214598969b292ebd6b6073192e7a30bec2daaf4fb4b86ef4e3a434f89df00da89192d4dd63b7cf7869a33bd1f20e84ba403e33917f2b69f98ff3225e26bd6a5e7349959152ffbb61493347e8bbf77cf3a66f2eeca97acad7650f2502590ecd", 0x8c}, {&(0x7f0000004440)='\f', 0x1}, {&(0x7f0000004480)="783d27de630f98c8b517764b78df62b01de49951c57be1930c7a0a6839eafb806361b9d6757e38f0d09fb91f08b9fc692670b8e261ac93593f32e5d7bb4d1d5e29082a27b5a70c2d42c9d3530b77466de2e6d304d35af78f5104c10732111b1791711a11bc263145fa410a3bfce6fe96a5ddf7624d", 0x75}, {&(0x7f0000004500)="7c161ed0bfbe2165bcaffc9e1712f6d5c47177e2c9a6cea90ca1223e77b404582d62893190e0f2ca8c2a7e55b0ec57a74d16f4d7847d3d5c5a9c7fa4ecd13de3772c81e80ccc6c9c023d79f9a812beff5bcdf664599a9851754f224ffa9eee6386ff4a14f30e2063f5f78bfe", 0x6c}, {&(0x7f0000004580)="b4aeef6d3a7b867d2cdd53e8de4bf74288e03e56445d9d88989bc96ab5e6b243f703d07948b857792f933192d8c43f0eddca6a6c724997cff833dc1e927050e77110847dda6e1c3ed5fef03467db43758b9d3deb2c5fe9991a0cbd4ef137f67a0fe54a844b0a24e0e4493552a589b153591397e94cf376d3c427d79d79951d346991065969b91cda9959937afc58ea9cc4cefe0fd55b29cd4c61dadd807036ecdf124bbb44d2b35161a8908f8679acd0b8f72b7127e132840a732b61a5d6e0a88335cad7ea2c9daf467a0b51085539e928774c6e50320bd0efce533143f032ec1e9814804db5dfb1", 0xe8}, {&(0x7f0000004680)="59efffaacd77be5fe684", 0xa}], 0x7, &(0x7f0000004740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x60, 0x1}}, {{&(0x7f00000047c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004840)="ec1248328f61ccdceba8f597e6a3381eb33071c64f231f2a224c370a26fe6c7890dac64c99c14292973e0673e0526f433872", 0x32}, {&(0x7f0000004880)="c9d73f1bd9befea1aa6da8d26adcb0052a1594a25cfdff4b0ab669d90bcf1a51478f667ac397605fe7db5126492b5a86117622c042cdd504c4778738d467dda296a68e51811c366249054e6bdab4b2568f0d67e79034d33fc8215f1273451e09cbd3e7e0ae3042b19b31aad4", 0x6c}, {&(0x7f0000004900)="f2eeb8631a65a0c2252726464760ede197dfbcb1f1dc138f7f0a6e3dac62fdbb73332fe19cd1b9aa3957a9311f6580c22c19dd5b4c86ee0ca87b25e0ec585061b734aa0d96c5219fdb8005eff6d5bdffb0b31468637a90802b5da56b230199941f6656a7ef69b17a845da07a88686de93b5af0376bdc88ba6c434f321bacacdbb2672c1dca40855903f3876eb3fea95f450908161a0f01b3163aaed325b4dd5cf6", 0xa1}, {&(0x7f00000049c0)="9d0db06668d4eb743fa78a60cdbf8e403b953a6f2a13a07b221ecd4bd28ee3cf89ad076be46ba1c58e16dcac6cb2ec393fd2ae9b0a8dc3b430a66bcb966362d81d251fb8af1e", 0x46}, {&(0x7f0000004a40)="70b3ce60dbb7e2e044265885773df77c9c2d373bc1bf1075d6f1e147bd4b550d5893884c317f86263d5b8568634fbd42b179", 0x32}, {&(0x7f0000004a80)="8f0ff56d0b0395ec84476eef7b58951f79cf0d79c91b744f52311fc4c05b480c6185ffac7ab23be1ba7b65c0b14eb7852b552126e3ac2a22ee227a44ba0a1499c7e15baa15cc751c9c8493e3f76e9726dd9bd45c9922a71b9dcd89f21b87c2bb7175b476157f69984d54fe04c67c56f2a7087d9336f5463a4d3f156fe5b75a4a6ea363ace5e294995dd162907532b7d18a3709121153e91606d88688d91ac29a9b79e8312d2113633253ac93e41d6ef1b8051cc0b72d6951e3329f556275", 0xbe}], 0x6, &(0x7f0000004bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x20, 0x20000010}}], 0x6, 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002840)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fe"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000016c0)=@o_path={&(0x7f0000001680)='./file0\x00', 0x0, 0x4010, r3}, 0x18) r13 = geteuid() sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="8d9e446e02b7d43fea7c51fef2231aaa10cbcb773e3c84f94a73f4bdbfb2ab75f42f387a6ffab31a6df61dbc57a1b265a3ab619aec3cb9470999fc098b0dac2a14edacba5891b3a2cf75af028f07d33fb4d14e8928755da30731c2df6a9e8ae525ef9418c4bbdc2b129be97d5c8ebde48e441ef091ab128fb31ff71e74077bd7f32c31ecd622da9c8b1fb688ca1c802a629c959ba2101bb9dbeddd022e4ab0a383dcb30e7c981bbe194c01c9", 0xac}, {&(0x7f0000000380)="9d6148e95615798ae0a458094826003d9b1a0605858c15ef8145056eef166ed0e73159477010a3485ece8be697874a5986578909762ab4626e6754925b30d1a9503051ec20a602cbe74305dfbe211300c41b65a4d52253b5b9b1", 0x5a}], 0x2, 0x0, 0x0, 0x840}}, {{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000480)="a5c6c02fe9bc71bebe02d42e2276a0bf0a457a2a7f62cd687509f0923bb40b63f3d92d734baa4d2f6198134e002bdde516be54cc6c8158188c0add3e426509d15376ec453ade00704b19958d2972be45f42d6e4775f0e20442a630eb3a523cfe73955a8389acd67d6a22004ce012c618c42808", 0x73}, {&(0x7f0000000500)="0aace7171b1b210add3c348c6a905b912e133a191c8addb77101d57930a51bb4708490045871e2746bb724957d6ea52d38fc253b0a54645666710a93d95d416904b41b30581bfb66", 0x48}, {&(0x7f0000000580)="f0f958e0a3e66311cd6bf8c7aae216f082a82adbbd1a41f0a72321bd00d2b4a6bedbcafe61330a7ff16937631b3cd5c0275201bfd00f1f48602d49ab96d6c4d26eec7247b2d04ba39db0c5b78055c03de4a5a120b73fe0fb32b062b17c0a37", 0x5f}, {&(0x7f0000000600)}, {&(0x7f0000000640)="5087ee6b913cf2d0f970195da0b32d325b747b917640fa8ec921541975280b56feaa167e2ef8e85331d54892b2703f8452f52d0acc40021ea2f7bf63282262e2e600c19948e251defe9d985fd214ca9345d386f62fad77f5ff73d21cb9bbb45cbdbaaf771eee5ad5dc2cc65d02c83462c2f1f3a5b7a76f03a606199a340dd12d4f5902ec92155571b88aa8b5408ffe594d2f1b9942852b5783975ee1b5b3f9cd88ba3de64dd8455d02231a02011511", 0xaf}, {&(0x7f0000000700)="6640171c9b4b8695246d1bc3e9f5091c0b709e7ebe1e48bb0bbc3865aba2b93d53a6f1a6d27e22415a4c3d428204d67e0e5fcffe30dcf01e34e21135d1153db6e22ae80a4b0f0a5f376898070f870cd23c2c035ab2e1cef6584dbe8c9b9fb52f46107e91000d369e463bb1566dde18219e4adec66b4803f5424675c6e752e9b7e9c7c560c530c7d79b09c29c2db04310f80239eeb7a2ddac3c3a8da7852f4a5c09b12c84975d42f277c6d31dbe17c3a76b9a4430d854db163127e8263d0d744ac48db561", 0xc4}, {&(0x7f0000000800)="30a2b2a23ca734d30e0b8832e1192e489a3487e1aafeb432910032d8cd68926f2b1f0238ca3cd5d6b7521be62397f27047c067f342fc047a70d158016fe3229a36b085935ca740cfcbde83caf4d30d4c5b0e551336785a7a9a2063e180f22ad56c51892bdd93e39ede785efa56fd39f02dd533aa7eab87b9f1af677aca64be5b500f2e3af2d8b7794f834e22b0b42e25fae1df9374c529c8fc795f4dc05a859675b43418bced", 0xa6}, {&(0x7f00000008c0)="21af48e2ac3de2f6c5993d70267dfd6182cb93895d420cd6632fb8bd78b79d8c54998d7de11bf004bc41aae2546d903f43a864ea6a", 0x35}, {&(0x7f0000000900)="69feeee957d5b739c79aed1e5490ce5b4f1779004f198c3e38e2da3fbea2762f30a74ff47c3bb78bc8f3859eb4863aefc35523e2c0f92a0019d7c935ffbc2508fe5caa438ce5b4f32b491529ab662f078bf116025e81a85dae81c85e18976542647922a79fbabe29e7f0475c44c04e6093b24ec7bf6a32c270962a3af87a1366f64363e564", 0x85}], 0x9, &(0x7f0000000f40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, r2, r0, r4, r4, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r4, 0xffffffffffffffff]}}], 0xd8, 0x40000c0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)="0e2b4b329fa2930e8d91f4e929d3731281f032f9c55726642d9d0d14bd590478fdc017a4b9e0ffda948c542c330af8", 0x2f}, {&(0x7f0000001080)="076a8215008c180a92d752a425af9144a01f9f59b6b650ca66d2ae9d547133bc6beeae8407cd63ebf45eeeff31651ef3bf82552f96a1399869d8c1721291085a475ce6cb11b8680d599f77055afb62d6de21feec6d31b547d568ecd66782feec711ad6978af56c5171898dd93f4421c1984d97a9257b378edf31", 0x7a}, {&(0x7f0000001100)="04daa02ec32c8b8676fe10abe5b93ccea0ecac2f8fe5052a3084740c74dcae4647eb345a4cd0fbf13a74305e724ed3a411893267c0036a5d3025c5560d02ebc8dfc12ba5f331953defcef1e269e76497b9aa387160321fe14a68eaad6342d4d22398b921a08b4ba395f999d24592e224bf0ef176265823901fda2671d1139e9b8501058cf3604693620af6b25b5e28b6e3da3a6dfb13a9ce2397c0ee26", 0x9d}, {&(0x7f00000011c0)="d7447be805a3e604fd7b9cf85ce06e264aeed68e69da47994255ae7f86b07eb1d3cd0ecbadd7fd9128e13f6e1ae7ac064fa6c26947a47cffa01e4139dc7c199cb929e0461b729c7d57bcfc64985c746200e0b34089dace796f739cd6715b84ac6ba3cf1691da53fc2b687c3f7e4b3a29262516a65833", 0x76}], 0x4, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r0, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r9}}}, @rights={{0x24, 0x1, 0x1, [r4, r11, r12, r4, r2]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r13, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, r3]}}], 0x128, 0x14}}], 0x3, 0x44888) 11:34:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 461.902050][T11256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 461.910053][T11260] binder: 11258:11260 unknown command 0 [ 461.956724][T11260] binder: 11258:11260 ioctl c0306201 20000440 returned -22 [ 461.993378][T11260] binder_alloc: binder_alloc_mmap_handler: 11258 20bfe000-20ffe000 already mapped failed -16 11:34:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:47 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)) (async) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) (async) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100001003f000000230e000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000000e00000008000d0000000000280008801c001a0000000000000000000000000008000000000000000200000008001b0000000000"], 0x54}}, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000002180), 0x4) sendto$inet(r7, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r7, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) (async) lstat(0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r10 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="6fd14b5d036705c2bd00f349e9a426fb4f935b4f251215481c87b90ac6dd5116d16adbfd1d1235aa4d2d18a04a47873dd91474de69aafaa9d25ad694caa17cba9245902c058003cc6c0f50f5396391737912acb540a46eeeacb2a0c6d98de870909813f47b6d3e73816330ea12c63a705000daf2334d74b55f48592406a95b3e5da9287894e1541d4c145c53ba82af4288b91dbe5576b2684b185ddad9a37e915b563ef9a04ccb73ab0df9441a514496b491a2026a926fcd11ac086d422226475e956993eb6849536189f1cfecbf428346a427e951831bc1fa91c2439a5d50", 0xdf}, {&(0x7f0000000140)="b4122bdc972e029509f5053030e73645a0f70061e9e30d", 0x17}], 0x2, &(0x7f0000004080)=ANY=[@ANYBLOB="1c0000000000000001000000020000006c8e06d37a514dbd3309b547a1a017befca383bdfa8f7939ad4f657db001ff3dcd9e3312764c2a4415d36f956a6fb2d21ef32c11403a0580d2fb2594990d787aa1bb8c96b089908f40f4711575b2d1060051eb996462954dff586f97849b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES8=r8, @ANYBLOB="6b2b97e594f6f41c5c5cfdbd992d1f45cd476b54a8bfa95b123ab71118305ab54684cbf48fbdc71e53ec0a2632880cd2b5a06fcbd4e8f56faa1e0c668bf3f613c0c337e14a337095619224fdea64a7574d480a84f8351450be933baca117e0a10ac5c4e7b43cb1d1cf53210bc928cf57a178b5212a6ca4b9260fbe6fb19b7498a0141499a35db9bd110242bd8819c56119ba78dcf7a83ff022b0eeeaa45331e88186b8838b0bb04eb0e719ae02aafb2dec5fbdc7621828", @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES8=r6, @ANYRES32], 0xb8, 0x4040001}}, {{&(0x7f0000000440)=@file={0x1, './bus/file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)="771d0defacef11b43dd99be98b2162a4130599ce4d6cb56c0f67c77d18eef4e5963118c176f014061a1653617e27524961a56a151ebac6b2e722287f07d353ea752c6b7430449ce6399e18e18c03d1e10edf21a842faec8c076bc95b183d4684feb7b7bf31523499141395aa65165dd22c470c", 0x73}, {&(0x7f0000000540)="4d9264f7a529a959f8109a69c2c19084fb3be0e6d28a632b55cadf467acb382a5ffef920727df80bdc689d4c4c292af3739659ad8ad4074477decc6373a1a8b829b50fa7b005", 0x46}, {&(0x7f00000005c0)="f50c2fb2caca1ed26e0047d0f84ed384713ee48307a339c2a3a4bcb58589a1223d7aeb8029625b554c713915bc82796dae09750edc9511db1976bdc8566419885cf79d9ae82cfe648cf8e82c9f1e36cf058e92d3b919d876fde376847b6ead6c1f62be421d4ede8a48de7c51a1394deace99dd0c4fbd14c19dffc827804868ac08f41bf9aa3d3b21aaa21d350fc79215c4e4a6c6699e1a7df82d", 0x9a}, {&(0x7f0000000680)="2a58f44e31261c2ae255dd78b56a9eb42e881219c26585aa69adc6ca3d9efa20c6415e3d511a0a1c5d6021313de25c8128e0c9b3b6f6f739cf0b643440aeaece1701a6add7009d170eeff751a6b1f9210ed12a372b476f30ae2a6042daa1e7", 0x5f}, {&(0x7f0000000700)="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", 0xfe}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20, 0x4c080}}, {{&(0x7f00000008c0)=@file={0x0, './bus/file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="e2111e367fc3534a2b6b3a167cadfda92e76fb1adbfd31028420d28e87e81346c354f00dc26aeb2ac01b4159356893a3f1f3c176afd31eaebec786c198c0d1f02b99d298ed84dca9d8320762c27d991c65dac6036e87d462b885ac9e09089785a29243931fb6abaf4cceadb23156443bdf4bb884d93b62f6a47727683eca828f27b4a12f4fecfddfb60aa6541464f0d4c92938b53309b3068865846ec7bdbcf00395dd995990cf331102f2516d5ede346869e6bf253bfd53888ec75997239b739924594e9e91bd8397850064", 0xcc}, {&(0x7f0000000a40)="ebbcc0c387278e24e1dbdd4f39a8c11f22c1f74e95d1ea4534d33a2b1411c1e989ea131f1429d7e102cfc8f3a3cc339c35558efb5cfa3486d660d4c1dc2692751f88c217588e957d8256b2a9472ad75dec0917e24141fc56e99bed60cb7b6aef3f770e6b5ad9585d2731f7f7143d719688e289a72dad697f3a2a329e6a5e5e6a3095b5224a8ff61e2ee006045ab0045e217386126aa6ee22c545c5c4b801", 0x9e}, {0x0}, {&(0x7f0000000b40)="4e0147", 0x3}, {&(0x7f0000000b80)="a614bfdb0f0b79259ed430f5d5d27cac7badb3b62c162f63b354cea30f5c96ccaf423ed5fa25a169c2d5262e8660662e28802e0822c08af00428e3e0bec41a3b90bdcd8a84de04ce01ea31", 0x4b}, {&(0x7f0000000c00)="3aedfd65462e953afcc032068cebd13dd4a35704ceacd3d0cc5073d2fdad8565fd63194239d674c1b52ac86f40585df34e12fc24dc9c36d59c3f94b298418e", 0x3f}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff}}}], 0xc8, 0x7c60c9c9566d109}}, {{&(0x7f00000020c0)=@abs={0x1c5eeba3541ef870, 0x0, 0x4e24}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003580)="c3049a39d82428cf61232c06e7368e584e603f3edb272a4137c232b026311faf03477815d448d39dc231c9c41364acd704715c717f830ffeea9e3d5de9d70f3b3ddf1c42984a4e620a70715d7a8c5290ec88921a494e0d5fde08257188eb62618062fc0723b776de76fb5e92e94c93dfb5da20f0db2c1b5c282c4b94d0606048f4fb0fb62331c848d049ff3b0d89a09615b5f8b2eda06f88b0efaa4210cd26b9314e5a765907c63ae3ecb5e96f7fab68b921c74bf61c38902531d0bfffce5d2299c7272317a5e34c93cae647", 0xcc}, {&(0x7f0000003340)}, {&(0x7f0000004d80)="e3fb3716cff3efcf946fcde66e537e0b84d0a658fb3cb5157172172a286deb2aed1216e430c5fb54c1dc9df55f21488509e4ee1706e73a7f23d66ddcdc93210adb7437be35d0a7392b42e25ededc50a6d32d0cfb015ea368fbe2ec039935483e63a62ec389bcbc3ee40ac372efd4d306ab178ad7eb8ad330083df34d94c55c07000dedb106a9dd1a84f67aae5633e81a8af01b6c01e560607dd3487521f8c9c753ee37e187567fc12c6bfa5cb7e8bc8b36dacf66f95d3d883411d483b1c6ae6f05b909b4506157ac9273f805eb4d96ad6ea66ca81977279a8ca8104157cb8cd9a52d57d62652e9d14b", 0xe9}, {&(0x7f0000003800)="6096e2effb93f21710d3387ea9887ca778cca0c8b538386974f843e97cb711d2416b605517723e17c28485ae7a955e69fc83005e8ac6debc21cd893bdae3dc673799e98ea1e0f530f0c426eb3a0d00271f80c7c3d383b76fa9c547c01542471ffdb1d4fd9efc8c966982f1498092d293d802f055470bb5e0c10345ad900b004942a659cbc313d772285ba63e7811ebc72db041844fc57fc15b98c560d9e54a69dc5579c5deb0f546beca8931a528e41fd97917dfc74135e8c23a7bcc47875e0e8dab12a3a9d569ecc5d7091169aacf27c9c1677884fd4dfe7283e9c76f", 0xdd}, {&(0x7f0000002140)="2d337721a2aa6af8fdc97b1211", 0xd}, {&(0x7f0000003900)="43617be377b15406b775ba9d88e0a99d586a4ca8de9f79645401c844fdb9b7a4a746de01355b656cdfdcf87353cd4b50a092d67497bb674dffcebfa9a68031bac4b2b9c8", 0x44}, {&(0x7f00000031c0)="5e0d4713f023f734bd26ad0790c7fe7769ace621f89027fc95cd7ca098a4598627923454155abcb7f97cc33d68b2f849f5d6dbfab0a0a7717a65b907187382a12747cfd7c49a89c06592aa9da9ccc015bab4be83f430ff015f3b718a6f3e0d3f88094e36e4701ded3c19c6af8cf127baa795fed20d007e00c2217c7743abe4b0f2df4f3b66373076afa910baa56f8f0205bd3fdf322c38b433ddf02c2297c6b843289a1b7ce37fc2e7a675c8000000000000000000d6f25f7e01ec39b2cf0d85555a88e82506ff128b6f78c59869f690df347bf27d53cdaa8fa59947", 0xdc}, {&(0x7f0000003a00)="4087dd67c01fca8db2c355a272d1ff223302486675cf1e4b1c5c76bda392dcbcf04776cea62bc7096f97153fde1ea7506b06cd9a26670e0bd385da6758d054a9890ec1b2faa9b1166a26c4b66806397a0bb62d18ba59a5c939dc2a39aa996e91a891279e6d40091a2cb3c1c9d66841b74238a9cb533979d012413bb81d17f1a3baab5f6cb00ad485b1675a255e69d753b8d874f908d7de4d38aabeb464391dccb4b3bb099a1ece4acebd48e7928a500ed93ef764a0045d2cb06c9b2b9771f7a79cbc2438b3a2c752c75a", 0xca}, {&(0x7f0000003b00)="c330b03d6640f57a8539b5552cf26ceeb86af50014349d76dc7e2528a5599da356aa8deecd84818634f8afa4435f64e961efc58626ac976f662cbf50cc21ba9ce0b7ca12009c1faee01d7b62af", 0x4d}], 0x9, &(0x7f0000003400)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r9}}}, @rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r7, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r10, r8, r9}}}], 0xd8, 0x8040}}, {{&(0x7f00000042c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004340)="bf829869f37edd9c7561fb0cce54af7f2789ff89fcd0cfff575c5b8752b1", 0x1e}, {&(0x7f0000004380)="c34c451ae1b59c54cbcdd3e49331081b750501bbb9bf04198d097e6cfdef4a85bd94d7d8b1951e72556cea8393214598969b292ebd6b6073192e7a30bec2daaf4fb4b86ef4e3a434f89df00da89192d4dd63b7cf7869a33bd1f20e84ba403e33917f2b69f98ff3225e26bd6a5e7349959152ffbb61493347e8bbf77cf3a66f2eeca97acad7650f2502590ecd", 0x8c}, {&(0x7f0000004440)='\f', 0x1}, {&(0x7f0000004480)="783d27de630f98c8b517764b78df62b01de49951c57be1930c7a0a6839eafb806361b9d6757e38f0d09fb91f08b9fc692670b8e261ac93593f32e5d7bb4d1d5e29082a27b5a70c2d42c9d3530b77466de2e6d304d35af78f5104c10732111b1791711a11bc263145fa410a3bfce6fe96a5ddf7624d", 0x75}, {&(0x7f0000004500)="7c161ed0bfbe2165bcaffc9e1712f6d5c47177e2c9a6cea90ca1223e77b404582d62893190e0f2ca8c2a7e55b0ec57a74d16f4d7847d3d5c5a9c7fa4ecd13de3772c81e80ccc6c9c023d79f9a812beff5bcdf664599a9851754f224ffa9eee6386ff4a14f30e2063f5f78bfe", 0x6c}, {&(0x7f0000004580)="b4aeef6d3a7b867d2cdd53e8de4bf74288e03e56445d9d88989bc96ab5e6b243f703d07948b857792f933192d8c43f0eddca6a6c724997cff833dc1e927050e77110847dda6e1c3ed5fef03467db43758b9d3deb2c5fe9991a0cbd4ef137f67a0fe54a844b0a24e0e4493552a589b153591397e94cf376d3c427d79d79951d346991065969b91cda9959937afc58ea9cc4cefe0fd55b29cd4c61dadd807036ecdf124bbb44d2b35161a8908f8679acd0b8f72b7127e132840a732b61a5d6e0a88335cad7ea2c9daf467a0b51085539e928774c6e50320bd0efce533143f032ec1e9814804db5dfb1", 0xe8}, {&(0x7f0000004680)="59efffaacd77be5fe684", 0xa}], 0x7, &(0x7f0000004740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x60, 0x1}}, {{&(0x7f00000047c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004840)="ec1248328f61ccdceba8f597e6a3381eb33071c64f231f2a224c370a26fe6c7890dac64c99c14292973e0673e0526f433872", 0x32}, {&(0x7f0000004880)="c9d73f1bd9befea1aa6da8d26adcb0052a1594a25cfdff4b0ab669d90bcf1a51478f667ac397605fe7db5126492b5a86117622c042cdd504c4778738d467dda296a68e51811c366249054e6bdab4b2568f0d67e79034d33fc8215f1273451e09cbd3e7e0ae3042b19b31aad4", 0x6c}, {&(0x7f0000004900)="f2eeb8631a65a0c2252726464760ede197dfbcb1f1dc138f7f0a6e3dac62fdbb73332fe19cd1b9aa3957a9311f6580c22c19dd5b4c86ee0ca87b25e0ec585061b734aa0d96c5219fdb8005eff6d5bdffb0b31468637a90802b5da56b230199941f6656a7ef69b17a845da07a88686de93b5af0376bdc88ba6c434f321bacacdbb2672c1dca40855903f3876eb3fea95f450908161a0f01b3163aaed325b4dd5cf6", 0xa1}, {&(0x7f00000049c0)="9d0db06668d4eb743fa78a60cdbf8e403b953a6f2a13a07b221ecd4bd28ee3cf89ad076be46ba1c58e16dcac6cb2ec393fd2ae9b0a8dc3b430a66bcb966362d81d251fb8af1e", 0x46}, {&(0x7f0000004a40)="70b3ce60dbb7e2e044265885773df77c9c2d373bc1bf1075d6f1e147bd4b550d5893884c317f86263d5b8568634fbd42b179", 0x32}, {&(0x7f0000004a80)="8f0ff56d0b0395ec84476eef7b58951f79cf0d79c91b744f52311fc4c05b480c6185ffac7ab23be1ba7b65c0b14eb7852b552126e3ac2a22ee227a44ba0a1499c7e15baa15cc751c9c8493e3f76e9726dd9bd45c9922a71b9dcd89f21b87c2bb7175b476157f69984d54fe04c67c56f2a7087d9336f5463a4d3f156fe5b75a4a6ea363ace5e294995dd162907532b7d18a3709121153e91606d88688d91ac29a9b79e8312d2113633253ac93e41d6ef1b8051cc0b72d6951e3329f556275", 0xbe}], 0x6, &(0x7f0000004bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x20, 0x20000010}}], 0x6, 0x8) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002840)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fe"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000016c0)=@o_path={&(0x7f0000001680)='./file0\x00', 0x0, 0x4010, r3}, 0x18) (async) r13 = geteuid() sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="8d9e446e02b7d43fea7c51fef2231aaa10cbcb773e3c84f94a73f4bdbfb2ab75f42f387a6ffab31a6df61dbc57a1b265a3ab619aec3cb9470999fc098b0dac2a14edacba5891b3a2cf75af028f07d33fb4d14e8928755da30731c2df6a9e8ae525ef9418c4bbdc2b129be97d5c8ebde48e441ef091ab128fb31ff71e74077bd7f32c31ecd622da9c8b1fb688ca1c802a629c959ba2101bb9dbeddd022e4ab0a383dcb30e7c981bbe194c01c9", 0xac}, {&(0x7f0000000380)="9d6148e95615798ae0a458094826003d9b1a0605858c15ef8145056eef166ed0e73159477010a3485ece8be697874a5986578909762ab4626e6754925b30d1a9503051ec20a602cbe74305dfbe211300c41b65a4d52253b5b9b1", 0x5a}], 0x2, 0x0, 0x0, 0x840}}, {{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000480)="a5c6c02fe9bc71bebe02d42e2276a0bf0a457a2a7f62cd687509f0923bb40b63f3d92d734baa4d2f6198134e002bdde516be54cc6c8158188c0add3e426509d15376ec453ade00704b19958d2972be45f42d6e4775f0e20442a630eb3a523cfe73955a8389acd67d6a22004ce012c618c42808", 0x73}, {&(0x7f0000000500)="0aace7171b1b210add3c348c6a905b912e133a191c8addb77101d57930a51bb4708490045871e2746bb724957d6ea52d38fc253b0a54645666710a93d95d416904b41b30581bfb66", 0x48}, {&(0x7f0000000580)="f0f958e0a3e66311cd6bf8c7aae216f082a82adbbd1a41f0a72321bd00d2b4a6bedbcafe61330a7ff16937631b3cd5c0275201bfd00f1f48602d49ab96d6c4d26eec7247b2d04ba39db0c5b78055c03de4a5a120b73fe0fb32b062b17c0a37", 0x5f}, {&(0x7f0000000600)}, {&(0x7f0000000640)="5087ee6b913cf2d0f970195da0b32d325b747b917640fa8ec921541975280b56feaa167e2ef8e85331d54892b2703f8452f52d0acc40021ea2f7bf63282262e2e600c19948e251defe9d985fd214ca9345d386f62fad77f5ff73d21cb9bbb45cbdbaaf771eee5ad5dc2cc65d02c83462c2f1f3a5b7a76f03a606199a340dd12d4f5902ec92155571b88aa8b5408ffe594d2f1b9942852b5783975ee1b5b3f9cd88ba3de64dd8455d02231a02011511", 0xaf}, {&(0x7f0000000700)="6640171c9b4b8695246d1bc3e9f5091c0b709e7ebe1e48bb0bbc3865aba2b93d53a6f1a6d27e22415a4c3d428204d67e0e5fcffe30dcf01e34e21135d1153db6e22ae80a4b0f0a5f376898070f870cd23c2c035ab2e1cef6584dbe8c9b9fb52f46107e91000d369e463bb1566dde18219e4adec66b4803f5424675c6e752e9b7e9c7c560c530c7d79b09c29c2db04310f80239eeb7a2ddac3c3a8da7852f4a5c09b12c84975d42f277c6d31dbe17c3a76b9a4430d854db163127e8263d0d744ac48db561", 0xc4}, {&(0x7f0000000800)="30a2b2a23ca734d30e0b8832e1192e489a3487e1aafeb432910032d8cd68926f2b1f0238ca3cd5d6b7521be62397f27047c067f342fc047a70d158016fe3229a36b085935ca740cfcbde83caf4d30d4c5b0e551336785a7a9a2063e180f22ad56c51892bdd93e39ede785efa56fd39f02dd533aa7eab87b9f1af677aca64be5b500f2e3af2d8b7794f834e22b0b42e25fae1df9374c529c8fc795f4dc05a859675b43418bced", 0xa6}, {&(0x7f00000008c0)="21af48e2ac3de2f6c5993d70267dfd6182cb93895d420cd6632fb8bd78b79d8c54998d7de11bf004bc41aae2546d903f43a864ea6a", 0x35}, {&(0x7f0000000900)="69feeee957d5b739c79aed1e5490ce5b4f1779004f198c3e38e2da3fbea2762f30a74ff47c3bb78bc8f3859eb4863aefc35523e2c0f92a0019d7c935ffbc2508fe5caa438ce5b4f32b491529ab662f078bf116025e81a85dae81c85e18976542647922a79fbabe29e7f0475c44c04e6093b24ec7bf6a32c270962a3af87a1366f64363e564", 0x85}], 0x9, &(0x7f0000000f40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, r2, r0, r4, r4, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r4, 0xffffffffffffffff]}}], 0xd8, 0x40000c0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)="0e2b4b329fa2930e8d91f4e929d3731281f032f9c55726642d9d0d14bd590478fdc017a4b9e0ffda948c542c330af8", 0x2f}, {&(0x7f0000001080)="076a8215008c180a92d752a425af9144a01f9f59b6b650ca66d2ae9d547133bc6beeae8407cd63ebf45eeeff31651ef3bf82552f96a1399869d8c1721291085a475ce6cb11b8680d599f77055afb62d6de21feec6d31b547d568ecd66782feec711ad6978af56c5171898dd93f4421c1984d97a9257b378edf31", 0x7a}, {&(0x7f0000001100)="04daa02ec32c8b8676fe10abe5b93ccea0ecac2f8fe5052a3084740c74dcae4647eb345a4cd0fbf13a74305e724ed3a411893267c0036a5d3025c5560d02ebc8dfc12ba5f331953defcef1e269e76497b9aa387160321fe14a68eaad6342d4d22398b921a08b4ba395f999d24592e224bf0ef176265823901fda2671d1139e9b8501058cf3604693620af6b25b5e28b6e3da3a6dfb13a9ce2397c0ee26", 0x9d}, {&(0x7f00000011c0)="d7447be805a3e604fd7b9cf85ce06e264aeed68e69da47994255ae7f86b07eb1d3cd0ecbadd7fd9128e13f6e1ae7ac064fa6c26947a47cffa01e4139dc7c199cb929e0461b729c7d57bcfc64985c746200e0b34089dace796f739cd6715b84ac6ba3cf1691da53fc2b687c3f7e4b3a29262516a65833", 0x76}], 0x4, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r0, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r9}}}, @rights={{0x24, 0x1, 0x1, [r4, r11, r12, r4, r2]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r13, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, r3]}}], 0x128, 0x14}}], 0x3, 0x44888) [ 462.060013][T11264] binder_alloc: 11258: binder_alloc_buf, no vma 11:34:47 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 462.267156][T11271] binder: 11268:11271 unknown command 0 [ 462.285756][T11270] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.312161][T11271] binder: 11268:11271 ioctl c0306201 20000440 returned -22 11:34:47 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) fcntl$setownex(r1, 0xf, &(0x7f0000000180)={0x0, r5}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54000000100001003f000000230e000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000000e00000008000d0000000000280008801c001a0000000000000000000000000008000000000000000200000008001b0000000000"], 0x54}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) (async) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000002180), 0x4) (async) sendto$inet(r7, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) (async) recvmsg(r7, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) lstat(0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="6fd14b5d036705c2bd00f349e9a426fb4f935b4f251215481c87b90ac6dd5116d16adbfd1d1235aa4d2d18a04a47873dd91474de69aafaa9d25ad694caa17cba9245902c058003cc6c0f50f5396391737912acb540a46eeeacb2a0c6d98de870909813f47b6d3e73816330ea12c63a705000daf2334d74b55f48592406a95b3e5da9287894e1541d4c145c53ba82af4288b91dbe5576b2684b185ddad9a37e915b563ef9a04ccb73ab0df9441a514496b491a2026a926fcd11ac086d422226475e956993eb6849536189f1cfecbf428346a427e951831bc1fa91c2439a5d50", 0xdf}, {&(0x7f0000000140)="b4122bdc972e029509f5053030e73645a0f70061e9e30d", 0x17}], 0x2, &(0x7f0000004080)=ANY=[@ANYBLOB="1c0000000000000001000000020000006c8e06d37a514dbd3309b547a1a017befca383bdfa8f7939ad4f657db001ff3dcd9e3312764c2a4415d36f956a6fb2d21ef32c11403a0580d2fb2594990d787aa1bb8c96b089908f40f4711575b2d1060051eb996462954dff586f97849b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES8=r8, @ANYBLOB="6b2b97e594f6f41c5c5cfdbd992d1f45cd476b54a8bfa95b123ab71118305ab54684cbf48fbdc71e53ec0a2632880cd2b5a06fcbd4e8f56faa1e0c668bf3f613c0c337e14a337095619224fdea64a7574d480a84f8351450be933baca117e0a10ac5c4e7b43cb1d1cf53210bc928cf57a178b5212a6ca4b9260fbe6fb19b7498a0141499a35db9bd110242bd8819c56119ba78dcf7a83ff022b0eeeaa45331e88186b8838b0bb04eb0e719ae02aafb2dec5fbdc7621828", @ANYRES32=0x0, @ANYRES64, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYRES8=r6, @ANYRES32], 0xb8, 0x4040001}}, {{&(0x7f0000000440)=@file={0x1, './bus/file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000004c0)="771d0defacef11b43dd99be98b2162a4130599ce4d6cb56c0f67c77d18eef4e5963118c176f014061a1653617e27524961a56a151ebac6b2e722287f07d353ea752c6b7430449ce6399e18e18c03d1e10edf21a842faec8c076bc95b183d4684feb7b7bf31523499141395aa65165dd22c470c", 0x73}, {&(0x7f0000000540)="4d9264f7a529a959f8109a69c2c19084fb3be0e6d28a632b55cadf467acb382a5ffef920727df80bdc689d4c4c292af3739659ad8ad4074477decc6373a1a8b829b50fa7b005", 0x46}, {&(0x7f00000005c0)="f50c2fb2caca1ed26e0047d0f84ed384713ee48307a339c2a3a4bcb58589a1223d7aeb8029625b554c713915bc82796dae09750edc9511db1976bdc8566419885cf79d9ae82cfe648cf8e82c9f1e36cf058e92d3b919d876fde376847b6ead6c1f62be421d4ede8a48de7c51a1394deace99dd0c4fbd14c19dffc827804868ac08f41bf9aa3d3b21aaa21d350fc79215c4e4a6c6699e1a7df82d", 0x9a}, {&(0x7f0000000680)="2a58f44e31261c2ae255dd78b56a9eb42e881219c26585aa69adc6ca3d9efa20c6415e3d511a0a1c5d6021313de25c8128e0c9b3b6f6f739cf0b643440aeaece1701a6add7009d170eeff751a6b1f9210ed12a372b476f30ae2a6042daa1e7", 0x5f}, {&(0x7f0000000700)="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", 0xfe}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee00}}}], 0x20, 0x4c080}}, {{&(0x7f00000008c0)=@file={0x0, './bus/file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="e2111e367fc3534a2b6b3a167cadfda92e76fb1adbfd31028420d28e87e81346c354f00dc26aeb2ac01b4159356893a3f1f3c176afd31eaebec786c198c0d1f02b99d298ed84dca9d8320762c27d991c65dac6036e87d462b885ac9e09089785a29243931fb6abaf4cceadb23156443bdf4bb884d93b62f6a47727683eca828f27b4a12f4fecfddfb60aa6541464f0d4c92938b53309b3068865846ec7bdbcf00395dd995990cf331102f2516d5ede346869e6bf253bfd53888ec75997239b739924594e9e91bd8397850064", 0xcc}, {&(0x7f0000000a40)="ebbcc0c387278e24e1dbdd4f39a8c11f22c1f74e95d1ea4534d33a2b1411c1e989ea131f1429d7e102cfc8f3a3cc339c35558efb5cfa3486d660d4c1dc2692751f88c217588e957d8256b2a9472ad75dec0917e24141fc56e99bed60cb7b6aef3f770e6b5ad9585d2731f7f7143d719688e289a72dad697f3a2a329e6a5e5e6a3095b5224a8ff61e2ee006045ab0045e217386126aa6ee22c545c5c4b801", 0x9e}, {0x0}, {&(0x7f0000000b40)="4e0147", 0x3}, {&(0x7f0000000b80)="a614bfdb0f0b79259ed430f5d5d27cac7badb3b62c162f63b354cea30f5c96ccaf423ed5fa25a169c2d5262e8660662e28802e0822c08af00428e3e0bec41a3b90bdcd8a84de04ce01ea31", 0x4b}, {&(0x7f0000000c00)="3aedfd65462e953afcc032068cebd13dd4a35704ceacd3d0cc5073d2fdad8565fd63194239d674c1b52ac86f40585df34e12fc24dc9c36d59c3f94b298418e", 0x3f}], 0x6, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xffffffffffffffff}}}], 0xc8, 0x7c60c9c9566d109}}, {{&(0x7f00000020c0)=@abs={0x1c5eeba3541ef870, 0x0, 0x4e24}, 0x6e, &(0x7f0000003b80)=[{&(0x7f0000003580)="c3049a39d82428cf61232c06e7368e584e603f3edb272a4137c232b026311faf03477815d448d39dc231c9c41364acd704715c717f830ffeea9e3d5de9d70f3b3ddf1c42984a4e620a70715d7a8c5290ec88921a494e0d5fde08257188eb62618062fc0723b776de76fb5e92e94c93dfb5da20f0db2c1b5c282c4b94d0606048f4fb0fb62331c848d049ff3b0d89a09615b5f8b2eda06f88b0efaa4210cd26b9314e5a765907c63ae3ecb5e96f7fab68b921c74bf61c38902531d0bfffce5d2299c7272317a5e34c93cae647", 0xcc}, {&(0x7f0000003340)}, {&(0x7f0000004d80)="e3fb3716cff3efcf946fcde66e537e0b84d0a658fb3cb5157172172a286deb2aed1216e430c5fb54c1dc9df55f21488509e4ee1706e73a7f23d66ddcdc93210adb7437be35d0a7392b42e25ededc50a6d32d0cfb015ea368fbe2ec039935483e63a62ec389bcbc3ee40ac372efd4d306ab178ad7eb8ad330083df34d94c55c07000dedb106a9dd1a84f67aae5633e81a8af01b6c01e560607dd3487521f8c9c753ee37e187567fc12c6bfa5cb7e8bc8b36dacf66f95d3d883411d483b1c6ae6f05b909b4506157ac9273f805eb4d96ad6ea66ca81977279a8ca8104157cb8cd9a52d57d62652e9d14b", 0xe9}, {&(0x7f0000003800)="6096e2effb93f21710d3387ea9887ca778cca0c8b538386974f843e97cb711d2416b605517723e17c28485ae7a955e69fc83005e8ac6debc21cd893bdae3dc673799e98ea1e0f530f0c426eb3a0d00271f80c7c3d383b76fa9c547c01542471ffdb1d4fd9efc8c966982f1498092d293d802f055470bb5e0c10345ad900b004942a659cbc313d772285ba63e7811ebc72db041844fc57fc15b98c560d9e54a69dc5579c5deb0f546beca8931a528e41fd97917dfc74135e8c23a7bcc47875e0e8dab12a3a9d569ecc5d7091169aacf27c9c1677884fd4dfe7283e9c76f", 0xdd}, {&(0x7f0000002140)="2d337721a2aa6af8fdc97b1211", 0xd}, {&(0x7f0000003900)="43617be377b15406b775ba9d88e0a99d586a4ca8de9f79645401c844fdb9b7a4a746de01355b656cdfdcf87353cd4b50a092d67497bb674dffcebfa9a68031bac4b2b9c8", 0x44}, {&(0x7f00000031c0)="5e0d4713f023f734bd26ad0790c7fe7769ace621f89027fc95cd7ca098a4598627923454155abcb7f97cc33d68b2f849f5d6dbfab0a0a7717a65b907187382a12747cfd7c49a89c06592aa9da9ccc015bab4be83f430ff015f3b718a6f3e0d3f88094e36e4701ded3c19c6af8cf127baa795fed20d007e00c2217c7743abe4b0f2df4f3b66373076afa910baa56f8f0205bd3fdf322c38b433ddf02c2297c6b843289a1b7ce37fc2e7a675c8000000000000000000d6f25f7e01ec39b2cf0d85555a88e82506ff128b6f78c59869f690df347bf27d53cdaa8fa59947", 0xdc}, {&(0x7f0000003a00)="4087dd67c01fca8db2c355a272d1ff223302486675cf1e4b1c5c76bda392dcbcf04776cea62bc7096f97153fde1ea7506b06cd9a26670e0bd385da6758d054a9890ec1b2faa9b1166a26c4b66806397a0bb62d18ba59a5c939dc2a39aa996e91a891279e6d40091a2cb3c1c9d66841b74238a9cb533979d012413bb81d17f1a3baab5f6cb00ad485b1675a255e69d753b8d874f908d7de4d38aabeb464391dccb4b3bb099a1ece4acebd48e7928a500ed93ef764a0045d2cb06c9b2b9771f7a79cbc2438b3a2c752c75a", 0xca}, {&(0x7f0000003b00)="c330b03d6640f57a8539b5552cf26ceeb86af50014349d76dc7e2528a5599da356aa8deecd84818634f8afa4435f64e961efc58626ac976f662cbf50cc21ba9ce0b7ca12009c1faee01d7b62af", 0x4d}], 0x9, &(0x7f0000003400)=[@cred={{0x1c, 0x1, 0x2, {r10, 0x0, r9}}}, @rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @rights={{0x30, 0x1, 0x1, [r7, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r10, r8, r9}}}], 0xd8, 0x8040}}, {{&(0x7f00000042c0)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004340)="bf829869f37edd9c7561fb0cce54af7f2789ff89fcd0cfff575c5b8752b1", 0x1e}, {&(0x7f0000004380)="c34c451ae1b59c54cbcdd3e49331081b750501bbb9bf04198d097e6cfdef4a85bd94d7d8b1951e72556cea8393214598969b292ebd6b6073192e7a30bec2daaf4fb4b86ef4e3a434f89df00da89192d4dd63b7cf7869a33bd1f20e84ba403e33917f2b69f98ff3225e26bd6a5e7349959152ffbb61493347e8bbf77cf3a66f2eeca97acad7650f2502590ecd", 0x8c}, {&(0x7f0000004440)='\f', 0x1}, {&(0x7f0000004480)="783d27de630f98c8b517764b78df62b01de49951c57be1930c7a0a6839eafb806361b9d6757e38f0d09fb91f08b9fc692670b8e261ac93593f32e5d7bb4d1d5e29082a27b5a70c2d42c9d3530b77466de2e6d304d35af78f5104c10732111b1791711a11bc263145fa410a3bfce6fe96a5ddf7624d", 0x75}, {&(0x7f0000004500)="7c161ed0bfbe2165bcaffc9e1712f6d5c47177e2c9a6cea90ca1223e77b404582d62893190e0f2ca8c2a7e55b0ec57a74d16f4d7847d3d5c5a9c7fa4ecd13de3772c81e80ccc6c9c023d79f9a812beff5bcdf664599a9851754f224ffa9eee6386ff4a14f30e2063f5f78bfe", 0x6c}, {&(0x7f0000004580)="b4aeef6d3a7b867d2cdd53e8de4bf74288e03e56445d9d88989bc96ab5e6b243f703d07948b857792f933192d8c43f0eddca6a6c724997cff833dc1e927050e77110847dda6e1c3ed5fef03467db43758b9d3deb2c5fe9991a0cbd4ef137f67a0fe54a844b0a24e0e4493552a589b153591397e94cf376d3c427d79d79951d346991065969b91cda9959937afc58ea9cc4cefe0fd55b29cd4c61dadd807036ecdf124bbb44d2b35161a8908f8679acd0b8f72b7127e132840a732b61a5d6e0a88335cad7ea2c9daf467a0b51085539e928774c6e50320bd0efce533143f032ec1e9814804db5dfb1", 0xe8}, {&(0x7f0000004680)="59efffaacd77be5fe684", 0xa}], 0x7, &(0x7f0000004740)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r6]}}], 0x60, 0x1}}, {{&(0x7f00000047c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004840)="ec1248328f61ccdceba8f597e6a3381eb33071c64f231f2a224c370a26fe6c7890dac64c99c14292973e0673e0526f433872", 0x32}, {&(0x7f0000004880)="c9d73f1bd9befea1aa6da8d26adcb0052a1594a25cfdff4b0ab669d90bcf1a51478f667ac397605fe7db5126492b5a86117622c042cdd504c4778738d467dda296a68e51811c366249054e6bdab4b2568f0d67e79034d33fc8215f1273451e09cbd3e7e0ae3042b19b31aad4", 0x6c}, {&(0x7f0000004900)="f2eeb8631a65a0c2252726464760ede197dfbcb1f1dc138f7f0a6e3dac62fdbb73332fe19cd1b9aa3957a9311f6580c22c19dd5b4c86ee0ca87b25e0ec585061b734aa0d96c5219fdb8005eff6d5bdffb0b31468637a90802b5da56b230199941f6656a7ef69b17a845da07a88686de93b5af0376bdc88ba6c434f321bacacdbb2672c1dca40855903f3876eb3fea95f450908161a0f01b3163aaed325b4dd5cf6", 0xa1}, {&(0x7f00000049c0)="9d0db06668d4eb743fa78a60cdbf8e403b953a6f2a13a07b221ecd4bd28ee3cf89ad076be46ba1c58e16dcac6cb2ec393fd2ae9b0a8dc3b430a66bcb966362d81d251fb8af1e", 0x46}, {&(0x7f0000004a40)="70b3ce60dbb7e2e044265885773df77c9c2d373bc1bf1075d6f1e147bd4b550d5893884c317f86263d5b8568634fbd42b179", 0x32}, {&(0x7f0000004a80)="8f0ff56d0b0395ec84476eef7b58951f79cf0d79c91b744f52311fc4c05b480c6185ffac7ab23be1ba7b65c0b14eb7852b552126e3ac2a22ee227a44ba0a1499c7e15baa15cc751c9c8493e3f76e9726dd9bd45c9922a71b9dcd89f21b87c2bb7175b476157f69984d54fe04c67c56f2a7087d9336f5463a4d3f156fe5b75a4a6ea363ace5e294995dd162907532b7d18a3709121153e91606d88688d91ac29a9b79e8312d2113633253ac93e41d6ef1b8051cc0b72d6951e3329f556275", 0xbe}], 0x6, &(0x7f0000004bc0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r9}}}], 0x20, 0x20000010}}], 0x6, 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002840)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fe"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000016c0)=@o_path={&(0x7f0000001680)='./file0\x00', 0x0, 0x4010, r3}, 0x18) (async) r13 = geteuid() sendmmsg$unix(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)="8d9e446e02b7d43fea7c51fef2231aaa10cbcb773e3c84f94a73f4bdbfb2ab75f42f387a6ffab31a6df61dbc57a1b265a3ab619aec3cb9470999fc098b0dac2a14edacba5891b3a2cf75af028f07d33fb4d14e8928755da30731c2df6a9e8ae525ef9418c4bbdc2b129be97d5c8ebde48e441ef091ab128fb31ff71e74077bd7f32c31ecd622da9c8b1fb688ca1c802a629c959ba2101bb9dbeddd022e4ab0a383dcb30e7c981bbe194c01c9", 0xac}, {&(0x7f0000000380)="9d6148e95615798ae0a458094826003d9b1a0605858c15ef8145056eef166ed0e73159477010a3485ece8be697874a5986578909762ab4626e6754925b30d1a9503051ec20a602cbe74305dfbe211300c41b65a4d52253b5b9b1", 0x5a}], 0x2, 0x0, 0x0, 0x840}}, {{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000480)="a5c6c02fe9bc71bebe02d42e2276a0bf0a457a2a7f62cd687509f0923bb40b63f3d92d734baa4d2f6198134e002bdde516be54cc6c8158188c0add3e426509d15376ec453ade00704b19958d2972be45f42d6e4775f0e20442a630eb3a523cfe73955a8389acd67d6a22004ce012c618c42808", 0x73}, {&(0x7f0000000500)="0aace7171b1b210add3c348c6a905b912e133a191c8addb77101d57930a51bb4708490045871e2746bb724957d6ea52d38fc253b0a54645666710a93d95d416904b41b30581bfb66", 0x48}, {&(0x7f0000000580)="f0f958e0a3e66311cd6bf8c7aae216f082a82adbbd1a41f0a72321bd00d2b4a6bedbcafe61330a7ff16937631b3cd5c0275201bfd00f1f48602d49ab96d6c4d26eec7247b2d04ba39db0c5b78055c03de4a5a120b73fe0fb32b062b17c0a37", 0x5f}, {&(0x7f0000000600)}, {&(0x7f0000000640)="5087ee6b913cf2d0f970195da0b32d325b747b917640fa8ec921541975280b56feaa167e2ef8e85331d54892b2703f8452f52d0acc40021ea2f7bf63282262e2e600c19948e251defe9d985fd214ca9345d386f62fad77f5ff73d21cb9bbb45cbdbaaf771eee5ad5dc2cc65d02c83462c2f1f3a5b7a76f03a606199a340dd12d4f5902ec92155571b88aa8b5408ffe594d2f1b9942852b5783975ee1b5b3f9cd88ba3de64dd8455d02231a02011511", 0xaf}, {&(0x7f0000000700)="6640171c9b4b8695246d1bc3e9f5091c0b709e7ebe1e48bb0bbc3865aba2b93d53a6f1a6d27e22415a4c3d428204d67e0e5fcffe30dcf01e34e21135d1153db6e22ae80a4b0f0a5f376898070f870cd23c2c035ab2e1cef6584dbe8c9b9fb52f46107e91000d369e463bb1566dde18219e4adec66b4803f5424675c6e752e9b7e9c7c560c530c7d79b09c29c2db04310f80239eeb7a2ddac3c3a8da7852f4a5c09b12c84975d42f277c6d31dbe17c3a76b9a4430d854db163127e8263d0d744ac48db561", 0xc4}, {&(0x7f0000000800)="30a2b2a23ca734d30e0b8832e1192e489a3487e1aafeb432910032d8cd68926f2b1f0238ca3cd5d6b7521be62397f27047c067f342fc047a70d158016fe3229a36b085935ca740cfcbde83caf4d30d4c5b0e551336785a7a9a2063e180f22ad56c51892bdd93e39ede785efa56fd39f02dd533aa7eab87b9f1af677aca64be5b500f2e3af2d8b7794f834e22b0b42e25fae1df9374c529c8fc795f4dc05a859675b43418bced", 0xa6}, {&(0x7f00000008c0)="21af48e2ac3de2f6c5993d70267dfd6182cb93895d420cd6632fb8bd78b79d8c54998d7de11bf004bc41aae2546d903f43a864ea6a", 0x35}, {&(0x7f0000000900)="69feeee957d5b739c79aed1e5490ce5b4f1779004f198c3e38e2da3fbea2762f30a74ff47c3bb78bc8f3859eb4863aefc35523e2c0f92a0019d7c935ffbc2508fe5caa438ce5b4f32b491529ab662f078bf116025e81a85dae81c85e18976542647922a79fbabe29e7f0475c44c04e6093b24ec7bf6a32c270962a3af87a1366f64363e564", 0x85}], 0x9, &(0x7f0000000f40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, r2, r0, r4, r4, 0xffffffffffffffff, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r4, 0xffffffffffffffff]}}], 0xd8, 0x40000c0}}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001040)="0e2b4b329fa2930e8d91f4e929d3731281f032f9c55726642d9d0d14bd590478fdc017a4b9e0ffda948c542c330af8", 0x2f}, {&(0x7f0000001080)="076a8215008c180a92d752a425af9144a01f9f59b6b650ca66d2ae9d547133bc6beeae8407cd63ebf45eeeff31651ef3bf82552f96a1399869d8c1721291085a475ce6cb11b8680d599f77055afb62d6de21feec6d31b547d568ecd66782feec711ad6978af56c5171898dd93f4421c1984d97a9257b378edf31", 0x7a}, {&(0x7f0000001100)="04daa02ec32c8b8676fe10abe5b93ccea0ecac2f8fe5052a3084740c74dcae4647eb345a4cd0fbf13a74305e724ed3a411893267c0036a5d3025c5560d02ebc8dfc12ba5f331953defcef1e269e76497b9aa387160321fe14a68eaad6342d4d22398b921a08b4ba395f999d24592e224bf0ef176265823901fda2671d1139e9b8501058cf3604693620af6b25b5e28b6e3da3a6dfb13a9ce2397c0ee26", 0x9d}, {&(0x7f00000011c0)="d7447be805a3e604fd7b9cf85ce06e264aeed68e69da47994255ae7f86b07eb1d3cd0ecbadd7fd9128e13f6e1ae7ac064fa6c26947a47cffa01e4139dc7c199cb929e0461b729c7d57bcfc64985c746200e0b34089dace796f739cd6715b84ac6ba3cf1691da53fc2b687c3f7e4b3a29262516a65833", 0x76}], 0x4, &(0x7f0000001700)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r1, r0, r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r4, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, r9}}}, @rights={{0x24, 0x1, 0x1, [r4, r11, r12, r4, r2]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, r13, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r0, r2, r3]}}], 0x128, 0x14}}], 0x3, 0x44888) [ 462.351060][T11274] binder_alloc: binder_alloc_mmap_handler: 11268 20bfe000-20ffe000 already mapped failed -16 11:34:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') read$dsp(r0, &(0x7f00000001c0)=""/260, 0x104) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000540)={0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6, 0x3, 0x0, r2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x6, 0x7, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x3, 0x4, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000700)={&(0x7f00000004c0)=[r1, r2, r3, r4, 0x0, r6, r7], 0x7, r8, r9, 0x9c2, 0x100, 0xd098, 0x6, {0x401, 0x80, 0x5, 0xd91, 0xe20d, 0x0, 0x8, 0x200, 0x6, 0x6, 0x101, 0x1, 0x14000000, 0x6, "c3572cb90b2299b2b8e4a9aa9a54669a7f81591173cb1eff6f325474fbc4789d"}}) r10 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r11 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r11, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r10, r11, 0x0, 0x100000000000042) [ 462.400113][T11271] binder_alloc: 11268: binder_alloc_buf, no vma 11:34:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') read$dsp(r0, &(0x7f00000001c0)=""/260, 0x104) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x3, 0x8}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000540)={0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0]}) (rerun: 64) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6, 0x3, 0x0, r2}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x6, 0x7, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, r6}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x3, 0x4, 0x8, 0x2}) (rerun: 64) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000700)={&(0x7f00000004c0)=[r1, r2, r3, r4, 0x0, r6, r7], 0x7, r8, r9, 0x9c2, 0x100, 0xd098, 0x6, {0x401, 0x80, 0x5, 0xd91, 0xe20d, 0x0, 0x8, 0x200, 0x6, 0x6, 0x101, 0x1, 0x14000000, 0x6, "c3572cb90b2299b2b8e4a9aa9a54669a7f81591173cb1eff6f325474fbc4789d"}}) (async) r10 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r11 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r11, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r10, r11, 0x0, 0x100000000000042) [ 462.605360][T11280] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.618287][T11286] binder: 11284:11286 unknown command 0 [ 462.639317][T11286] binder: 11284:11286 ioctl c0306201 20000440 returned -22 11:34:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:48 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000000)={@dev, r3}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) (async, rerun: 64) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) (async) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000001700)=0x4) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='generic_add_lease\x00'}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000003480), 0x20000, 0x0) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000034c0), &(0x7f0000003500)=0xc) (async, rerun: 64) r8 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x6}, 0x90) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000400)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000480)=""/103, 0x67}, {&(0x7f0000000880)=""/111, 0x6f}, {&(0x7f0000000c80)=""/90, 0x5a}], 0x5}, 0x40}], 0x1, 0x10100, &(0x7f00000005c0)={r10, r11+60000000}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x74) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x1, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x40}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x34, 0x24, &(0x7f00000002c0)="5417163e63e4d8c0d108aa58f17ace35313202db251bc1af2f2648094423886288d1dec0581833eb7ee6679ece9d8c1d15575cb3", &(0x7f00000003c0)=""/36, 0x8, 0x0, 0x86, 0xd8, &(0x7f0000000500)="d73eea3e2506006c808fdc4b6ff82ebb1db300eee1f295fa758d1c70d8dc974aed586fd2636b9bb3580da62ae05ff08ac2809b1f5a61b50271a617658837fb64a4bc2d629a02a3b04c6d28f4bfa00a5c573c0527c723ba28e22255bda16d208a17ab4d306fbfd9cd2162ace4e6fb5fbf60d3b69dcb2714dc44b105817b2754ae45c2cf32d764", &(0x7f0000000640)="2e0374bcb545fe9b95cc150bdb02a205d0f7e71557da6fafd292c66d015069115ce3e78256858213dd5244dd31b9599e100ccf41c17503b467c3a40ff04abeec053d11831d7937f8ffb98fd1c51086d1f0802cef9f92d14b5195a85a1afea6898cf3b96f6281e39a605717397acb59f1a187f012320bac12d8a10c0aca7f000854fd29d705ae76a94f6b67a6d7c585c1a7eb5f3138b41ba41f04ecb90fc79071c2f4380d96c635dfce9dfaec8048125c21e73df60f5e9a94b8c8f310a9bb5673ac24108b12646891f7fda8ad85cb1a4dfa9d4bfaa02b4ab7", 0x2, 0x0, 0xffff}, 0x50) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) 11:34:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan4\x00'}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/572], 0x23c) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000005c0)={0x0, 0x7, 0x2, {0x7, @win={{0x9, 0x6, 0x3, 0xfffffffd}, 0x5, 0xfffffffd, &(0x7f0000000200)={{0x81, 0x401, 0x502c86e6, 0x80000001}, &(0x7f00000001c0)={{0xb175, 0x40, 0xe22}, &(0x7f0000000180)={{0x6, 0x60000000, 0x9, 0x8}}}}, 0xffff, &(0x7f0000000240)="5de206f4731fe1be362f8c46d14dce91b709e84860e3a6f97c4e4b2175b896ec9dff750c68e8521876a65746838b3721", 0x2}}, 0x5}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) [ 462.660970][T11286] binder_alloc: binder_alloc_mmap_handler: 11284 20bfe000-20ffe000 already mapped failed -16 [ 462.700274][T11286] binder_alloc: 11284: binder_alloc_buf, no vma 11:34:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') read$dsp(r0, &(0x7f00000001c0)=""/260, 0x104) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x3, 0x8}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000540)={0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6, 0x3, 0x0, r2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x8, 0x6, 0x7, 0x4}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x4, 0x6, 0x7}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000500)=[0x0, 0x0]}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x3, 0x4, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000700)={&(0x7f00000004c0)=[r1, r2, r3, r4, 0x0, r6, r7], 0x7, r8, r9, 0x9c2, 0x100, 0xd098, 0x6, {0x401, 0x80, 0x5, 0xd91, 0xe20d, 0x0, 0x8, 0x200, 0x6, 0x6, 0x101, 0x1, 0x14000000, 0x6, "c3572cb90b2299b2b8e4a9aa9a54669a7f81591173cb1eff6f325474fbc4789d"}}) r10 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r11 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r11, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r10, r11, 0x0, 0x100000000000042) [ 462.852145][T11301] binder: BINDER_SET_CONTEXT_MGR already set [ 462.874546][T11301] binder: 11300:11301 ioctl 4018620d 20000040 returned -16 [ 462.893132][T11301] binder: 11300:11301 unknown command 0 11:34:48 executing program 3: write$tun(0xffffffffffffffff, &(0x7f0000000380)={@void, @val={0x1, 0x1, 0x9, 0x6, 0xe5d6, 0x8}, @llc={@llc={0xfc, 0xf4, "c2", "1f2b045638415bde5c16f1bb91dafd0540a2725a101fa6dc969a41d548593a1c9051498e8bb19dbbbcfaff9d2a3db36afedf2b8e2951ba2fe93589facc3b151a9c09374a3f13effda54721e265b3a954fe80d7c6f04cb09fb63fb490"}}}, 0x69) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)={{0x4, 0xc0}, {0x85, 0x1}, 0x80000001, 0x2, 0xee}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000fb713efb2aeceb53b2326efabc3137becb46653a864d49d88d7e1e49eb26b3785a3c81f6ecc571929689e8ac7af452a303fc9946cd35f30d3a866e7ee09fc7433faa6890eefe7b272a432af299144a92"]) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x22c, @tick=0x4, 0xfe, {0x20, 0x2}, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) close(r1) [ 462.906182][T11301] binder: 11300:11301 ioctl c0306201 20000440 returned -22 [ 462.930264][T11301] binder_alloc: binder_alloc_mmap_handler: 11300 20bfe000-20ffe000 already mapped failed -16 11:34:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x1cb782) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\xaeX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x6) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xcf) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x239, 0xffffa273) sendfile(r0, r1, 0x0, 0x100000000000042) r2 = fsmount(0xffffffffffffffff, 0x1, 0x70) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) 11:34:48 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan4\x00'}) (async) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/572], 0x23c) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000005c0)={0x0, 0x7, 0x2, {0x7, @win={{0x9, 0x6, 0x3, 0xfffffffd}, 0x5, 0xfffffffd, &(0x7f0000000200)={{0x81, 0x401, 0x502c86e6, 0x80000001}, &(0x7f00000001c0)={{0xb175, 0x40, 0xe22}, &(0x7f0000000180)={{0x6, 0x60000000, 0x9, 0x8}}}}, 0xffff, &(0x7f0000000240)="5de206f4731fe1be362f8c46d14dce91b709e84860e3a6f97c4e4b2175b896ec9dff750c68e8521876a65746838b3721", 0x2}}, 0x5}) (async) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) [ 463.123113][T11315] binder: 11313:11315 unknown command 0 [ 463.141842][ T28] audit: type=1400 audit(1706355288.678:305): avc: denied { append } for pid=11316 comm="syz-executor.1" name="loop9" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 463.153075][T11315] binder: 11313:11315 ioctl c0306201 20000440 returned -22 11:34:48 executing program 3: write$tun(0xffffffffffffffff, &(0x7f0000000380)={@void, @val={0x1, 0x1, 0x9, 0x6, 0xe5d6, 0x8}, @llc={@llc={0xfc, 0xf4, "c2", "1f2b045638415bde5c16f1bb91dafd0540a2725a101fa6dc969a41d548593a1c9051498e8bb19dbbbcfaff9d2a3db36afedf2b8e2951ba2fe93589facc3b151a9c09374a3f13effda54721e265b3a954fe80d7c6f04cb09fb63fb490"}}}, 0x69) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async, rerun: 32) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async, rerun: 32) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)={{0x4, 0xc0}, {0x85, 0x1}, 0x80000001, 0x2, 0xee}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000fb713efb2aeceb53b2326efabc3137becb46653a864d49d88d7e1e49eb26b3785a3c81f6ecc571929689e8ac7af452a303fc9946cd35f30d3a866e7ee09fc7433faa6890eefe7b272a432af299144a92"]) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x22c, @tick=0x4, 0xfe, {0x20, 0x2}, 0x0, 0x0, 0x1}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (rerun: 64) close(r1) 11:34:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x1cb782) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\xaeX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x6) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xcf) (async) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x239, 0xffffa273) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) r2 = fsmount(0xffffffffffffffff, 0x1, 0x70) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) 11:34:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 463.250996][T11322] binder_alloc: binder_alloc_mmap_handler: 11313 20bfe000-20ffe000 already mapped failed -16 [ 463.306837][T11333] binder_alloc: 11313: binder_alloc_buf, no vma 11:34:48 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x651e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:48 executing program 3: write$tun(0xffffffffffffffff, &(0x7f0000000380)={@void, @val={0x1, 0x1, 0x9, 0x6, 0xe5d6, 0x8}, @llc={@llc={0xfc, 0xf4, "c2", "1f2b045638415bde5c16f1bb91dafd0540a2725a101fa6dc969a41d548593a1c9051498e8bb19dbbbcfaff9d2a3db36afedf2b8e2951ba2fe93589facc3b151a9c09374a3f13effda54721e265b3a954fe80d7c6f04cb09fb63fb490"}}}, 0x69) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)={{0x4, 0xc0}, {0x85, 0x1}, 0x80000001, 0x2, 0xee}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000fb713efb2aeceb53b2326efabc3137becb46653a864d49d88d7e1e49eb26b3785a3c81f6ecc571929689e8ac7af452a303fc9946cd35f30d3a866e7ee09fc7433faa6890eefe7b272a432af299144a92"]) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x22c, @tick=0x4, 0xfe, {0x20, 0x2}, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) close(r1) 11:34:48 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:48 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x1cb782) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\xaeX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x6) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xcf) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x239, 0xffffa273) sendfile(r0, r1, 0x0, 0x100000000000042) r2 = fsmount(0xffffffffffffffff, 0x1, 0x70) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x1cb782) (async) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\xaeX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x6) (async) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xcf) (async) pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1, 0x239, 0xffffa273) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) fsmount(0xffffffffffffffff, 0x1, 0x70) (async) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x0, 0x0) (async) [ 463.544839][T11342] binder: 11338:11342 unknown command 0 [ 463.566645][T11342] binder: 11338:11342 ioctl c0306201 20000440 returned -22 11:34:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x40, 0x2, 0x0, @time={0x1, 0x1000}, {0x6, 0x2}, {0x3, 0x70}, @addr={0x20, 0x2}}, {0x7f, 0xfd, 0x6, 0x1, @tick=0x9, {0x1, 0x1}, {0x40, 0xe7}, @connect={{0xff, 0x1}, {0x8, 0x1}}}], 0x38) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x8b, 0x0, 0x0, 'queue1\x00', 0x401}) 11:34:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000009, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x26, 0x5, 0x80000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="180000009ad1e3520000000000000000000080186700000b00040000740000003f00000018000000b10700000000c1d3d2ff040036f8571277f47ee1d9c24f879f0366cd7983880158858dcc20f6504c", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa20000ffffb7030000080000006d5f664aa1d2b70400000000000085000000820000009500"/72], &(0x7f0000000100)='GPL\x00', 0x2, 0x55, &(0x7f0000000140)=""/85, 0x41000, 0x9, '\x00', 0x0, 0xb912ddce62719de5, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0xa, 0x3ff, 0xffffffff}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x7ff}, 0x90) sendfile(r3, r2, &(0x7f0000000000)=0x101, 0x1000100) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) name_to_handle_at(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@orangefs_parent={0x28, 0x2, {{"153e101f4e68440b58660473ae7884ef"}, {"d53c158e47e9315f1e207c99359f5ed4"}}}, &(0x7f0000000280), 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) [ 463.594199][T11342] binder_alloc: binder_alloc_mmap_handler: 11338 20bfe000-20ffe000 already mapped failed -16 [ 463.619942][T11342] binder_alloc: 11338: binder_alloc_buf, no vma 11:34:49 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan4\x00'}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/572], 0x23c) (async) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000005c0)={0x0, 0x7, 0x2, {0x7, @win={{0x9, 0x6, 0x3, 0xfffffffd}, 0x5, 0xfffffffd, &(0x7f0000000200)={{0x81, 0x401, 0x502c86e6, 0x80000001}, &(0x7f00000001c0)={{0xb175, 0x40, 0xe22}, &(0x7f0000000180)={{0x6, 0x60000000, 0x9, 0x8}}}}, 0xffff, &(0x7f0000000240)="5de206f4731fe1be362f8c46d14dce91b709e84860e3a6f97c4e4b2175b896ec9dff750c68e8521876a65746838b3721", 0x2}}, 0x5}) (async) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:34:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x40, 0x2, 0x0, @time={0x1, 0x1000}, {0x6, 0x2}, {0x3, 0x70}, @addr={0x20, 0x2}}, {0x7f, 0xfd, 0x6, 0x1, @tick=0x9, {0x1, 0x1}, {0x40, 0xe7}, @connect={{0xff, 0x1}, {0x8, 0x1}}}], 0x38) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x8b, 0x0, 0x0, 'queue1\x00', 0x401}) 11:34:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000009, 0x103382) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) (async) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x26, 0x5, 0x80000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="180000009ad1e3520000000000000000000080186700000b00040000740000003f00000018000000b10700000000c1d3d2ff040036f8571277f47ee1d9c24f879f0366cd7983880158858dcc20f6504c", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa20000ffffb7030000080000006d5f664aa1d2b70400000000000085000000820000009500"/72], &(0x7f0000000100)='GPL\x00', 0x2, 0x55, &(0x7f0000000140)=""/85, 0x41000, 0x9, '\x00', 0x0, 0xb912ddce62719de5, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0xa, 0x3ff, 0xffffffff}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x7ff}, 0x90) sendfile(r3, r2, &(0x7f0000000000)=0x101, 0x1000100) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) name_to_handle_at(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@orangefs_parent={0x28, 0x2, {{"153e101f4e68440b58660473ae7884ef"}, {"d53c158e47e9315f1e207c99359f5ed4"}}}, &(0x7f0000000280), 0x0) (async) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) 11:34:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 463.912066][T11364] binder: 11359:11364 unknown command 0 [ 463.934549][T11364] binder: 11359:11364 ioctl c0306201 20000440 returned -22 11:34:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x40, 0x2, 0x0, @time={0x1, 0x1000}, {0x6, 0x2}, {0x3, 0x70}, @addr={0x20, 0x2}}, {0x7f, 0xfd, 0x6, 0x1, @tick=0x9, {0x1, 0x1}, {0x40, 0xe7}, @connect={{0xff, 0x1}, {0x8, 0x1}}}], 0x38) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x8b, 0x0, 0x0, 'queue1\x00', 0x401}) [ 463.967575][T11369] binder_alloc: 11359: binder_alloc_buf, no vma 11:34:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x100000009, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) (async) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x26, 0x5, 0x80000001) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="180000009ad1e3520000000000000000000080186700000b00040000740000003f00000018000000b10700000000c1d3d2ff040036f8571277f47ee1d9c24f879f0366cd7983880158858dcc20f6504c", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa20000ffffb7030000080000006d5f664aa1d2b70400000000000085000000820000009500"/72], &(0x7f0000000100)='GPL\x00', 0x2, 0x55, &(0x7f0000000140)=""/85, 0x41000, 0x9, '\x00', 0x0, 0xb912ddce62719de5, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0xa, 0x3ff, 0xffffffff}, 0x10, 0xffffffffffffffff, r1, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x7ff}, 0x90) sendfile(r3, r2, &(0x7f0000000000)=0x101, 0x1000100) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) name_to_handle_at(r4, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@orangefs_parent={0x28, 0x2, {{"153e101f4e68440b58660473ae7884ef"}, {"d53c158e47e9315f1e207c99359f5ed4"}}}, &(0x7f0000000280), 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r2) 11:34:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x561c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x228, @time={0xfc0, 0xfff}, 0x9, {0x1, 0x3}, 0x81, 0x1, 0x8e}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:49 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000180), 0x1001) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:34:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x561c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x228, @time={0xfc0, 0xfff}, 0x9, {0x1, 0x3}, 0x81, 0x1, 0x8e}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x561c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x228, @time={0xfc0, 0xfff}, 0x9, {0x1, 0x3}, 0x81, 0x1, 0x8e}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) [ 464.228893][T11381] binder: 11379:11381 unknown command 0 [ 464.263019][T11381] binder: 11379:11381 ioctl c0306201 20000440 returned -22 11:34:49 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f00000007c0)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90\x92B0\xfb2\xb7\xd4\\jl\xdd\xfaK|\xffLp\x0e\xf8\x8f\f\x14\'\xa3\x12\x9d6\xf80\xf2H\x97\xd0\xfd\xe4\xee\xc4\x01\x971\xac+\x81^\x88KH\xda\xb3\xb8\x1f\x9b<\x0eE\xea\xef\xea\xcd\x94\xbcf\xe18\xea(\x18\xc2\xab\xcb\x98\xc9}\xa1\xd4u\xe8m}\xfb\x15 I\xe3\xea\xa3\x89y\xbf\xddh\x1d= \xf7[\xb4\x8a:\x88:\xe9\xd1\xb2hH\x94h\x11\xb7:\xbc\x9f\x12Rf\xf1 o\xafZ\xd82P`5\xaf\xbc\x1az+\x88,)\x8d\fA\x05\x96\x15^J\x8aq\x13\x9d\xc1O\xcf`\xa0w\x18\xc9z\x19=\xf0]\\\x7f\xab\xf7\xc6,\x92\x04-\x01\a\xbd;\xc4\xc4Z\xc3Z6\x0f\x0ed\x9b\xa1\x8a\x86\xda\r\xd5\x14f\x93\xcc;`\xc4\x7fn\xc5K\xc0YW\x1eR\x04\x9f\xd9)\x13!\xd7\x9d<\xb7', 0x4) pwritev(r1, &(0x7f0000000000), 0x0, 0x7fff, 0x1) sendfile(r0, r1, 0x0, 0x100000000000042) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x2, 0x0, {{0x19, 0x4, 0x0, 0x6, 0x64, 0x67, 0x0, 0xe0, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x27, 0x4b, [@dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @private=0xa010100, @remote, @local, @loopback, @empty, @loopback]}, @lsrr={0x83, 0x1b, 0x82, [@loopback, @multicast1, @local, @multicast1, @loopback, @multicast2]}, @rr={0x7, 0xb, 0x59, [@loopback, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@delneigh={0x68, 0x1d, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x40, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_MASTER={0x8, 0x9, 0x10000}, @NDA_NH_ID={0x8, 0xd, 0xfc9}, @NDA_LLADDR={0xa, 0x2, @random="bf5ea527ed8c"}, @NDA_PROBES={0x8, 0x4, 0x2}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_IFINDEX={0x8, 0x8, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) 11:34:49 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000180), 0x1001) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:34:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 464.321735][T11381] binder_alloc: 11379: binder_alloc_buf, no vma 11:34:49 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:49 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x561c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000100)={0x228, @time={0xfc0, 0xfff}, 0x9, {0x1, 0x3}, 0x81, 0x1, 0x8e}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:50 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x3, 0x7f, 0x1, 'queue1\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0x92}, @raw32={[0x0, 0x0, 0x7ff]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:50 executing program 0: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000180), 0x1001) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) [ 464.540991][T11405] binder: 11399:11405 unknown command 0 [ 464.575987][T11405] binder: 11399:11405 ioctl c0306201 20000440 returned -22 11:34:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f00000007c0)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90\x92B0\xfb2\xb7\xd4\\jl\xdd\xfaK|\xffLp\x0e\xf8\x8f\f\x14\'\xa3\x12\x9d6\xf80\xf2H\x97\xd0\xfd\xe4\xee\xc4\x01\x971\xac+\x81^\x88KH\xda\xb3\xb8\x1f\x9b<\x0eE\xea\xef\xea\xcd\x94\xbcf\xe18\xea(\x18\xc2\xab\xcb\x98\xc9}\xa1\xd4u\xe8m}\xfb\x15 I\xe3\xea\xa3\x89y\xbf\xddh\x1d= \xf7[\xb4\x8a:\x88:\xe9\xd1\xb2hH\x94h\x11\xb7:\xbc\x9f\x12Rf\xf1 o\xafZ\xd82P`5\xaf\xbc\x1az+\x88,)\x8d\fA\x05\x96\x15^J\x8aq\x13\x9d\xc1O\xcf`\xa0w\x18\xc9z\x19=\xf0]\\\x7f\xab\xf7\xc6,\x92\x04-\x01\a\xbd;\xc4\xc4Z\xc3Z6\x0f\x0ed\x9b\xa1\x8a\x86\xda\r\xd5\x14f\x93\xcc;`\xc4\x7fn\xc5K\xc0YW\x1eR\x04\x9f\xd9)\x13!\xd7\x9d<\xb7', 0x4) pwritev(r1, &(0x7f0000000000), 0x0, 0x7fff, 0x1) sendfile(r0, r1, 0x0, 0x100000000000042) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x2, 0x0, {{0x19, 0x4, 0x0, 0x6, 0x64, 0x67, 0x0, 0xe0, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x27, 0x4b, [@dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @private=0xa010100, @remote, @local, @loopback, @empty, @loopback]}, @lsrr={0x83, 0x1b, 0x82, [@loopback, @multicast1, @local, @multicast1, @loopback, @multicast2]}, @rr={0x7, 0xb, 0x59, [@loopback, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@delneigh={0x68, 0x1d, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x40, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_MASTER={0x8, 0x9, 0x10000}, @NDA_NH_ID={0x8, 0xd, 0xfc9}, @NDA_LLADDR={0xa, 0x2, @random="bf5ea527ed8c"}, @NDA_PROBES={0x8, 0x4, 0x2}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_IFINDEX={0x8, 0x8, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) memfd_create(&(0x7f00000007c0)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90\x92B0\xfb2\xb7\xd4\\jl\xdd\xfaK|\xffLp\x0e\xf8\x8f\f\x14\'\xa3\x12\x9d6\xf80\xf2H\x97\xd0\xfd\xe4\xee\xc4\x01\x971\xac+\x81^\x88KH\xda\xb3\xb8\x1f\x9b<\x0eE\xea\xef\xea\xcd\x94\xbcf\xe18\xea(\x18\xc2\xab\xcb\x98\xc9}\xa1\xd4u\xe8m}\xfb\x15 I\xe3\xea\xa3\x89y\xbf\xddh\x1d= \xf7[\xb4\x8a:\x88:\xe9\xd1\xb2hH\x94h\x11\xb7:\xbc\x9f\x12Rf\xf1 o\xafZ\xd82P`5\xaf\xbc\x1az+\x88,)\x8d\fA\x05\x96\x15^J\x8aq\x13\x9d\xc1O\xcf`\xa0w\x18\xc9z\x19=\xf0]\\\x7f\xab\xf7\xc6,\x92\x04-\x01\a\xbd;\xc4\xc4Z\xc3Z6\x0f\x0ed\x9b\xa1\x8a\x86\xda\r\xd5\x14f\x93\xcc;`\xc4\x7fn\xc5K\xc0YW\x1eR\x04\x9f\xd9)\x13!\xd7\x9d<\xb7', 0x4) (async) pwritev(r1, &(0x7f0000000000), 0x0, 0x7fff, 0x1) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) (async) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x2, 0x0, {{0x19, 0x4, 0x0, 0x6, 0x64, 0x67, 0x0, 0xe0, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x27, 0x4b, [@dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @private=0xa010100, @remote, @local, @loopback, @empty, @loopback]}, @lsrr={0x83, 0x1b, 0x82, [@loopback, @multicast1, @local, @multicast1, @loopback, @multicast2]}, @rr={0x7, 0xb, 0x59, [@loopback, @private=0xa010102]}]}}}}}) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@delneigh={0x68, 0x1d, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x40, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_MASTER={0x8, 0x9, 0x10000}, @NDA_NH_ID={0x8, 0xd, 0xfc9}, @NDA_LLADDR={0xa, 0x2, @random="bf5ea527ed8c"}, @NDA_PROBES={0x8, 0x4, 0x2}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_IFINDEX={0x8, 0x8, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) [ 464.603113][T11405] binder_alloc: 11399: binder_alloc_buf, no vma 11:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:50 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x3, 0x7f, 0x1, 'queue1\x00', 0x3}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0x92}, @raw32={[0x0, 0x0, 0x7ff]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x3, 0x7f, 0x1, 'queue1\x00', 0x3}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0x92}, @raw32={[0x0, 0x0, 0x7ff]}}], 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) 11:34:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:50 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x84000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0xc, @win={{0x5, 0x3, 0x7, 0x2}, 0x4, 0x0, &(0x7f00000001c0)={{0x8, 0x8, 0x5, 0x7}, &(0x7f0000000180)={{0x0, 0x80000001, 0x6, 0xc3}, &(0x7f0000000000)={{0x9c7, 0xffff91f1, 0x8, 0x3}}}}, 0x4, &(0x7f0000000080)="95b8cac9621260b28b153fca321ca38f08effaf4eb320dcf078b23bf29ac49bccf896c0227d254c7edfb971eddce9624dc59e38745c43575e26c437e8a9ddb2eb506969bb4330629f4b302da789e0fb88286933e1ca386db505e78e3fdc4be037d9c", 0x2a}}) 11:34:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 464.808369][T11414] binder: 11413:11414 unknown command 0 [ 464.825016][T11414] binder: 11413:11414 ioctl c0306201 20000440 returned -22 [ 464.848016][T11414] binder_alloc: 11413: binder_alloc_buf, no vma 11:34:50 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x3, 0x7f, 0x1, 'queue1\x00', 0x3}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x5, 0x0, 0x0, @tick, {}, {0x0, 0x92}, @raw32={[0x0, 0x0, 0x7ff]}}], 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0xe0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:50 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x84000) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0xc, @win={{0x5, 0x3, 0x7, 0x2}, 0x4, 0x0, &(0x7f00000001c0)={{0x8, 0x8, 0x5, 0x7}, &(0x7f0000000180)={{0x0, 0x80000001, 0x6, 0xc3}, &(0x7f0000000000)={{0x9c7, 0xffff91f1, 0x8, 0x3}}}}, 0x4, &(0x7f0000000080)="95b8cac9621260b28b153fca321ca38f08effaf4eb320dcf078b23bf29ac49bccf896c0227d254c7edfb971eddce9624dc59e38745c43575e26c437e8a9ddb2eb506969bb4330629f4b302da789e0fb88286933e1ca386db505e78e3fdc4be037d9c", 0x2a}}) 11:34:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 464.997045][T11432] binder: 11430:11432 unknown command 0 [ 465.008605][T11432] binder: 11430:11432 ioctl c0306201 20000440 returned -22 [ 465.022205][T11432] binder_alloc: 11430: binder_alloc_buf, no vma 11:34:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f00000007c0)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90\x92B0\xfb2\xb7\xd4\\jl\xdd\xfaK|\xffLp\x0e\xf8\x8f\f\x14\'\xa3\x12\x9d6\xf80\xf2H\x97\xd0\xfd\xe4\xee\xc4\x01\x971\xac+\x81^\x88KH\xda\xb3\xb8\x1f\x9b<\x0eE\xea\xef\xea\xcd\x94\xbcf\xe18\xea(\x18\xc2\xab\xcb\x98\xc9}\xa1\xd4u\xe8m}\xfb\x15 I\xe3\xea\xa3\x89y\xbf\xddh\x1d= \xf7[\xb4\x8a:\x88:\xe9\xd1\xb2hH\x94h\x11\xb7:\xbc\x9f\x12Rf\xf1 o\xafZ\xd82P`5\xaf\xbc\x1az+\x88,)\x8d\fA\x05\x96\x15^J\x8aq\x13\x9d\xc1O\xcf`\xa0w\x18\xc9z\x19=\xf0]\\\x7f\xab\xf7\xc6,\x92\x04-\x01\a\xbd;\xc4\xc4Z\xc3Z6\x0f\x0ed\x9b\xa1\x8a\x86\xda\r\xd5\x14f\x93\xcc;`\xc4\x7fn\xc5K\xc0YW\x1eR\x04\x9f\xd9)\x13!\xd7\x9d<\xb7', 0x4) pwritev(r1, &(0x7f0000000000), 0x0, 0x7fff, 0x1) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x3) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x80, 0x80, 0x2, 0x0, {{0x19, 0x4, 0x0, 0x6, 0x64, 0x67, 0x0, 0xe0, 0x4, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x27, 0x4b, [@dev={0xac, 0x14, 0x14, 0xa}, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @private=0xa010100, @remote, @local, @loopback, @empty, @loopback]}, @lsrr={0x83, 0x1b, 0x82, [@loopback, @multicast1, @local, @multicast1, @loopback, @multicast2]}, @rr={0x7, 0xb, 0x59, [@loopback, @private=0xa010102]}]}}}}}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=@delneigh={0x68, 0x1d, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x0, 0x40, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_MASTER={0x8, 0x9, 0x10000}, @NDA_NH_ID={0x8, 0xd, 0xfc9}, @NDA_LLADDR={0xa, 0x2, @random="bf5ea527ed8c"}, @NDA_PROBES={0x8, 0x4, 0x2}, @NDA_SRC_VNI={0x8, 0xb, 0x6}, @NDA_IFINDEX={0x8, 0x8, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x800) 11:34:50 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) write$sndseq(r0, &(0x7f0000000100)=[{0x9, 0xff, 0x7, 0x5, @time={0xffff, 0x9}, {0x0, 0x1}, {0x4, 0x1}, @queue={0x2, {0x1000, 0x9df7659}}}], 0x1c) 11:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:50 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x84000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0xc, @win={{0x5, 0x3, 0x7, 0x2}, 0x4, 0x0, &(0x7f00000001c0)={{0x8, 0x8, 0x5, 0x7}, &(0x7f0000000180)={{0x0, 0x80000001, 0x6, 0xc3}, &(0x7f0000000000)={{0x9c7, 0xffff91f1, 0x8, 0x3}}}}, 0x4, &(0x7f0000000080)="95b8cac9621260b28b153fca321ca38f08effaf4eb320dcf078b23bf29ac49bccf896c0227d254c7edfb971eddce9624dc59e38745c43575e26c437e8a9ddb2eb506969bb4330629f4b302da789e0fb88286933e1ca386db505e78e3fdc4be037d9c", 0x2a}}) 11:34:50 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 465.182779][T11445] binder: 11443:11445 unknown command 0 [ 465.199654][T11445] binder: 11443:11445 ioctl c0306201 20000440 returned -22 [ 465.210803][T11445] binder_alloc: 11443: binder_alloc_buf, no vma 11:34:50 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) write$sndseq(r0, &(0x7f0000000100)=[{0x9, 0xff, 0x7, 0x5, @time={0xffff, 0x9}, {0x0, 0x1}, {0x4, 0x1}, @queue={0x2, {0x1000, 0x9df7659}}}], 0x1c) 11:34:50 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103182) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0xfffffffff0000000, 0x8000}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400000) r3 = socket(0xa, 0x1, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x6, 0x21, 0x0, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0x5, 0x8001, 0x6, 0x110d, 0x1ff, 0xffffffff, {0x0, @in6={{0xa, 0x4e20, 0x0, @remote, 0x11}}, 0x3, 0x7f, 0x7fffffff, 0x9, 0x100}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x80, 0x5, 0x6, 0x8, r5}, &(0x7f00000002c0)=0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$LOOP_CLR_FD(r2, 0x4c01) sendfile(r0, r1, 0x0, 0x100000000000042) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) [ 465.276022][ T28] audit: type=1400 audit(1706355290.808:306): avc: denied { ioctl } for pid=11441 comm="syz-executor.3" path="socket:[28133]" dev="sockfs" ino=28133 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 11:34:50 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103182) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0xfffffffff0000000, 0x8000}) (async) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400000) (async) r3 = socket(0xa, 0x1, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x6, 0x21, 0x0, 0x10) (async, rerun: 64) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0x5, 0x8001, 0x6, 0x110d, 0x1ff, 0xffffffff, {0x0, @in6={{0xa, 0x4e20, 0x0, @remote, 0x11}}, 0x3, 0x7f, 0x7fffffff, 0x9, 0x100}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x80, 0x5, 0x6, 0x8, r5}, &(0x7f00000002c0)=0x10) (async) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) (async, rerun: 64) ioctl$LOOP_CLR_FD(r2, 0x4c01) (async, rerun: 64) sendfile(r0, r1, 0x0, 0x100000000000042) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) 11:34:51 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) [ 465.414469][T11455] binder: 11452:11455 unknown command 0 [ 465.429001][T11455] binder: 11452:11455 ioctl c0306201 20000440 returned -22 [ 465.446299][T11455] binder_alloc: 11452: binder_alloc_buf, no vma 11:34:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:51 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) 11:34:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) write$sndseq(r0, &(0x7f0000000100)=[{0x9, 0xff, 0x7, 0x5, @time={0xffff, 0x9}, {0x0, 0x1}, {0x4, 0x1}, @queue={0x2, {0x1000, 0x9df7659}}}], 0x1c) 11:34:51 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) 11:34:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 465.666633][T11473] binder: 11467:11473 unknown command 0 [ 465.688708][T11473] binder: 11467:11473 ioctl c0306201 20000440 returned -22 [ 465.731046][T11480] binder_alloc_mmap_handler: 7 callbacks suppressed [ 465.731068][T11480] binder_alloc: binder_alloc_mmap_handler: 11467 20bfe000-20ffe000 already mapped failed -16 11:34:51 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180), 0x10, 0xc0000) r3 = pidfd_getfd(r1, r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x4, 0x0}, 0x8) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x16, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @func, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @generic={0x40, 0x1, 0x9, 0xfffe, 0x80000000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x79, &(0x7f00000002c0)=""/121, 0x40f00, 0x0, '\x00', r6, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xc, 0xff, 0x8}, 0x10, r7, r8, 0x4, &(0x7f0000000400)=[r3, r3, r1], &(0x7f0000000440)=[{0x2, 0x5, 0x1, 0x7}, {0x5, 0x2, 0x2, 0x3}, {0x3, 0x1, 0xc, 0x6}, {0x1, 0x1, 0x4, 0xc}], 0x10, 0x6}, 0x90) 11:34:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103182) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000080)) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0xfffffffff0000000, 0x8000}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x400000) socket(0xa, 0x1, 0x0) (async) r3 = socket(0xa, 0x1, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x6, 0x21, 0x0, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0x5, 0x8001, 0x6, 0x110d, 0x1ff, 0xffffffff, {0x0, @in6={{0xa, 0x4e20, 0x0, @remote, 0x11}}, 0x3, 0x7f, 0x7fffffff, 0x9, 0x100}}, &(0x7f0000000140)=0xb0) (async) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x7, 0x5, 0x8001, 0x6, 0x110d, 0x1ff, 0xffffffff, {0x0, @in6={{0xa, 0x4e20, 0x0, @remote, 0x11}}, 0x3, 0x7f, 0x7fffffff, 0x9, 0x100}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000180)={0x80, 0x5, 0x6, 0x8, r5}, &(0x7f00000002c0)=0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) ioctl$LOOP_CLR_FD(r2, 0x4c01) (async) ioctl$LOOP_CLR_FD(r2, 0x4c01) sendfile(r0, r1, 0x0, 0x100000000000042) (async) sendfile(r0, r1, 0x0, 0x100000000000042) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) 11:34:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x1, 0xffff, 0x101}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 465.834148][T11473] binder_alloc: 11467: binder_alloc_buf, no vma 11:34:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000580)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2MX\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90 \xf92\xd1\xc63- \x05d\x7f\x89\x8c\xce\xb9\xfb\x17(\x89\xc3I\x01\x18Y\xc0\x99\xc4\x1dF\xc0\xa6\x9f$w9\xbd\xfd<\x852\n\x87\xcck\x00\xe1-', 0x5) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 465.945386][T11487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11487 comm=syz-executor.0 [ 466.003462][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 466.018476][ T28] audit: type=1400 audit(1706355291.528:307): avc: denied { read } for pid=11486 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 11:34:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x1, 0xffff, 0x101}) (async, rerun: 64) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async, rerun: 64) r1 = memfd_create(&(0x7f0000000580)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2MX\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90 \xf92\xd1\xc63- \x05d\x7f\x89\x8c\xce\xb9\xfb\x17(\x89\xc3I\x01\x18Y\xc0\x99\xc4\x1dF\xc0\xa6\x9f$w9\xbd\xfd<\x852\n\x87\xcck\x00\xe1-', 0x5) (rerun: 64) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async, rerun: 32) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async, rerun: 32) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:51 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async, rerun: 32) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) (rerun: 32) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180), 0x10, 0xc0000) r3 = pidfd_getfd(r1, r2, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x4, 0x0}, 0x8) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x16, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @func, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @generic={0x40, 0x1, 0x9, 0xfffe, 0x80000000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x79, &(0x7f00000002c0)=""/121, 0x40f00, 0x0, '\x00', r6, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xc, 0xff, 0x8}, 0x10, r7, r8, 0x4, &(0x7f0000000400)=[r3, r3, r1], &(0x7f0000000440)=[{0x2, 0x5, 0x1, 0x7}, {0x5, 0x2, 0x2, 0x3}, {0x3, 0x1, 0xc, 0x6}, {0x1, 0x1, 0x4, 0xc}], 0x10, 0x6}, 0x90) [ 466.093160][T11499] binder: 11496:11499 unknown command 0 [ 466.120951][T11499] binder: 11496:11499 ioctl c0306201 20000440 returned -22 11:34:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 466.159284][T11499] binder_alloc: binder_alloc_mmap_handler: 11496 20bfe000-20ffe000 already mapped failed -16 [ 466.220384][T11512] binder_alloc: 11496: binder_alloc_buf, no vma [ 466.241289][T11514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11514 comm=syz-executor.0 11:34:51 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 466.274524][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 11:34:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:51 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) (async, rerun: 64) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000180), 0x10, 0xc0000) (rerun: 64) r3 = pidfd_getfd(r1, r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x4, 0x0}, 0x8) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x16, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, [@map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x4}, @func, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x4}, @generic={0x40, 0x1, 0x9, 0xfffe, 0x80000000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x6, 0x79, &(0x7f00000002c0)=""/121, 0x40f00, 0x0, '\x00', r6, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0xc, 0xff, 0x8}, 0x10, r7, r8, 0x4, &(0x7f0000000400)=[r3, r3, r1], &(0x7f0000000440)=[{0x2, 0x5, 0x1, 0x7}, {0x5, 0x2, 0x2, 0x3}, {0x3, 0x1, 0xc, 0x6}, {0x1, 0x1, 0x4, 0xc}], 0x10, 0x6}, 0x90) 11:34:51 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x1, 0xffff, 0x101}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:51 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async, rerun: 64) r1 = memfd_create(&(0x7f0000000580)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2MX\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90 \xf92\xd1\xc63- \x05d\x7f\x89\x8c\xce\xb9\xfb\x17(\x89\xc3I\x01\x18Y\xc0\x99\xc4\x1dF\xc0\xa6\x9f$w9\xbd\xfd<\x852\n\x87\xcck\x00\xe1-', 0x5) (rerun: 64) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 466.448087][T11519] binder: 11518:11519 unknown command 0 [ 466.453926][T11523] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11523 comm=syz-executor.0 [ 466.457497][T11523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 466.490317][T11519] binder: 11518:11519 ioctl c0306201 20000440 returned -22 [ 466.516472][T11530] binder_alloc: binder_alloc_mmap_handler: 11518 20bfe000-20ffe000 already mapped failed -16 11:34:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000180)={{0x3, @name="d94338e1ce70c67d7389d1a0fa9b8de5829bb44af3fc06ee00023caf62a05dc1"}, 0x8, 0x100000000, 0x8001}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000001c0)) 11:34:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) sendfile(r0, r0, &(0x7f0000000000)=0x8, 0xbc4) 11:34:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000100)=""/82, 0x52}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000180)={{0x3, @name="d94338e1ce70c67d7389d1a0fa9b8de5829bb44af3fc06ee00023caf62a05dc1"}, 0x8, 0x100000000, 0x8001}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000001c0)) 11:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) sendfile(r0, r0, &(0x7f0000000000)=0x8, 0xbc4) [ 466.772700][T11542] binder: 11540:11542 unknown command 0 [ 466.793222][T11542] binder: 11540:11542 ioctl c0306201 20000440 returned -22 11:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 466.840274][T11542] binder_alloc: binder_alloc_mmap_handler: 11540 20bfe000-20ffe000 already mapped failed -16 11:34:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 32) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000180)={{0x3, @name="d94338e1ce70c67d7389d1a0fa9b8de5829bb44af3fc06ee00023caf62a05dc1"}, 0x8, 0x100000000, 0x8001}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async, rerun: 32) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f00000001c0)) (rerun: 32) 11:34:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000100)=""/82, 0x52}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:52 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) sendfile(r0, r0, &(0x7f0000000000)=0x8, 0xbc4) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) sendfile(r0, r0, &(0x7f0000000000)=0x8, 0xbc4) (async) [ 467.030103][T11559] binder: 11558:11559 unknown command 0 [ 467.044435][T11559] binder: 11558:11559 ioctl c0306201 20000440 returned -22 11:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 467.077835][T11559] binder_alloc: binder_alloc_mmap_handler: 11558 20bfe000-20ffe000 already mapped failed -16 11:34:52 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:52 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b0000000000000000a10000000000000701000008000000b702000000000000b703000000000000850000007300000095b93a6ad92b21968f8e1d205d5c1a3aad5f62030845882e19971d5b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x143a03) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x1) r3 = signalfd(r1, &(0x7f00000002c0)={[0x705800000000]}, 0x8) syz_clone3(&(0x7f0000000540)={0x204000000, &(0x7f00000005c0)=0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0), {0x5}, &(0x7f0000000bc0)=""/4096, 0x1000, &(0x7f0000000400)=""/245, &(0x7f0000000500)=[0x0], 0x4000000000000046}, 0x58) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000300)='&}-\x00', 0x0, r4) r5 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00', 0xffffffffffffff95}], 0x1, 0x239, 0x0) sendfile(r1, r5, 0x0, 0x100000000000042) 11:34:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f0000000100)=""/82, 0x52}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x7, @sdr={0xb8f22c2e, 0x6}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@userptr={0x90, 0x8, 0x4, 0x40, 0xfffffffa, {0x0, 0x2710}, {0x4, 0x8, 0x3, 0x40, 0xcc, 0x7f, "888e0050"}, 0x4, 0x2, {}, 0x800, 0x0, r2}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000280)={0x1000, 0x7}) 11:34:52 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x20, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000100)={0x0, 0x100, 0x0, 'queue0\x00', 0x4}) 11:34:52 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x7, @sdr={0xb8f22c2e, 0x6}}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@userptr={0x90, 0x8, 0x4, 0x40, 0xfffffffa, {0x0, 0x2710}, {0x4, 0x8, 0x3, 0x40, 0xcc, 0x7f, "888e0050"}, 0x4, 0x2, {}, 0x800, 0x0, r2}) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000280)={0x1000, 0x7}) 11:34:52 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 467.277257][T11579] binder: 11575:11579 unknown command 0 [ 467.286665][T11579] binder: 11575:11579 ioctl c0306201 20000440 returned -22 [ 467.299111][ T28] audit: type=1400 audit(1706355292.828:308): avc: denied { read write } for pid=11576 comm="syz-executor.0" name="swradio0" dev="devtmpfs" ino=871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 467.339967][T11579] binder_alloc: binder_alloc_mmap_handler: 11575 20bfe000-20ffe000 already mapped failed -16 11:34:52 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b0000000000000000a10000000000000701000008000000b702000000000000b703000000000000850000007300000095b93a6ad92b21968f8e1d205d5c1a3aad5f62030845882e19971d5b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x143a03) (async) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x1) (async) r3 = signalfd(r1, &(0x7f00000002c0)={[0x705800000000]}, 0x8) syz_clone3(&(0x7f0000000540)={0x204000000, &(0x7f00000005c0)=0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0), {0x5}, &(0x7f0000000bc0)=""/4096, 0x1000, &(0x7f0000000400)=""/245, &(0x7f0000000500)=[0x0], 0x4000000000000046}, 0x58) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000300)='&}-\x00', 0x0, r4) r5 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00', 0xffffffffffffff95}], 0x1, 0x239, 0x0) (async) sendfile(r1, r5, 0x0, 0x100000000000042) [ 467.371923][ T28] audit: type=1400 audit(1706355292.828:309): avc: denied { open } for pid=11576 comm="syz-executor.0" path="/dev/swradio0" dev="devtmpfs" ino=871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 467.395506][ C0] vkms_vblank_simulate: vblank timer overrun 11:34:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 467.457323][ T28] audit: type=1400 audit(1706355292.828:310): avc: denied { ioctl } for pid=11576 comm="syz-executor.0" path="/dev/swradio0" dev="devtmpfs" ino=871 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 11:34:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:53 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b0000000000000000a10000000000000701000008000000b702000000000000b703000000000000850000007300000095b93a6ad92b21968f8e1d205d5c1a3aad5f62030845882e19971d5b"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) nanosleep(&(0x7f0000000000)={0x0, 0x989680}, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x143a03) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x80000) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x1) (async, rerun: 32) r3 = signalfd(r1, &(0x7f00000002c0)={[0x705800000000]}, 0x8) (async, rerun: 32) syz_clone3(&(0x7f0000000540)={0x204000000, &(0x7f00000005c0)=0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0), {0x5}, &(0x7f0000000bc0)=""/4096, 0x1000, &(0x7f0000000400)=""/245, &(0x7f0000000500)=[0x0], 0x4000000000000046}, 0x58) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000300)='&}-\x00', 0x0, r4) (async) r5 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000080)='\x00', 0xffffffffffffff95}], 0x1, 0x239, 0x0) (async, rerun: 64) sendfile(r1, r5, 0x0, 0x100000000000042) (rerun: 64) 11:34:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x20, @tick, {}, {}, @raw32}], 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000100)={0x0, 0x100, 0x0, 'queue0\x00', 0x4}) 11:34:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r1 = syz_open_dev$swradio(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x7, @sdr={0xb8f22c2e, 0x6}}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000300)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000340)=@userptr={0x90, 0x8, 0x4, 0x40, 0xfffffffa, {0x0, 0x2710}, {0x4, 0x8, 0x3, 0x40, 0xcc, 0x7f, "888e0050"}, 0x4, 0x2, {}, 0x800, 0x0, r2}) (async) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000280)={0x1000, 0x7}) [ 467.587027][T11596] binder: 11595:11596 unknown command 0 [ 467.597725][T11596] binder: 11595:11596 ioctl c0306201 20000440 returned -22 11:34:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x20, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000100)={0x0, 0x100, 0x0, 'queue0\x00', 0x4}) 11:34:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 467.633896][T11596] binder_alloc: binder_alloc_mmap_handler: 11595 20bfe000-20ffe000 already mapped failed -16 11:34:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:53 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0x4, 0x6, 0x47504a50, 0x6, 0x8, [{0x80, 0x5}, {0xffff}, {0x5, 0x2}, {0x5, 0xffffffe7}, {0x3ff, 0x3f}, {0x80000000, 0x5}, {0x100000, 0x6}, {0x4, 0x9}], 0x5, 0x81, 0x2, 0x2, 0x1}}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000380)={0x4, [0x3, 0x8f, 0x6e, 0x9, 0x3, 0xfffd, 0x0, 0x4, 0x8, 0x2, 0x3ff, 0x1, 0x1000, 0x81, 0x401, 0x4e6, 0xfff9, 0x71c6, 0x6, 0x6, 0x101, 0x8000, 0x5, 0x7, 0xfc, 0x20, 0x800, 0x7, 0x200, 0x1f, 0x8000, 0x984f, 0x6, 0x800, 0x7ff, 0x8, 0x4, 0x5, 0x7ff, 0xffff, 0x8, 0x400, 0x400, 0x4f0, 0xb4c, 0x2d4c, 0x5, 0x9], 0xc}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd00) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./bus\x00') ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x1, @raw_data="c88fbc26381b0973cc4266db6488594d463c2367af1c54d7d0eed85109236ada3e89ea5da7abb6226ecda96e793a72076e3e2905f2ed34abd3f4c11ccccc34bc15c67aba1e914bffe75c1d92ebf7ec304b1352edf515113ef878c9e0a44ae1bc90e15ac6646628e5d1ea0b8f310ac6c98d768231f4268164e267b0561af37e0461f0855f7b27bd134a4157e342069910cf325d365405c22e224c49ca8db3001c1436696451a46e0886431b93f310ad27f9a6f9a6ebd7124e134af17a3f5fba281d6570e25841fd35"}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x0, 0x37}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) 11:34:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) write$sndseq(r0, &(0x7f0000000280)=[{0x7f, 0x5, 0x8, 0xd1, @time={0x45ab4024, 0x1}, {0x0, 0x9}, {0x9, 0x29}, @quote={{0x7, 0x4}, 0x6, &(0x7f0000000100)={0xff, 0x7, 0x7, 0x1f, @time={0x6, 0x6}, {0x0, 0x8}, {0x8c, 0x81}, @raw32={[0x6, 0x6, 0x800]}}}}, {0x7, 0x9, 0x8, 0x1, @tick=0x100, {0xb7, 0x86}, {0x3f, 0x3f}, @time=@time={0x1, 0x400}}, {0x40, 0x23, 0x7f, 0xff, @time={0x6, 0xfffff1c6}, {0x2, 0x3f}, {0x4, 0xed}, @note={0x64, 0x3e, 0x1, 0x1f, 0x6}}, {0x7f, 0x69, 0xd, 0x5a, @tick=0x2, {0x4}, {0xff, 0x4}, @time=@tick=0x2}, {0x9, 0xf8, 0x0, 0x20, @time={0x4cd2, 0x69b}, {0x4}, {0x4, 0xff}, @time=@tick=0x7}, {0x8, 0x1, 0x9, 0x1, @tick=0x81, {0x4}, {0x3f, 0xde}, @raw8={"3a334786c46b32f2d26d9e74"}}], 0xa8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:53 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async, rerun: 64) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async, rerun: 64) sendfile(r0, r1, 0x0, 0x100000000000042) [ 467.859757][T11615] binder: 11613:11615 unknown command 0 [ 467.872959][T11615] binder: 11613:11615 ioctl c0306201 20000440 returned -22 [ 467.892374][T11615] binder_alloc: binder_alloc_mmap_handler: 11613 20bfe000-20ffe000 already mapped failed -16 11:34:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 467.972587][ T28] audit: type=1804 audit(1706355293.498:311): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1262539025/syzkaller.VG7b6B/290/bus" dev="sda1" ino=1950 res=1 errno=0 [ 468.036814][ T28] audit: type=1800 audit(1706355293.538:312): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1950 res=0 errno=0 11:34:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) write$sndseq(r0, &(0x7f0000000280)=[{0x7f, 0x5, 0x8, 0xd1, @time={0x45ab4024, 0x1}, {0x0, 0x9}, {0x9, 0x29}, @quote={{0x7, 0x4}, 0x6, &(0x7f0000000100)={0xff, 0x7, 0x7, 0x1f, @time={0x6, 0x6}, {0x0, 0x8}, {0x8c, 0x81}, @raw32={[0x6, 0x6, 0x800]}}}}, {0x7, 0x9, 0x8, 0x1, @tick=0x100, {0xb7, 0x86}, {0x3f, 0x3f}, @time=@time={0x1, 0x400}}, {0x40, 0x23, 0x7f, 0xff, @time={0x6, 0xfffff1c6}, {0x2, 0x3f}, {0x4, 0xed}, @note={0x64, 0x3e, 0x1, 0x1f, 0x6}}, {0x7f, 0x69, 0xd, 0x5a, @tick=0x2, {0x4}, {0xff, 0x4}, @time=@tick=0x2}, {0x9, 0xf8, 0x0, 0x20, @time={0x4cd2, 0x69b}, {0x4}, {0x4, 0xff}, @time=@tick=0x7}, {0x8, 0x1, 0x9, 0x1, @tick=0x81, {0x4}, {0x3f, 0xde}, @raw8={"3a334786c46b32f2d26d9e74"}}], 0xa8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) write$sndseq(r0, &(0x7f0000000280)=[{0x7f, 0x5, 0x8, 0xd1, @time={0x45ab4024, 0x1}, {0x0, 0x9}, {0x9, 0x29}, @quote={{0x7, 0x4}, 0x6, &(0x7f0000000100)={0xff, 0x7, 0x7, 0x1f, @time={0x6, 0x6}, {0x0, 0x8}, {0x8c, 0x81}, @raw32={[0x6, 0x6, 0x800]}}}}, {0x7, 0x9, 0x8, 0x1, @tick=0x100, {0xb7, 0x86}, {0x3f, 0x3f}, @time=@time={0x1, 0x400}}, {0x40, 0x23, 0x7f, 0xff, @time={0x6, 0xfffff1c6}, {0x2, 0x3f}, {0x4, 0xed}, @note={0x64, 0x3e, 0x1, 0x1f, 0x6}}, {0x7f, 0x69, 0xd, 0x5a, @tick=0x2, {0x4}, {0xff, 0x4}, @time=@tick=0x2}, {0x9, 0xf8, 0x0, 0x20, @time={0x4cd2, 0x69b}, {0x4}, {0x4, 0xff}, @time=@tick=0x7}, {0x8, 0x1, 0x9, 0x1, @tick=0x81, {0x4}, {0x3f, 0xde}, @raw8={"3a334786c46b32f2d26d9e74"}}], 0xa8) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) [ 468.123330][T11632] binder: 11629:11632 unknown command 0 [ 468.140620][T11632] binder: 11629:11632 ioctl c0306201 20000440 returned -22 11:34:53 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) sendfile(r0, r1, 0x0, 0x100000000000042) [ 468.170854][T11632] binder_alloc: binder_alloc_mmap_handler: 11629 20bfe000-20ffe000 already mapped failed -16 11:34:53 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:53 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) write$sndseq(r0, &(0x7f0000000280)=[{0x7f, 0x5, 0x8, 0xd1, @time={0x45ab4024, 0x1}, {0x0, 0x9}, {0x9, 0x29}, @quote={{0x7, 0x4}, 0x6, &(0x7f0000000100)={0xff, 0x7, 0x7, 0x1f, @time={0x6, 0x6}, {0x0, 0x8}, {0x8c, 0x81}, @raw32={[0x6, 0x6, 0x800]}}}}, {0x7, 0x9, 0x8, 0x1, @tick=0x100, {0xb7, 0x86}, {0x3f, 0x3f}, @time=@time={0x1, 0x400}}, {0x40, 0x23, 0x7f, 0xff, @time={0x6, 0xfffff1c6}, {0x2, 0x3f}, {0x4, 0xed}, @note={0x64, 0x3e, 0x1, 0x1f, 0x6}}, {0x7f, 0x69, 0xd, 0x5a, @tick=0x2, {0x4}, {0xff, 0x4}, @time=@tick=0x2}, {0x9, 0xf8, 0x0, 0x20, @time={0x4cd2, 0x69b}, {0x4}, {0x4, 0xff}, @time=@tick=0x7}, {0x8, 0x1, 0x9, 0x1, @tick=0x81, {0x4}, {0x3f, 0xde}, @raw8={"3a334786c46b32f2d26d9e74"}}], 0xa8) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async, rerun: 64) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:53 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 468.385809][T11644] binder: 11642:11644 unknown command 0 [ 468.403456][T11644] binder: 11642:11644 ioctl c0306201 20000440 returned -22 11:34:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xffffffffffff8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000003e37a000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe8b}, 0x78) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000023c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ff7f00000000000007000000000000008b00000000000000ec790000000000000700000000000000030000000000000004000000940ea500d00600000600000005000000000000007f0000000000000001000000000000001f00000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/160]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002480)={0x0, ""/256, 0x0, 0x0}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000040)="7ea50da70153da417557b115b18cb9ba4d17014995f3f56f10f7b862c7ae69f50f9d8d58ca5f0dc64e514e448e297b9299443e1be83a86783f889d6ae7120a64a203160314c9f366569cd0927575a8e2ad36a79279d83a211ef1b2d82375edf3e3bdd8eb688c55b94dc83a9459", 0x6d}, {&(0x7f00000000c0)="77916512bf748ca1d990dbe0bda23f03065c3e6a318a7665700e728da8b7c427ad84191e31ab5aadf20480790075f24a1913b77a3d9c033bef0b02dc", 0x3c}, {&(0x7f0000000140)="18593b11019e40766720f735071efea76ddf9190b4a7c3b1", 0x18}, {&(0x7f0000001bc0)="25f513f56c6704665e655bb7fefb11f0fad5e9c29aeb963eacc1795e252d36c0f4c395c3b959dcfe409bc774f41dd1ffbf4b6186751acb9e91e80dd575548dbf39ea123603165ce6d7a5acddeae48d040d0128d9dbaaa7dffc5192bddfb4b96946dcc6390e6d9a9b154f767718c89c2306daa7085db2e3e3b6836016366213aee64e261a2c4b5da5c46e26011debb08a11bc2c63a7d8c2af78f5e70b98253a252ff56c9e5237d6ddb3161e1a9f096bec9d281de0887235af5d507c3da6aebe9e6b42a299f27d1db80867af5a35c3ad393ab90c453da2cbe044eeaaa8df1f2f11491c829d967163c6caefd51bae", 0xed}, {&(0x7f0000000180)}, {&(0x7f0000001cc0)="3fbe80d91b8466723e06ffd3699433385a0036e98c9d67a12b7b650e0713069aef1b7fb18b51670d6b8e6d4a5ea4848422810854e3e355284537126052ecce794dd529397f3ebb751a861f8415c06dc371896fc0f313dada43740b0ef0f3a22ab8902e614d2f22acd58819d482d3670ed06f5aee0142179351e2b045bbe960b8ecb4548bba5354ffea58c24f905a6a663199ae28de4e827065f25ad714ac45a9b888abf16b4cc5c2", 0xa8}, {&(0x7f0000001d80)="43619fc349e51ef4f0c4f90ee8dc7ba81df287f7a3d69361d564367d752be1ee5aba312c52997221b774ca458a02b5e6375b095255acfe958033bc1d30a3c08b5f7dcbaf2fb428ead87373bec6e4c9fe10e1e96d917091792e3bb2327c2bd5fc16187b78740a7b36113e2d44dbffdfe090ae4a51d5775e079227f6cef21791ec738094bcbe5f16c804cbaa831268198171cb", 0x92}], 0x7}, 0x200400cc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "ab519c2144f066"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000bc0)={r5, 0x0, "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", "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"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:54 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x1}, @quote={{0xa7, 0x8}, 0x4, &(0x7f0000000280)={0x40, 0x94, 0x80, 0x8, @tick=0x4, {0x1, 0x4}, {0x6}, @time=@tick=0x6}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) [ 468.437999][T11650] binder_alloc: binder_alloc_mmap_handler: 11642 20bfe000-20ffe000 already mapped failed -16 11:34:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x651e0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 468.497928][ T28] audit: type=1400 audit(1706355294.028:313): avc: denied { write } for pid=11651 comm="syz-executor.1" name="nvram" dev="devtmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 11:34:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xffffffffffff8000) (async, rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000003e37a000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe8b}, 0x78) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000023c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ff7f00000000000007000000000000008b00000000000000ec790000000000000700000000000000030000000000000004000000940ea500d00600000600000005000000000000007f0000000000000001000000000000001f00000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/160]) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002480)={0x0, ""/256, 0x0, 0x0}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000040)="7ea50da70153da417557b115b18cb9ba4d17014995f3f56f10f7b862c7ae69f50f9d8d58ca5f0dc64e514e448e297b9299443e1be83a86783f889d6ae7120a64a203160314c9f366569cd0927575a8e2ad36a79279d83a211ef1b2d82375edf3e3bdd8eb688c55b94dc83a9459", 0x6d}, {&(0x7f00000000c0)="77916512bf748ca1d990dbe0bda23f03065c3e6a318a7665700e728da8b7c427ad84191e31ab5aadf20480790075f24a1913b77a3d9c033bef0b02dc", 0x3c}, {&(0x7f0000000140)="18593b11019e40766720f735071efea76ddf9190b4a7c3b1", 0x18}, {&(0x7f0000001bc0)="25f513f56c6704665e655bb7fefb11f0fad5e9c29aeb963eacc1795e252d36c0f4c395c3b959dcfe409bc774f41dd1ffbf4b6186751acb9e91e80dd575548dbf39ea123603165ce6d7a5acddeae48d040d0128d9dbaaa7dffc5192bddfb4b96946dcc6390e6d9a9b154f767718c89c2306daa7085db2e3e3b6836016366213aee64e261a2c4b5da5c46e26011debb08a11bc2c63a7d8c2af78f5e70b98253a252ff56c9e5237d6ddb3161e1a9f096bec9d281de0887235af5d507c3da6aebe9e6b42a299f27d1db80867af5a35c3ad393ab90c453da2cbe044eeaaa8df1f2f11491c829d967163c6caefd51bae", 0xed}, {&(0x7f0000000180)}, {&(0x7f0000001cc0)="3fbe80d91b8466723e06ffd3699433385a0036e98c9d67a12b7b650e0713069aef1b7fb18b51670d6b8e6d4a5ea4848422810854e3e355284537126052ecce794dd529397f3ebb751a861f8415c06dc371896fc0f313dada43740b0ef0f3a22ab8902e614d2f22acd58819d482d3670ed06f5aee0142179351e2b045bbe960b8ecb4548bba5354ffea58c24f905a6a663199ae28de4e827065f25ad714ac45a9b888abf16b4cc5c2", 0xa8}, {&(0x7f0000001d80)="43619fc349e51ef4f0c4f90ee8dc7ba81df287f7a3d69361d564367d752be1ee5aba312c52997221b774ca458a02b5e6375b095255acfe958033bc1d30a3c08b5f7dcbaf2fb428ead87373bec6e4c9fe10e1e96d917091792e3bb2327c2bd5fc16187b78740a7b36113e2d44dbffdfe090ae4a51d5775e079227f6cef21791ec738094bcbe5f16c804cbaa831268198171cb", 0x92}], 0x7}, 0x200400cc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "ab519c2144f066"}) (async) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000bc0)={r5, 0x0, "31465873a7d23cf5567f97756d85fab56d52c97dc2d626bbc883d5f7470aac5018dc633f1e0899515bd4ce157e80aa93186c19ae93f65df57c66575c074edb60276929287c52455f7d28782ca9850d6afc6c6b0cd56b5c9f7d287fdb1ebd1f2dcda9dae67fd765fff15287e44889e1fbc4360bb92141533e212f2e6682c84548a2a14c5a5b7008b9d417124469081b0367451397d8718beaca936dec2a772eafa92e83a1615e3a90d0ca30af69ade778c3759ba67a271327405ffb3f738d8fde0d186561ea743db28fe569967f8bceb771d88fd9de448a25ebfde1a52fa7b7cfa65c48a1045587a989131ce6e62afca83c78abff94e08a3f852495638480b5a9", "ec1ee38a9f5957791c4abc841119aedce3cee1077545289fa4dad0eab19ab743a6425921a9bc034e48a0948c1ff980101e34cf6fe25d7f8ab58522aaced8f37f9888438e5d27749d7bd2ed754be07b193e7c03ecbf56503215034e3bfd65b34f3ecbec63a435e7d23d2688adf203433fb95685db3b04c78eca87025890588b98fb97e4f53a1e6fd053aee9276971a3fe9ed7d47a75bd546a9682a70ad9bef1e481db498705b6a5628f996aa0a6df264118becf8dbb03da156609c9b01e358913a7fa6bd56aaab79ab8f5e6d4f37ec7a366152d247f64382b343bfa5aea37853f38adc4b542cfa931f419d847f8c70b1307b5f5c6ba43dda793251fdb26e723a4842a0d234f7da4c5730a974e49fbc09f9492dd1715ad71e401a91fe7b040b5b2d7f0d8b39a20388a229fe52be779e864d412fa301e69f7e7ca460decbd3848beff66b72bafe70e40fcf04bd846293dd0c712fba32354d6281ec11e15a69139eec111b9f8423feec5a09afd03a9502e301215f1a72c280ade1a47d2d9c6cf67835dc2efd73610d2dc0d4a329671fd71392bf2f5d971a076cbd7a18a4a4ed29bcc7bf11d34f89d3680141c8f11064529fdbaec38e8052e3680814cb9976e4fba0cc0ef24ce7f0d8bbf5df0eac57454404235e94daaf69ad81d1c813b2e7795cb21ffd71ee7f996767c943d56fdc2304b1d18aa38ae80d53c965b6b4787f0264bad7565ef859685738d10400d989e9b83c91fab3e3464ae79e439019a755c6260228909cf90a6fa1707638d78d75989cf8f901c7bfd9f9701ddbaca56b4d143c28a682a9aa4b93286decef543b52835e34852e0f0f7b1d37c72c57ca5f5f7e2ad2aefab9d9afc7bcef373db46302e556d1cbda2192e3d6bdf93a07085af9d6193d4736c379b642f76537fafd3f1d247df85b72c32d234b69b88622ff4006e647c09c16f805200e63ef19ec417d52ac9ecd9487edddc8b48d04b8362588d77ba9568c9a74fdc1dec0073a609faab9ab18e746346cb5fd2479b554660487a1dffed3cda19de88c9666a2bcc06a8a49f1a9469f8d35193a54d010dfe3c482fbbb415ccf961323e652538cc30c50ced661668636b45f3aa89709ada96daf02bcd27af2bc48a81a9de1b4832d91fd58ef42306c737b62d4ff4df264c435de7620edec9083c54d1bdcd48c9f6f792114e7cdd57c93f5ef055e797d91903eed0699d4bd9687360043f745599f07c5ccbeff0b88142bccdc2b3486e5fd09c93c3f670e407450d9556b34e76f50232859c6c2986c568e76d9c55055b1741998c9b902a1b05dfeb6f58e1b943f79778ae073b2aac35431cbd12a4a7d70f5cb3bddabd6663b8adeb0176201b790d70e6816601dda5eaa77ebb4f7b0528cb1aba79e3c07a0235eb36531d0170a524a8a078f6b9778e39182ed0f350293f3242cd5650f7773be60f5b15084931dbcd15298e4e4f75e5b2cfb8314a376c9ba6b918e95d7a3d212329538f1472b81430f8ca819f65800e6ae41412347743b73965b3144e4c23c045069e569e26e66b5bbb89995aaa9259fce1b2750352930ade25623f190275c78bcc2f2ee487da5a25e95a11866f042115f813b19468eeed39d3f117d1275251db0a4b8c5d69ae5f75c25d146a1c7f407397618893f54b5053afcc893a6eb0eb102e92811155878b3ae536dc42c3c60e6357c0db6609b536b5bc131ea3ff1dd7d624efba580f1f75ca8238faee0912d480764f0430b48bfa0cade16b310462717a5d13b556b3ab7b7c4ac98e6bb5075a87ec18692552b80b2d86d89579641df498fb88af22f3366731d107e42b7ac163142f8e38f2939201275178811bc5090b4e7b76080e68236d0e4dc31395f82ccb95866f1eefe7ba546a765812fcbd656d4a45fef39afedeaee3056b5cb8ee67b7293edaf0e94374e7785af8d1c9165ea726f543e4b46877cbd60feb6e2d8018de2af61123d96ef87434bbc44b3d5396b34cd983945a7384371f12f3c6a5c64b591813c178dc5248d4abb920457779fb4848b0ec3345603e14464b42ded7b64c07b5508d83d7f8ec61a43ed30745e00f9f76d6b8c41bda5f4f263218df0e93b89f1993f2b26da07d7f456715fbf05fed19198d0ba6b87e2b81fc3e337dd85a8a27d962cbaf0b5b0fc2bd16d7651f96d00d39725b704adf96afa2a634e0d0a3105238b5b89a53c9cb45c4e58ee1a292de7910003105590e0c9f720dd3de82f86bf3b2cc36c5831391ef88c9c6a6d30ffa61b7ccd98d1f5f8cdefd0aef4ecb744b9e867915f143c43e11f1b15bbb532f294ec78554e23a1a1f41fda2e946203ffb1176de268e1b21031d85eff849e86aa13c077d8625969182286dfe3d64b0bd61019761ebb80c9e2abd9cd3264113c986915fb769609fc2bda49035527aef09d3f72afa26f085d86b1d3aa88a5be04d7ed7d3e57f710ab153114bff4f59764a0124988a884c2d09c89822174aea0760e493a9641f501b1cfff341a37b8018709f60b17b159e9b03ce7f30c9c86deb88469b566ce3dc0493e749a8f4f21a28e5a43464f94dc17a00154b6cb6c5d7dfee7be777276f10aa733f95c7fddf7debb4675eef600461bae408194c537904e3e46ae551c6828d792f8e0d395257325cdb6a814dd035ffdfd86aba64d59f69b3e968e4990e2837e5792c6fe2f895873614923e7d56bd4675cc1b46937623040b294a498dede634f63f8e126a49028d41143637c2769b760c50e5ec9fc5113921152bac46955486b6eb4c0dc2082fdf307b81b0cf39a752a313aa36ff88061c904eb1f9ec6ddeda58fca4422c2616b8dbf92ba8cde50858df022687cd0f4a8cad0dfd4efe1b1fe2bfb140e8ab15deefb152b9fda66bddfba264f1aaac62e8f2fa13b9e7109eae5bffda1815ca72a8a0243790fcebe3efbad5f1f48c877bfb38fa38841a0b1dbe699cd94f3c7e8495d36b988d957a69d9ddb028f285fcdcf8d0dcd8ce81ecfb06bce0e565055880d0515f6d0c43481c758ee988f14c2311b776c82ce8a3f4a84180de75880d6199b5700cc43ca09951a97c01b0bef05571da381a158da23eaf5b1654826b8e536755a6fd761dfd16c4b36a47882e17dc31efd69d3c76ed049c03bbd6992ee2f78e14ddad6db4b2255c87974af4fd3dbe1ec3820e59c94935231be26cc255a8d8e8ce275b8c6027d812fbfafb5c192931256fff227d353226540a9eea622b93860a73fa4a0e0f95b0e9d32c80e96eddbbd257f2b937e418b40fcb7dbe600981dfffdcd8fccd0be3e1378e33346bf752be55ce88eda30f64e16b54fa6c29023f8bd7d57282fc5d1da59369eb7264727254c86f9c33502b37f999b9f5f9af1c3428785c11407b3980fc0199a2c0af6496ce20edbcdaa60962b02bf97a21d0d29a40162be05b6d614d9d426abb81f4c1f4c32670955f88abb3c8096254f0414686ed34eec5ec81747d02431116fb5d9cb8e1cd6b388b675c6ec399512c99d695686a33634cb207bec3be3a9be393415393b896f8c8c616514dc04e936c117664df3654a6fa96a098479ff36a91ae8808e91efcecda51a6d6ed15bf47f2398a6f847234b2b11358b5f8a9c2cb16eecf4fca589744941076bb562b04708a18cdf731e5ebb1876d3ae8b3525c626e916897080ae61c6d27adc7f750c011e72fd8ad2378d40daa82194cdd49eac334fd92b0d04fd5638280804a5b38c476299cb34d1d8732b820efed4dd2a2d7955c5aea5ac896116b5625f9624a1faa5d997cd8c42f0977c012f46aa2f546a0e6cf6c165c59163c4f2519e0886d6a5bab0695d030407958f9dc2eed1d261da1e6127ce2c64363e604ca9dbb0260790900f1fc6063f539b21ecba697aba48b39273bb58b22b97922aa2c799babb26cffba7a591c4eb52c6e06048c03b6ea9f6aca951cd067b951108cc00f2443d6f6fb0abf141a165c5073a2ea506ea3edb1c9298f7a67a24bb5620b50ed8a46b995ad7da1b01db246596d74f102c428e0b2b29cba7e150bb650a96ebfe137841ed76d3ecf31e6116ff1d80e78fa87d5a00a4cba0d444902df48e8d32f28b84b72315488ad96282537dac2d0ae918f15fa450cf1f7130b9108f0df257158d30602e26d5554bc636c3ac873e9682430dc4481adde9104732b8384d7ffaeb503ce84609b9a52f86f55e730ebafd22176fd2d00d4471e6b08428408e8f52d2c592417bfd797e0c29917eebcbff84446d63cff6113abc0a160f73115276ff871affa5bd084b4490b882563d0a5020699dae849f5d7bb3b6e1b1012db9d03668d38b77ff401bebad6635655ed40d5794283a2461a0812051cb1d3f82abcac2e51addd668602f6c36510cf0c7f19aebe58ac4d04f4309111e203b06bdd51353b085311e92e461eae31e2f5410af6a30460797e231141ffec583acf2f6cdeb35f1ed074eb5f523ef398b3cd7413fb99e788ddb1f534fc6a777de6f37ece1f57e0254ce541ffb59609c40a3d76f4a16793ac4187585e44dce6bd536c7620e5e11015ec272d0492950e69b297a457918182c701e0186e23cf98e5a93fa4bd946e2f526cd136f277fde3d1b826cab7c109e51b792cc7ee5533f1cb1d62ae0027161d3ea9215ba9beac2899668f00a9d639646314a440fbb753205f68e13ca01fcb1be7224753a5a0dd510c9f5b896ad5793253aa5ed521da133b9d9ca6b93bf20b723445e31b4f1bf90e667fa60caa488752c5fc5268a0ae3eab4f88c9492e29452759035fba04afaaea2d31b9ddd9e456c13ebe3eb154f9db3b7e989b465196b7b329a450751f1c0013076f9720a30fc804cec2be25b489e1b85b3aff83d71f4b8771cf9746a2b29e1b95302c4ceb431159a44e2d98f39c70151ecfc08d20626048ca315f5ec69c130ecccec35d4f2f5ddb97eb8c3279bfa0da576b91e08c2bc1aa3a1374126cf7d166c10ae01a678d4300bf68671642e36e10ef63c116aadd3361b8217b0e3544a9f05538572a22e9903b4d1beda2098750b19bc4e913d8a884ef67329805db960a4c8fb54f12274ff1ed92e44f4827ecbf49594f2464716003a58b77c11eacb8bbd6d4b58b6279333751497144452efbdc9b6e5eb1bb331a41f902c05822ed54f8493375ec99ee3130df02424d5491bfeb19063e43947bdd4ae3faf53e32b213b4b29ed5ee89862610f937ccea6a7e31211dc4da67c1dc503d19b1ab294528aa4d47c82b467e9c85dda333bfd48b7633c4811e459b099d217e19adb6385bde124aa1f81310cb84c467c1c1495570a0c5896c499cfe303b028e7cac0bd6ec84b8b3388e25e0a5db25134a87eb08a80fd76f4f4cb489af39bf6e694ca5a967cbd9ec321b2cdab6b71170e0a2407ada53122a6744c1ae780f03f9a5277549f2359e96b963336840a55a2b4bf1484a0629ab"}) (async) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 468.599892][ T28] audit: type=1400 audit(1706355294.128:314): avc: denied { write } for pid=11653 comm="syz-executor.3" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 11:34:54 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x1}, @quote={{0xa7, 0x8}, 0x4, &(0x7f0000000280)={0x40, 0x94, 0x80, 0x8, @tick=0x4, {0x1, 0x4}, {0x6}, @time=@tick=0x6}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) [ 468.651291][ T28] audit: type=1400 audit(1706355294.138:315): avc: denied { ioctl } for pid=11653 comm="syz-executor.3" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 11:34:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0xffffffffffff8000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000003e37a000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe8b}, 0x78) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000003e37a000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe8b}, 0x78) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f00000023c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="ff7f00000000000007000000000000008b00000000000000ec790000000000000700000000000000030000000000000004000000940ea500d00600000600000005000000000000007f0000000000000001000000000000001f00000000000000380000000000000000000000000000000000000000000000000000000000000000000000000000000000000200"/160]) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000002480)={0x0, ""/256, 0x0, 0x0}) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000040)="7ea50da70153da417557b115b18cb9ba4d17014995f3f56f10f7b862c7ae69f50f9d8d58ca5f0dc64e514e448e297b9299443e1be83a86783f889d6ae7120a64a203160314c9f366569cd0927575a8e2ad36a79279d83a211ef1b2d82375edf3e3bdd8eb688c55b94dc83a9459", 0x6d}, {&(0x7f00000000c0)="77916512bf748ca1d990dbe0bda23f03065c3e6a318a7665700e728da8b7c427ad84191e31ab5aadf20480790075f24a1913b77a3d9c033bef0b02dc", 0x3c}, {&(0x7f0000000140)="18593b11019e40766720f735071efea76ddf9190b4a7c3b1", 0x18}, {&(0x7f0000001bc0)="25f513f56c6704665e655bb7fefb11f0fad5e9c29aeb963eacc1795e252d36c0f4c395c3b959dcfe409bc774f41dd1ffbf4b6186751acb9e91e80dd575548dbf39ea123603165ce6d7a5acddeae48d040d0128d9dbaaa7dffc5192bddfb4b96946dcc6390e6d9a9b154f767718c89c2306daa7085db2e3e3b6836016366213aee64e261a2c4b5da5c46e26011debb08a11bc2c63a7d8c2af78f5e70b98253a252ff56c9e5237d6ddb3161e1a9f096bec9d281de0887235af5d507c3da6aebe9e6b42a299f27d1db80867af5a35c3ad393ab90c453da2cbe044eeaaa8df1f2f11491c829d967163c6caefd51bae", 0xed}, {&(0x7f0000000180)}, {&(0x7f0000001cc0)="3fbe80d91b8466723e06ffd3699433385a0036e98c9d67a12b7b650e0713069aef1b7fb18b51670d6b8e6d4a5ea4848422810854e3e355284537126052ecce794dd529397f3ebb751a861f8415c06dc371896fc0f313dada43740b0ef0f3a22ab8902e614d2f22acd58819d482d3670ed06f5aee0142179351e2b045bbe960b8ecb4548bba5354ffea58c24f905a6a663199ae28de4e827065f25ad714ac45a9b888abf16b4cc5c2", 0xa8}, {&(0x7f0000001d80)="43619fc349e51ef4f0c4f90ee8dc7ba81df287f7a3d69361d564367d752be1ee5aba312c52997221b774ca458a02b5e6375b095255acfe958033bc1d30a3c08b5f7dcbaf2fb428ead87373bec6e4c9fe10e1e96d917091792e3bb2327c2bd5fc16187b78740a7b36113e2d44dbffdfe090ae4a51d5775e079227f6cef21791ec738094bcbe5f16c804cbaa831268198171cb", 0x92}], 0x7}, 0x200400cc) (async) sendmsg(r6, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000040)="7ea50da70153da417557b115b18cb9ba4d17014995f3f56f10f7b862c7ae69f50f9d8d58ca5f0dc64e514e448e297b9299443e1be83a86783f889d6ae7120a64a203160314c9f366569cd0927575a8e2ad36a79279d83a211ef1b2d82375edf3e3bdd8eb688c55b94dc83a9459", 0x6d}, {&(0x7f00000000c0)="77916512bf748ca1d990dbe0bda23f03065c3e6a318a7665700e728da8b7c427ad84191e31ab5aadf20480790075f24a1913b77a3d9c033bef0b02dc", 0x3c}, {&(0x7f0000000140)="18593b11019e40766720f735071efea76ddf9190b4a7c3b1", 0x18}, {&(0x7f0000001bc0)="25f513f56c6704665e655bb7fefb11f0fad5e9c29aeb963eacc1795e252d36c0f4c395c3b959dcfe409bc774f41dd1ffbf4b6186751acb9e91e80dd575548dbf39ea123603165ce6d7a5acddeae48d040d0128d9dbaaa7dffc5192bddfb4b96946dcc6390e6d9a9b154f767718c89c2306daa7085db2e3e3b6836016366213aee64e261a2c4b5da5c46e26011debb08a11bc2c63a7d8c2af78f5e70b98253a252ff56c9e5237d6ddb3161e1a9f096bec9d281de0887235af5d507c3da6aebe9e6b42a299f27d1db80867af5a35c3ad393ab90c453da2cbe044eeaaa8df1f2f11491c829d967163c6caefd51bae", 0xed}, {&(0x7f0000000180)}, {&(0x7f0000001cc0)="3fbe80d91b8466723e06ffd3699433385a0036e98c9d67a12b7b650e0713069aef1b7fb18b51670d6b8e6d4a5ea4848422810854e3e355284537126052ecce794dd529397f3ebb751a861f8415c06dc371896fc0f313dada43740b0ef0f3a22ab8902e614d2f22acd58819d482d3670ed06f5aee0142179351e2b045bbe960b8ecb4548bba5354ffea58c24f905a6a663199ae28de4e827065f25ad714ac45a9b888abf16b4cc5c2", 0xa8}, {&(0x7f0000001d80)="43619fc349e51ef4f0c4f90ee8dc7ba81df287f7a3d69361d564367d752be1ee5aba312c52997221b774ca458a02b5e6375b095255acfe958033bc1d30a3c08b5f7dcbaf2fb428ead87373bec6e4c9fe10e1e96d917091792e3bb2327c2bd5fc16187b78740a7b36113e2d44dbffdfe090ae4a51d5775e079227f6cef21791ec738094bcbe5f16c804cbaa831268198171cb", 0x92}], 0x7}, 0x200400cc) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000300)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}], 0x1, "ab519c2144f066"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000bc0)={r5, 0x0, "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", "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"}) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) (async) sendfile(r0, r1, 0x0, 0x100000000000042) [ 468.699150][T11662] binder: 11658:11662 unknown command 0 [ 468.707349][T11662] binder: 11658:11662 ioctl c0306201 20000440 returned -22 [ 468.735956][T11662] binder_alloc_new_buf: 8 callbacks suppressed [ 468.735976][T11662] binder_alloc: 11658: binder_alloc_buf, no vma 11:34:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:54 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x1}, @quote={{0xa7, 0x8}, 0x4, &(0x7f0000000280)={0x40, 0x94, 0x80, 0x8, @tick=0x4, {0x1, 0x4}, {0x6}, @time=@tick=0x6}}}], 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000100)) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 11:34:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:54 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0x4, 0x6, 0x47504a50, 0x6, 0x8, [{0x80, 0x5}, {0xffff}, {0x5, 0x2}, {0x5, 0xffffffe7}, {0x3ff, 0x3f}, {0x80000000, 0x5}, {0x100000, 0x6}, {0x4, 0x9}], 0x5, 0x81, 0x2, 0x2, 0x1}}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000380)={0x4, [0x3, 0x8f, 0x6e, 0x9, 0x3, 0xfffd, 0x0, 0x4, 0x8, 0x2, 0x3ff, 0x1, 0x1000, 0x81, 0x401, 0x4e6, 0xfff9, 0x71c6, 0x6, 0x6, 0x101, 0x8000, 0x5, 0x7, 0xfc, 0x20, 0x800, 0x7, 0x200, 0x1f, 0x8000, 0x984f, 0x6, 0x800, 0x7ff, 0x8, 0x4, 0x5, 0x7ff, 0xffff, 0x8, 0x400, 0x400, 0x4f0, 0xb4c, 0x2d4c, 0x5, 0x9], 0xc}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd00) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./bus\x00') ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x1, @raw_data="c88fbc26381b0973cc4266db6488594d463c2367af1c54d7d0eed85109236ada3e89ea5da7abb6226ecda96e793a72076e3e2905f2ed34abd3f4c11ccccc34bc15c67aba1e914bffe75c1d92ebf7ec304b1352edf515113ef878c9e0a44ae1bc90e15ac6646628e5d1ea0b8f310ac6c98d768231f4268164e267b0561af37e0461f0855f7b27bd134a4157e342069910cf325d365405c22e224c49ca8db3001c1436696451a46e0886431b93f310ad27f9a6f9a6ebd7124e134af17a3f5fba281d6570e25841fd35"}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x0, 0x37}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0x4, 0x6, 0x47504a50, 0x6, 0x8, [{0x80, 0x5}, {0xffff}, {0x5, 0x2}, {0x5, 0xffffffe7}, {0x3ff, 0x3f}, {0x80000000, 0x5}, {0x100000, 0x6}, {0x4, 0x9}], 0x5, 0x81, 0x2, 0x2, 0x1}}) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000380)={0x4, [0x3, 0x8f, 0x6e, 0x9, 0x3, 0xfffd, 0x0, 0x4, 0x8, 0x2, 0x3ff, 0x1, 0x1000, 0x81, 0x401, 0x4e6, 0xfff9, 0x71c6, 0x6, 0x6, 0x101, 0x8000, 0x5, 0x7, 0xfc, 0x20, 0x800, 0x7, 0x200, 0x1f, 0x8000, 0x984f, 0x6, 0x800, 0x7ff, 0x8, 0x4, 0x5, 0x7ff, 0xffff, 0x8, 0x400, 0x400, 0x4f0, 0xb4c, 0x2d4c, 0x5, 0x9], 0xc}) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x0, 0x2) (async) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) sendfile(r1, r2, 0x0, 0x1dd00) (async) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./bus\x00') (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x1, @raw_data="c88fbc26381b0973cc4266db6488594d463c2367af1c54d7d0eed85109236ada3e89ea5da7abb6226ecda96e793a72076e3e2905f2ed34abd3f4c11ccccc34bc15c67aba1e914bffe75c1d92ebf7ec304b1352edf515113ef878c9e0a44ae1bc90e15ac6646628e5d1ea0b8f310ac6c98d768231f4268164e267b0561af37e0461f0855f7b27bd134a4157e342069910cf325d365405c22e224c49ca8db3001c1436696451a46e0886431b93f310ad27f9a6f9a6ebd7124e134af17a3f5fba281d6570e25841fd35"}) (async) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x0, 0x37}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) (async) 11:34:54 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x200c9b3]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x4, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0xde, 0xf8, {0x9f, 0x1}, 0x81, 0x2, 0xff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/24, 0x18) r5 = accept$alg(r4, 0x0, 0x0) mmap(&(0x7f000081f000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0xaa628000) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0x500, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x3, 0x0, 0x3000006, 0x7000000}}], 0xe100, 0x0, 0x0) r6 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendfile(r5, r3, 0x0, 0x2000010000a006) pread64(r0, &(0x7f0000000080)=""/99, 0x63, 0xfffffffffffffff9) 11:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 468.952546][T11681] binder: 11677:11681 unknown command 0 11:34:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) (async) sendfile(r0, r1, 0x0, 0x100000000000042) [ 468.999822][T11681] binder: 11677:11681 ioctl c0306201 20000440 returned -22 [ 469.039537][T11681] binder_alloc: 11677: binder_alloc_buf, no vma 11:34:54 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0x4, 0x6, 0x47504a50, 0x6, 0x8, [{0x80, 0x5}, {0xffff}, {0x5, 0x2}, {0x5, 0xffffffe7}, {0x3ff, 0x3f}, {0x80000000, 0x5}, {0x100000, 0x6}, {0x4, 0x9}], 0x5, 0x81, 0x2, 0x2, 0x1}}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000380)={0x4, [0x3, 0x8f, 0x6e, 0x9, 0x3, 0xfffd, 0x0, 0x4, 0x8, 0x2, 0x3ff, 0x1, 0x1000, 0x81, 0x401, 0x4e6, 0xfff9, 0x71c6, 0x6, 0x6, 0x101, 0x8000, 0x5, 0x7, 0xfc, 0x20, 0x800, 0x7, 0x200, 0x1f, 0x8000, 0x984f, 0x6, 0x800, 0x7ff, 0x8, 0x4, 0x5, 0x7ff, 0xffff, 0x8, 0x400, 0x400, 0x4f0, 0xb4c, 0x2d4c, 0x5, 0x9], 0xc}) ftruncate(r1, 0x800) lseek(r1, 0x0, 0x2) r2 = open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) sendfile(r1, r2, 0x0, 0x1dd00) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./bus\x00') ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x1, @raw_data="c88fbc26381b0973cc4266db6488594d463c2367af1c54d7d0eed85109236ada3e89ea5da7abb6226ecda96e793a72076e3e2905f2ed34abd3f4c11ccccc34bc15c67aba1e914bffe75c1d92ebf7ec304b1352edf515113ef878c9e0a44ae1bc90e15ac6646628e5d1ea0b8f310ac6c98d768231f4268164e267b0561af37e0461f0855f7b27bd134a4157e342069910cf325d365405c22e224c49ca8db3001c1436696451a46e0886431b93f310ad27f9a6f9a6ebd7124e134af17a3f5fba281d6570e25841fd35"}) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x0, 0x37}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0x4, 0x6, 0x47504a50, 0x6, 0x8, [{0x80, 0x5}, {0xffff}, {0x5, 0x2}, {0x5, 0xffffffe7}, {0x3ff, 0x3f}, {0x80000000, 0x5}, {0x100000, 0x6}, {0x4, 0x9}], 0x5, 0x81, 0x2, 0x2, 0x1}}) (async) creat(&(0x7f0000000040)='./bus\x00', 0x0) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000380)={0x4, [0x3, 0x8f, 0x6e, 0x9, 0x3, 0xfffd, 0x0, 0x4, 0x8, 0x2, 0x3ff, 0x1, 0x1000, 0x81, 0x401, 0x4e6, 0xfff9, 0x71c6, 0x6, 0x6, 0x101, 0x8000, 0x5, 0x7, 0xfc, 0x20, 0x800, 0x7, 0x200, 0x1f, 0x8000, 0x984f, 0x6, 0x800, 0x7ff, 0x8, 0x4, 0x5, 0x7ff, 0xffff, 0x8, 0x400, 0x400, 0x4f0, 0xb4c, 0x2d4c, 0x5, 0x9], 0xc}) (async) ftruncate(r1, 0x800) (async) lseek(r1, 0x0, 0x2) (async) open(&(0x7f0000000000)='./bus\x00', 0x125000, 0x0) (async) sendfile(r1, r2, 0x0, 0x1dd00) (async) rename(&(0x7f0000000300)='./bus\x00', &(0x7f0000000340)='./bus\x00') (async) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x1, @raw_data="c88fbc26381b0973cc4266db6488594d463c2367af1c54d7d0eed85109236ada3e89ea5da7abb6226ecda96e793a72076e3e2905f2ed34abd3f4c11ccccc34bc15c67aba1e914bffe75c1d92ebf7ec304b1352edf515113ef878c9e0a44ae1bc90e15ac6646628e5d1ea0b8f310ac6c98d768231f4268164e267b0561af37e0461f0855f7b27bd134a4157e342069910cf325d365405c22e224c49ca8db3001c1436696451a46e0886431b93f310ad27f9a6f9a6ebd7124e134af17a3f5fba281d6570e25841fd35"}) (async) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x0, 0x5, 0x2, 0x0, 0x37}) (async) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) (async) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.upper\x00', &(0x7f00000001c0)='\x00', 0x1, 0x0) (async) 11:34:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x0, 0x0) (async) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) 11:34:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:54 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0x0, 0x4, 0x10, 0x10, "91341264cf4d31b2432efdebb3acf58ef47d126195d835b04c56056df72b5cc165c8941daa306d81f85c3a44a2e31f4e8f7015713af713d68dea9a51685ac95f", "40d6560ce4a86857e151d04c1b3440e8b4419959fd7cb0e56f8eaa8181ae9e7efbf1ecebc8f47bbf9b8ea62927da3e25ae3aa102fb01e2a849b9542cf1874892", "428fe8d061e5fb333ca0795f0e3c74d7e687123f4ae9b2f31b02ec5511aaee55", [0xc0b7, 0x2]}) sendfile(r0, r1, 0x0, 0x100000000000042) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x206040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 11:34:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 469.313689][T11704] binder: 11702:11704 unknown command 0 [ 469.330837][T11704] binder: 11702:11704 ioctl c0306201 20000440 returned -22 [ 469.356226][T11704] binder_alloc: 11702: binder_alloc_buf, no vma 11:34:54 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:55 executing program 0: getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800001000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) syz_open_dev$video(&(0x7f0000000780), 0x0, 0x440042) quotactl_fd$Q_QUOTAON(r0, 0x1, r4, &(0x7f0000000700)='./file0\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="323674a5532ba338c54826a3e1", 0xd}, {&(0x7f00000001c0)="a5b095c8988092a2d1acad1bf95d4a25c8ed0403608d8c7149cdb4662910499b472e77a0e5d28cd8e0144c47fb0e3ddd17ee39d25b10c00828b67ff16b0dc9d1dd09500f13e09a205619a7e6944b17258907f192313fa7212f57c526479b2a1b16119652d9dc3905af39a690d0cd220babe1ee09a73c15980d9cfd44a773096bd285722440c400acbe", 0x89}, {&(0x7f0000000280)="6f149a750900daaf56e1452e464b9e2035edca68cf8b4a736dab54c5cfa31c4d53a3ad22180b6984e8ab9d56b44381284819f6d694d86d7cf8e80c62428a", 0x3e}, {&(0x7f00000002c0)="e20977c05b647263d08e64807cd4b0654a899496f6fa2119015d3f1885260aedb8983de0f5e41fc71bf105340e1eb281b30023473e3089e931b4e17fda3f00201ce06ee70cb0d482e4e25287f7a94fff55efdb56f624f306aa5beaf2735be08d661c107b088b1d9106d1602af8c782d21c4fc9568f7754414ed65fd0162ec553403779c964c00b0a4af74053c7688c8e416e7bd07c2658042f579c18b6a21f6331a8e68903f276a0e471186f22a59c658a67370ca9c999481af4898630108107330539e789d512e0", 0xc8}, {&(0x7f00000003c0)="df733dfcb7e9a077bce261fa5e9487d228018a0fd0fffd28b71a9860c6083402c516555f67d0fc268ed00dcb401c82a1c9b0984320388217a9b95a54a01bce30d98960cba52a8117cf5e5fb008627053b095c2ad419088813d0f8d65c19d270e97984f67381eb26e16a08f89f9946ae471ead34d5bc366ff6ee337e58eb60b74f085c0853cf86abe63362de14e990bab8d3c2b27c0ec114522291ec4222ff8ba5bfa08d886619b0ce47a61de66edcdefd92f5bbd2f132981ffcb34ca80e5869ba7f6ba10c1cecadd295e2d588b9cecc8ed01e362ead8673768d57f87e590", 0xde}, {&(0x7f00000004c0)="cc1ccb2facccf01500a3d7482dbc522cbc6aa0aba3677f25457c24aa08221c3f06217b8ed105e3433898e9f37a061af78759d247cf0e2a7ead74923a05b6b62aee28d2abfa1b133a4d6d713d000de33c6ca7262d89dba7077cd9b40856b48f3dc7f43fb62aa3549d1c", 0x69}, {&(0x7f0000000540)="a0c88d8608c7d0df40a08b18a90db6914d91b79e4fb6f89a", 0x18}], 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000000000002000000a4db00000000000011000000000000000000000001000000030000000000000084000000000000000000000007000000830f157f000001640101020a010101880ec8a891b2ddfe8c2761ed917244441b130a010101000000067f0000010000005800000000ffffffff0a01010100000008640101000000f300640101020001000164010100000000df6401010000000009860c0000000007066ecb75bc8907d3ac1414bb00000000"], 0xb8}}], 0x1, 0x50817) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:34:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0x0, 0x4, 0x10, 0x10, "91341264cf4d31b2432efdebb3acf58ef47d126195d835b04c56056df72b5cc165c8941daa306d81f85c3a44a2e31f4e8f7015713af713d68dea9a51685ac95f", "40d6560ce4a86857e151d04c1b3440e8b4419959fd7cb0e56f8eaa8181ae9e7efbf1ecebc8f47bbf9b8ea62927da3e25ae3aa102fb01e2a849b9542cf1874892", "428fe8d061e5fb333ca0795f0e3c74d7e687123f4ae9b2f31b02ec5511aaee55", [0xc0b7, 0x2]}) (async) sendfile(r0, r1, 0x0, 0x100000000000042) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x206040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 11:34:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:55 executing program 0: getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800001000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) syz_open_dev$video(&(0x7f0000000780), 0x0, 0x440042) (async) syz_open_dev$video(&(0x7f0000000780), 0x0, 0x440042) quotactl_fd$Q_QUOTAON(r0, 0x1, r4, &(0x7f0000000700)='./file0\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="323674a5532ba338c54826a3e1", 0xd}, {&(0x7f00000001c0)="a5b095c8988092a2d1acad1bf95d4a25c8ed0403608d8c7149cdb4662910499b472e77a0e5d28cd8e0144c47fb0e3ddd17ee39d25b10c00828b67ff16b0dc9d1dd09500f13e09a205619a7e6944b17258907f192313fa7212f57c526479b2a1b16119652d9dc3905af39a690d0cd220babe1ee09a73c15980d9cfd44a773096bd285722440c400acbe", 0x89}, {&(0x7f0000000280)="6f149a750900daaf56e1452e464b9e2035edca68cf8b4a736dab54c5cfa31c4d53a3ad22180b6984e8ab9d56b44381284819f6d694d86d7cf8e80c62428a", 0x3e}, {&(0x7f00000002c0)="e20977c05b647263d08e64807cd4b0654a899496f6fa2119015d3f1885260aedb8983de0f5e41fc71bf105340e1eb281b30023473e3089e931b4e17fda3f00201ce06ee70cb0d482e4e25287f7a94fff55efdb56f624f306aa5beaf2735be08d661c107b088b1d9106d1602af8c782d21c4fc9568f7754414ed65fd0162ec553403779c964c00b0a4af74053c7688c8e416e7bd07c2658042f579c18b6a21f6331a8e68903f276a0e471186f22a59c658a67370ca9c999481af4898630108107330539e789d512e0", 0xc8}, {&(0x7f00000003c0)="df733dfcb7e9a077bce261fa5e9487d228018a0fd0fffd28b71a9860c6083402c516555f67d0fc268ed00dcb401c82a1c9b0984320388217a9b95a54a01bce30d98960cba52a8117cf5e5fb008627053b095c2ad419088813d0f8d65c19d270e97984f67381eb26e16a08f89f9946ae471ead34d5bc366ff6ee337e58eb60b74f085c0853cf86abe63362de14e990bab8d3c2b27c0ec114522291ec4222ff8ba5bfa08d886619b0ce47a61de66edcdefd92f5bbd2f132981ffcb34ca80e5869ba7f6ba10c1cecadd295e2d588b9cecc8ed01e362ead8673768d57f87e590", 0xde}, {&(0x7f00000004c0)="cc1ccb2facccf01500a3d7482dbc522cbc6aa0aba3677f25457c24aa08221c3f06217b8ed105e3433898e9f37a061af78759d247cf0e2a7ead74923a05b6b62aee28d2abfa1b133a4d6d713d000de33c6ca7262d89dba7077cd9b40856b48f3dc7f43fb62aa3549d1c", 0x69}, {&(0x7f0000000540)="a0c88d8608c7d0df40a08b18a90db6914d91b79e4fb6f89a", 0x18}], 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000000000002000000a4db00000000000011000000000000000000000001000000030000000000000084000000000000000000000007000000830f157f000001640101020a010101880ec8a891b2ddfe8c2761ed917244441b130a010101000000067f0000010000005800000000ffffffff0a01010100000008640101000000f300640101020001000164010100000000df6401010000000009860c0000000007066ecb75bc8907d3ac1414bb00000000"], 0xb8}}], 0x1, 0x50817) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:34:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1f, 0x8, 0x0, 0x4, 0x10, 0x10, "91341264cf4d31b2432efdebb3acf58ef47d126195d835b04c56056df72b5cc165c8941daa306d81f85c3a44a2e31f4e8f7015713af713d68dea9a51685ac95f", "40d6560ce4a86857e151d04c1b3440e8b4419959fd7cb0e56f8eaa8181ae9e7efbf1ecebc8f47bbf9b8ea62927da3e25ae3aa102fb01e2a849b9542cf1874892", "428fe8d061e5fb333ca0795f0e3c74d7e687123f4ae9b2f31b02ec5511aaee55", [0xc0b7, 0x2]}) sendfile(r0, r1, 0x0, 0x100000000000042) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x206040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) 11:34:55 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x200c9b3]}}], 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x4, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0xde, 0xf8, {0x9f, 0x1}, 0x81, 0x2, 0xff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/24, 0x18) r5 = accept$alg(r4, 0x0, 0x0) mmap(&(0x7f000081f000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0xaa628000) (async) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0x500, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x3, 0x0, 0x3000006, 0x7000000}}], 0xe100, 0x0, 0x0) (async) r6 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) sendfile(r5, r3, 0x0, 0x2000010000a006) (async) pread64(r0, &(0x7f0000000080)=""/99, 0x63, 0xfffffffffffffff9) [ 469.619985][T11719] binder: 11716:11719 unknown command 0 [ 469.635778][T11719] binder: 11716:11719 ioctl c0306201 20000440 returned -22 11:34:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 469.690587][T11719] binder_alloc: 11716: binder_alloc_buf, no vma 11:34:55 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000614000304000000fbdbdf25080001000100000008000100010000000861bd247d772d8d7101000000080001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000a0}, 0x91) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r2 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r1, r2, 0x0, 0x100000000000042) 11:34:55 executing program 0: getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800001000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r3, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000740)=0x0) syz_open_dev$video(&(0x7f0000000780), 0x0, 0x440042) (async) quotactl_fd$Q_QUOTAON(r0, 0x1, r4, &(0x7f0000000700)='./file0\x00') (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="323674a5532ba338c54826a3e1", 0xd}, {&(0x7f00000001c0)="a5b095c8988092a2d1acad1bf95d4a25c8ed0403608d8c7149cdb4662910499b472e77a0e5d28cd8e0144c47fb0e3ddd17ee39d25b10c00828b67ff16b0dc9d1dd09500f13e09a205619a7e6944b17258907f192313fa7212f57c526479b2a1b16119652d9dc3905af39a690d0cd220babe1ee09a73c15980d9cfd44a773096bd285722440c400acbe", 0x89}, {&(0x7f0000000280)="6f149a750900daaf56e1452e464b9e2035edca68cf8b4a736dab54c5cfa31c4d53a3ad22180b6984e8ab9d56b44381284819f6d694d86d7cf8e80c62428a", 0x3e}, {&(0x7f00000002c0)="e20977c05b647263d08e64807cd4b0654a899496f6fa2119015d3f1885260aedb8983de0f5e41fc71bf105340e1eb281b30023473e3089e931b4e17fda3f00201ce06ee70cb0d482e4e25287f7a94fff55efdb56f624f306aa5beaf2735be08d661c107b088b1d9106d1602af8c782d21c4fc9568f7754414ed65fd0162ec553403779c964c00b0a4af74053c7688c8e416e7bd07c2658042f579c18b6a21f6331a8e68903f276a0e471186f22a59c658a67370ca9c999481af4898630108107330539e789d512e0", 0xc8}, {&(0x7f00000003c0)="df733dfcb7e9a077bce261fa5e9487d228018a0fd0fffd28b71a9860c6083402c516555f67d0fc268ed00dcb401c82a1c9b0984320388217a9b95a54a01bce30d98960cba52a8117cf5e5fb008627053b095c2ad419088813d0f8d65c19d270e97984f67381eb26e16a08f89f9946ae471ead34d5bc366ff6ee337e58eb60b74f085c0853cf86abe63362de14e990bab8d3c2b27c0ec114522291ec4222ff8ba5bfa08d886619b0ce47a61de66edcdefd92f5bbd2f132981ffcb34ca80e5869ba7f6ba10c1cecadd295e2d588b9cecc8ed01e362ead8673768d57f87e590", 0xde}, {&(0x7f00000004c0)="cc1ccb2facccf01500a3d7482dbc522cbc6aa0aba3677f25457c24aa08221c3f06217b8ed105e3433898e9f37a061af78759d247cf0e2a7ead74923a05b6b62aee28d2abfa1b133a4d6d713d000de33c6ca7262d89dba7077cd9b40856b48f3dc7f43fb62aa3549d1c", 0x69}, {&(0x7f0000000540)="a0c88d8608c7d0df40a08b18a90db6914d91b79e4fb6f89a", 0x18}], 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000000000000000000002000000a4db00000000000011000000000000000000000001000000030000000000000084000000000000000000000007000000830f157f000001640101020a010101880ec8a891b2ddfe8c2761ed917244441b130a010101000000067f0000010000005800000000ffffffff0a01010100000008640101000000f300640101020001000164010100000000df6401010000000009860c0000000007066ecb75bc8907d3ac1414bb00000000"], 0xb8}}], 0x1, 0x50817) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:34:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:55 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x1, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x200c9b3]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000140)={0x4, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000100)={0x0, @tick=0xde, 0xf8, {0x9f, 0x1}, 0x81, 0x2, 0xff}) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x208e24b) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/24, 0x18) (async, rerun: 32) r5 = accept$alg(r4, 0x0, 0x0) (rerun: 32) mmap(&(0x7f000081f000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r4, 0xaa628000) (async) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0x500, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x3, 0x0, 0x3000006, 0x7000000}}], 0xe100, 0x0, 0x0) r6 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async, rerun: 64) sendfile(r5, r3, 0x0, 0x2000010000a006) (async, rerun: 64) pread64(r0, &(0x7f0000000080)=""/99, 0x63, 0xfffffffffffffff9) 11:34:55 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000614000304000000fbdbdf25080001000100000008000100010000000861bd247d772d8d7101000000080001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000a0}, 0x91) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r2 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r1, r2, 0x0, 0x100000000000042) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000614000304000000fbdbdf25080001000100000008000100010000000861bd247d772d8d7101000000080001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000a0}, 0x91) (async) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) pwritev(r2, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r1, r2, 0x0, 0x100000000000042) (async) 11:34:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0xa, @sdr={0x563e5068}}) [ 469.924730][T11745] binder: 11740:11745 unknown command 0 [ 469.968835][T11745] binder: 11740:11745 ioctl c0306201 20000440 returned -22 [ 469.997490][T11745] binder_alloc: 11740: binder_alloc_buf, no vma 11:34:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0xa, @sdr={0x563e5068}}) 11:34:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:55 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x3b, 0x40002) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x4, 0x4, 0xfffffffc, 0x93, '\x00', 0x9}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x81, 0x8a02) write$P9_RREADLINK(r2, &(0x7f0000000680)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)) 11:34:55 executing program 1: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000000614000304000000fbdbdf25080001000100000008000100010000000861bd247d772d8d7101000000080001000000"], 0x40}, 0x1, 0x0, 0x0, 0x40000a0}, 0x91) (async) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r2 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r2, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r1, r2, 0x0, 0x100000000000042) 11:34:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0xa, @sdr={0x563e5068}}) 11:34:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 470.222737][T11766] binder: 11761:11766 unknown command 0 11:34:55 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400002, 0x0) copy_file_range(r1, &(0x7f0000000180)=0x100000001, r0, &(0x7f00000001c0)=0x400, 0x8000000000007, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:34:55 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000780)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90{\xe8\xfa\x80vY\x9b>k\b\xa8\xa0w\x12S', 0x1) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x501040) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x1f, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) [ 470.276556][T11771] binder_alloc: 11761: binder_alloc_buf, no vma [ 470.278184][T11766] binder: 11761:11766 ioctl c0306201 20000440 returned -22 11:34:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:55 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x3b, 0x40002) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x4, 0x4, 0xfffffffc, 0x93, '\x00', 0x9}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) (async) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x81, 0x8a02) write$P9_RREADLINK(r2, &(0x7f0000000680)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)) 11:34:55 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0xffffe000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:56 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400002, 0x0) copy_file_range(r1, &(0x7f0000000180)=0x100000001, r0, &(0x7f00000001c0)=0x400, 0x8000000000007, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:34:56 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000780)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90{\xe8\xfa\x80vY\x9b>k\b\xa8\xa0w\x12S', 0x1) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x501040) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) (async) ioctl$LOOP_CLR_FD(r2, 0x4c01) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x1f, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c02}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:56 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400002, 0x0) copy_file_range(r1, &(0x7f0000000180)=0x100000001, r0, &(0x7f00000001c0)=0x400, 0x8000000000007, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400002, 0x0) (async) copy_file_range(r1, &(0x7f0000000180)=0x100000001, r0, &(0x7f00000001c0)=0x400, 0x8000000000007, 0x0) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) [ 470.545632][T11786] binder: 11780:11786 unknown command 0 [ 470.568587][T11786] binder: 11780:11786 ioctl c0306201 20000440 returned -22 11:34:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f0000000780)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90{\xe8\xfa\x80vY\x9b>k\b\xa8\xa0w\x12S', 0x1) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x501040) (async, rerun: 64) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) (async) ioctl$LOOP_CLR_FD(r2, 0x4c01) (async, rerun: 32) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x1f, 0x0) (async, rerun: 32) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:56 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x3b, 0x40002) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000140)={0x4, 0x4, 0xfffffffc, 0x93, '\x00', 0x9}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = syz_open_dev$vcsn(&(0x7f0000000180), 0x81, 0x8a02) write$P9_RREADLINK(r2, &(0x7f0000000680)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async, rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) (async, rerun: 64) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)) 11:34:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c03}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 470.639888][T11786] binder_alloc: 11780: binder_alloc_buf, no vma 11:34:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:56 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x4, 0x3, 0x9, 0x200, 0x4, 0x5, 0xa}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000009c0)={0x0, @src_change}) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000180)) 11:34:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xc7\xe5=\\\xcc\xf6R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<\xfd\xff\xff\xff\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x05\x00\x00\x00\x00\x00\x00\x00E/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c04}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:56 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000100)=[{0x5, 0x3, 0x0, 0xda, @tick=0x9, {0x5, 0xff}, {0x2, 0x7b}, @connect={{0xd3, 0x2}, {0x5, 0x7f}}}, {0x1f, 0x0, 0x1, 0x97, @time={0xfffffffa, 0x3}, {0x0, 0x81}, {0x6, 0x6}, @addr={0x3f, 0x5}}, {0x7, 0x9, 0x1, 0x9, @time={0x3, 0x2}, {0xfe, 0x6}, {0x5, 0x14}, @ext={0xe6, &(0x7f0000000280)="a000f41faa1f0bcfae0ac532a10c0328275a0e55029eee5eacc744ad6a415949dab1c07cdc1bc3c95fde9cd5134c12428cb811c0e01a0136cb303a21e7859e1f9a5a44e5cd8bbe877a6b5f7538dbd23e53b091e6e306d2483fc916a7dd54c00f294d9e5d2f398d29be5627cecdcc4e9b68922025024773e06696a91d591547c09c34a54470e3814fecabae47eccf141f679601eb50f933256c85480b2ef1fbbcfd77334649976a1ea704a63678c836529be6aeb99e00986f096592a87ae97295ced15d43a92558071c84ee24f59a9fb3aaff51a53bcafefc009633bfcf2df5b74da7c878d802"}}, {0x40, 0x3f, 0x7c, 0x9, @time={0x1, 0x9}, {0x4, 0x6}, {0x58, 0x7}, @raw8={"539c8558cc52d205d49723aa"}}], 0x70) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:56 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xc7\xe5=\\\xcc\xf6R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<\xfd\xff\xff\xff\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x05\x00\x00\x00\x00\x00\x00\x00E/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r0, r1, 0x0, 0x100000000000042) [ 470.872150][T11813] binder: BINDER_SET_CONTEXT_MGR already set [ 470.878204][T11813] binder: 11809:11813 ioctl 4018620d 20000040 returned -16 11:34:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c05}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 470.949023][T11813] binder: 11809:11813 unknown command 0 [ 470.975548][T11813] binder: 11809:11813 ioctl c0306201 20000440 returned -22 11:34:56 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000100)=[{0x5, 0x3, 0x0, 0xda, @tick=0x9, {0x5, 0xff}, {0x2, 0x7b}, @connect={{0xd3, 0x2}, {0x5, 0x7f}}}, {0x1f, 0x0, 0x1, 0x97, @time={0xfffffffa, 0x3}, {0x0, 0x81}, {0x6, 0x6}, @addr={0x3f, 0x5}}, {0x7, 0x9, 0x1, 0x9, @time={0x3, 0x2}, {0xfe, 0x6}, {0x5, 0x14}, @ext={0xe6, &(0x7f0000000280)="a000f41faa1f0bcfae0ac532a10c0328275a0e55029eee5eacc744ad6a415949dab1c07cdc1bc3c95fde9cd5134c12428cb811c0e01a0136cb303a21e7859e1f9a5a44e5cd8bbe877a6b5f7538dbd23e53b091e6e306d2483fc916a7dd54c00f294d9e5d2f398d29be5627cecdcc4e9b68922025024773e06696a91d591547c09c34a54470e3814fecabae47eccf141f679601eb50f933256c85480b2ef1fbbcfd77334649976a1ea704a63678c836529be6aeb99e00986f096592a87ae97295ced15d43a92558071c84ee24f59a9fb3aaff51a53bcafefc009633bfcf2df5b74da7c878d802"}}, {0x40, 0x3f, 0x7c, 0x9, @time={0x1, 0x9}, {0x4, 0x6}, {0x58, 0x7}, @raw8={"539c8558cc52d205d49723aa"}}], 0x70) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000100)=[{0x5, 0x3, 0x0, 0xda, @tick=0x9, {0x5, 0xff}, {0x2, 0x7b}, @connect={{0xd3, 0x2}, {0x5, 0x7f}}}, {0x1f, 0x0, 0x1, 0x97, @time={0xfffffffa, 0x3}, {0x0, 0x81}, {0x6, 0x6}, @addr={0x3f, 0x5}}, {0x7, 0x9, 0x1, 0x9, @time={0x3, 0x2}, {0xfe, 0x6}, {0x5, 0x14}, @ext={0xe6, &(0x7f0000000280)="a000f41faa1f0bcfae0ac532a10c0328275a0e55029eee5eacc744ad6a415949dab1c07cdc1bc3c95fde9cd5134c12428cb811c0e01a0136cb303a21e7859e1f9a5a44e5cd8bbe877a6b5f7538dbd23e53b091e6e306d2483fc916a7dd54c00f294d9e5d2f398d29be5627cecdcc4e9b68922025024773e06696a91d591547c09c34a54470e3814fecabae47eccf141f679601eb50f933256c85480b2ef1fbbcfd77334649976a1ea704a63678c836529be6aeb99e00986f096592a87ae97295ced15d43a92558071c84ee24f59a9fb3aaff51a53bcafefc009633bfcf2df5b74da7c878d802"}}, {0x40, 0x3f, 0x7c, 0x9, @time={0x1, 0x9}, {0x4, 0x6}, {0x58, 0x7}, @raw8={"539c8558cc52d205d49723aa"}}], 0x70) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) [ 471.002616][T11813] binder_alloc_mmap_handler: 7 callbacks suppressed [ 471.002638][T11813] binder_alloc: binder_alloc_mmap_handler: 11809 20bfe000-20ffe000 already mapped failed -16 11:34:56 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xc7\xe5=\\\xcc\xf6R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<\xfd\xff\xff\xff\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x05\x00\x00\x00\x00\x00\x00\x00E/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c06}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:56 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r0 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x30000000000000, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x21, 0x2}, 0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="006816504e324e333fb794a934d2a3a635ba8abd8bfde5a2f3577891866c60f64fdd3e66f9a0aff57b0e20c4b74239efad2d7de17ac6a20a60c3138b10ad16e76cf0bd117afed5a3f109ee5825e0929e224ea0264c56db059238534826d0e6778894e9c53be1d1ea37c4ae8830dd808477731c714b80f5dcba45406bd6588c1a4a81f86e48f668e55228bbcb8fd8ed1f215b6ddb9f524d15c2efea170b788568201063d1fa7f34c9e0c3c557c0ac784e858636c231b61679f303", 0xba}, {&(0x7f00000000c0)="00d867c059d50000d089573720000000", 0x10}], 0x2, 0xd53e, 0xfffffffc) syz_open_dev$I2C(&(0x7f0000000000), 0xb, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x110000000000003e) [ 471.181451][T11832] binder: 11828:11832 unknown command 0 [ 471.195248][T11832] binder: 11828:11832 ioctl c0306201 20000440 returned -22 [ 471.219858][T11832] binder_alloc: binder_alloc_mmap_handler: 11828 20bfe000-20ffe000 already mapped failed -16 11:34:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c07}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:56 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x7f98d5a7cda9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:56 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000100)=[{0x5, 0x3, 0x0, 0xda, @tick=0x9, {0x5, 0xff}, {0x2, 0x7b}, @connect={{0xd3, 0x2}, {0x5, 0x7f}}}, {0x1f, 0x0, 0x1, 0x97, @time={0xfffffffa, 0x3}, {0x0, 0x81}, {0x6, 0x6}, @addr={0x3f, 0x5}}, {0x7, 0x9, 0x1, 0x9, @time={0x3, 0x2}, {0xfe, 0x6}, {0x5, 0x14}, @ext={0xe6, &(0x7f0000000280)="a000f41faa1f0bcfae0ac532a10c0328275a0e55029eee5eacc744ad6a415949dab1c07cdc1bc3c95fde9cd5134c12428cb811c0e01a0136cb303a21e7859e1f9a5a44e5cd8bbe877a6b5f7538dbd23e53b091e6e306d2483fc916a7dd54c00f294d9e5d2f398d29be5627cecdcc4e9b68922025024773e06696a91d591547c09c34a54470e3814fecabae47eccf141f679601eb50f933256c85480b2ef1fbbcfd77334649976a1ea704a63678c836529be6aeb99e00986f096592a87ae97295ced15d43a92558071c84ee24f59a9fb3aaff51a53bcafefc009633bfcf2df5b74da7c878d802"}}, {0x40, 0x3f, 0x7c, 0x9, @time={0x1, 0x9}, {0x4, 0x6}, {0x58, 0x7}, @raw8={"539c8558cc52d205d49723aa"}}], 0x70) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 471.247328][T11832] binder_alloc: 11828: binder_alloc_buf, no vma 11:34:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c08}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:56 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r0 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x30000000000000, 0x0) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x21, 0x2}, 0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="006816504e324e333fb794a934d2a3a635ba8abd8bfde5a2f3577891866c60f64fdd3e66f9a0aff57b0e20c4b74239efad2d7de17ac6a20a60c3138b10ad16e76cf0bd117afed5a3f109ee5825e0929e224ea0264c56db059238534826d0e6778894e9c53be1d1ea37c4ae8830dd808477731c714b80f5dcba45406bd6588c1a4a81f86e48f668e55228bbcb8fd8ed1f215b6ddb9f524d15c2efea170b788568201063d1fa7f34c9e0c3c557c0ac784e858636c231b61679f303", 0xba}, {&(0x7f00000000c0)="00d867c059d50000d089573720000000", 0x10}], 0x2, 0xd53e, 0xfffffffc) (async) syz_open_dev$I2C(&(0x7f0000000000), 0xb, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x110000000000003e) [ 471.393617][T11843] binder: 11840:11843 unknown command 0 [ 471.414009][T11843] binder: 11840:11843 ioctl c0306201 20000440 returned -22 11:34:57 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r0 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x30000000000000, 0x0) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x8000, 0x21, 0x2}, 0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="006816504e324e333fb794a934d2a3a635ba8abd8bfde5a2f3577891866c60f64fdd3e66f9a0aff57b0e20c4b74239efad2d7de17ac6a20a60c3138b10ad16e76cf0bd117afed5a3f109ee5825e0929e224ea0264c56db059238534826d0e6778894e9c53be1d1ea37c4ae8830dd808477731c714b80f5dcba45406bd6588c1a4a81f86e48f668e55228bbcb8fd8ed1f215b6ddb9f524d15c2efea170b788568201063d1fa7f34c9e0c3c557c0ac784e858636c231b61679f303", 0xba}, {&(0x7f00000000c0)="00d867c059d50000d089573720000000", 0x10}], 0x2, 0xd53e, 0xfffffffc) (async) syz_open_dev$I2C(&(0x7f0000000000), 0xb, 0x0) (async) sendfile(0xffffffffffffffff, r0, 0x0, 0x110000000000003e) 11:34:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000100)=[{0x2, 0xf3, 0x0, 0xae, @time={0x80, 0x7ff}, {0x0, 0x7f}, {0x6, 0xff}, @note={0x81, 0x3, 0xff, 0x5, 0xa28d}}], 0x1c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 471.445126][T11843] binder_alloc: binder_alloc_mmap_handler: 11840 20bfe000-20ffe000 already mapped failed -16 [ 471.476066][T11843] binder_alloc: 11840: binder_alloc_buf, no vma 11:34:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c09}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x3, 0x100) sendfile(r1, r2, &(0x7f0000000040)=0x4, 0x400) 11:34:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0a}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:57 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x4, 0x3, 0x9, 0x200, 0x4, 0x5, 0xa}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000009c0)={0x0, @src_change}) (async) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000180)) 11:34:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x3, 0x100) sendfile(r1, r2, &(0x7f0000000040)=0x4, 0x400) [ 471.700391][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 471.700411][ T28] audit: type=1400 audit(1706355297.238:325): avc: denied { read } for pid=11858 comm="syz-executor.3" name="btrfs-control" dev="devtmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 471.770627][ T28] audit: type=1400 audit(1706355297.268:326): avc: denied { open } for pid=11858 comm="syz-executor.3" path="/dev/btrfs-control" dev="devtmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 471.773026][T11866] binder: 11862:11866 unknown command 0 [ 471.823658][ T28] audit: type=1400 audit(1706355297.348:327): avc: denied { ioctl } for pid=11858 comm="syz-executor.3" path="/dev/btrfs-control" dev="devtmpfs" ino=1118 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 471.861066][T11873] binder_alloc: binder_alloc_mmap_handler: 11862 20bfe000-20ffe000 already mapped failed -16 11:34:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0c}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000100)=[{0x2, 0xf3, 0x0, 0xae, @time={0x80, 0x7ff}, {0x0, 0x7f}, {0x6, 0xff}, @note={0x81, 0x3, 0xff, 0x5, 0xa28d}}], 0x1c) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) (async, rerun: 32) r2 = syz_open_dev$admmidi(&(0x7f0000000000), 0x3, 0x100) (rerun: 32) sendfile(r1, r2, &(0x7f0000000040)=0x4, 0x400) [ 471.874145][T11866] binder: 11862:11866 ioctl c0306201 20000440 returned -22 [ 471.906096][T11866] binder_alloc: 11862: binder_alloc_buf, no vma 11:34:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0xe0ffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0e}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000100)=[{0x2, 0xf3, 0x0, 0xae, @time={0x80, 0x7ff}, {0x0, 0x7f}, {0x6, 0xff}, @note={0x81, 0x3, 0xff, 0x5, 0xa28d}}], 0x1c) (async) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 472.088039][T11885] binder: BINDER_SET_CONTEXT_MGR already set [ 472.106309][T11885] binder: 11882:11885 ioctl 4018620d 20000040 returned -16 [ 472.123215][T11885] binder: 11882:11885 unknown command 0 11:34:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c0f}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:57 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 472.150235][T11885] binder: 11882:11885 ioctl c0306201 20000440 returned -22 [ 472.177032][T11885] binder_alloc: binder_alloc_mmap_handler: 11882 20bfe000-20ffe000 already mapped failed -16 11:34:57 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x3f, 0x7fff, 0x1, 'queue1\x00', 0x2}) 11:34:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c10}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 472.340590][T11895] binder: BINDER_SET_CONTEXT_MGR already set [ 472.359910][T11895] binder: 11892:11895 ioctl 4018620d 20000040 returned -16 [ 472.383345][T11895] binder: 11892:11895 unknown command 0 11:34:57 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x239, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x44}}, 0x24002054) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r6}, 0x10) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)=0x80000) fchown(r8, 0x0, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) getgroups(0x5, &(0x7f0000000700)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01]) sendmmsg$unix(r2, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)="eddb4e1397316049a53986f148f2fdd70fcf7c908d440fcabb3107f46ba7b29bf8fe07a5be28", 0x26}], 0x1, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r4, r6, r2]}}, @rights={{0x38, 0x1, 0x1, [r0, r2, r2, r1, r2, r1, r0, r7, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r2, r0, r0]}}], 0x150, 0x400c001}}], 0x2, 0x20000010) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r13 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) write$cgroup_pid(r13, &(0x7f0000000180)=r14, 0x12) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x505, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:57 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1c}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 472.390800][T11895] binder: 11892:11895 ioctl c0306201 20000440 returned -22 [ 472.406551][T11895] binder_alloc: binder_alloc_mmap_handler: 11892 20bfe000-20ffe000 already mapped failed -16 [ 472.439517][T11901] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) 11:34:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x3f, 0x7fff, 0x1, 'queue1\x00', 0x2}) 11:34:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c60}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 472.584013][T11906] binder: 11905:11906 unknown command 0 [ 472.590151][T11906] binder: 11905:11906 ioctl c0306201 20000440 returned -22 [ 472.607201][T11906] binder_alloc: binder_alloc_mmap_handler: 11905 20bfe000-20ffe000 already mapped failed -16 11:34:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x239, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x44}}, 0x24002054) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0xa, 0x0) (async) r5 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r6}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r6}, 0x10) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)=0x80000) fchown(r8, 0x0, 0x0) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) getgroups(0x5, &(0x7f0000000700)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01]) (async) getgroups(0x5, &(0x7f0000000700)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01]) sendmmsg$unix(r2, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)="eddb4e1397316049a53986f148f2fdd70fcf7c908d440fcabb3107f46ba7b29bf8fe07a5be28", 0x26}], 0x1, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r4, r6, r2]}}, @rights={{0x38, 0x1, 0x1, [r0, r2, r2, r1, r2, r1, r0, r7, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r2, r0, r0]}}], 0x150, 0x400c001}}], 0x2, 0x20000010) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) (async) r13 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) write$cgroup_pid(r13, &(0x7f0000000180)=r14, 0x12) (async) write$cgroup_pid(r13, &(0x7f0000000180)=r14, 0x12) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x505, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendfile(r0, r1, 0x0, 0x100000000000042) (async) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x3f, 0x7fff, 0x1, 'queue1\x00', 0x2}) 11:34:58 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x4, 0x3, 0x9, 0x200, 0x4, 0x5, 0xa}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000009c0)={0x0, @src_change}) (async) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000180)) 11:34:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) [ 472.789636][T11913] binder: 11912:11913 unknown command 0 [ 472.813741][T11913] binder: 11912:11913 ioctl c0306201 20000440 returned -22 11:34:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x3, 0x1, @dev}]}, 0x24}}, 0x0) [ 472.837888][T11913] binder_alloc: binder_alloc_mmap_handler: 11912 20bfe000-20ffe000 already mapped failed -16 11:34:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0xff}, @queue={0xcb, {0x80, 0x7}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) copy_file_range(r0, &(0x7f0000000100)=0x7, r0, &(0x7f0000000140)=0xe95c, 0x0, 0x0) 11:34:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0x239, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x44}}, 0x24002054) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r6}, 0x10) (async) r7 = openat$audio(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000000)) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000000c0)=0x80000) fchown(r8, 0x0, 0x0) (async) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) (async) getgroups(0x5, &(0x7f0000000700)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0xee01]) sendmmsg$unix(r2, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000300)="eddb4e1397316049a53986f148f2fdd70fcf7c908d440fcabb3107f46ba7b29bf8fe07a5be28", 0x26}], 0x1, 0x0, 0x0, 0x8000}}, {{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400), 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x1c, 0x1, 0x1, [r4, r6, r2]}}, @rights={{0x38, 0x1, 0x1, [r0, r2, r2, r1, r2, r1, r0, r7, r0, r8]}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}, @rights={{0x24, 0x1, 0x1, [r0, r2, r2, r0, r0]}}], 0x150, 0x400c001}}], 0x2, 0x20000010) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)={0x24, r3, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) r13 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) write$cgroup_pid(r13, &(0x7f0000000180)=r14, 0x12) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x505, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x800) (async) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0xff}, @queue={0xcb, {0x80, 0x7}}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) copy_file_range(r0, &(0x7f0000000100)=0x7, r0, &(0x7f0000000140)=0xe95c, 0x0, 0x0) [ 473.016282][T11930] binder: 11928:11930 unknown command 0 [ 473.022236][T11930] binder: 11928:11930 ioctl c0306201 20000440 returned -22 [ 473.039332][T11932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 473.052617][T11930] binder_alloc: binder_alloc_mmap_handler: 11928 20bfe000-20ffe000 already mapped failed -16 11:34:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) fallocate(r1, 0x10, 0xffffffff, 0xa08) 11:34:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x5, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:58 executing program 1: syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) fallocate(r1, 0x10, 0xffffffff, 0xa08) [ 473.232271][T11944] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 473.258222][T11947] binder: 11945:11947 unknown command 0 11:34:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0xff}, @queue={0xcb, {0x80, 0x7}}}], 0x1c) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (rerun: 64) copy_file_range(r0, &(0x7f0000000100)=0x7, r0, &(0x7f0000000140)=0xe95c, 0x0, 0x0) 11:34:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r0, r1, 0x0, 0x100000000000042) fallocate(r1, 0x10, 0xffffffff, 0xa08) 11:34:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x44, 0x1, @dev}]}, 0x24}}, 0x0) [ 473.281383][T11947] binder: 11945:11947 ioctl c0306201 20000440 returned -22 [ 473.313799][T11951] binder_alloc: binder_alloc_mmap_handler: 11945 20bfe000-20ffe000 already mapped failed -16 11:34:58 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:58 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x10000, 0x1, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xfffffffd, 0x0, 0x1, 'queue0\x00', 0x8}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x3, 0x9, 0x1, 'queue1\x00', 0xffff8001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:58 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000bc0)={0x4c4, 0x8001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x12, r1, 0x739be000) [ 473.397385][T11955] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 11:34:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0xe8c, 0x1, @dev}]}, 0x24}}, 0x0) [ 473.504124][T11961] binder: 11960:11961 unknown command 0 [ 473.516768][T11961] binder: 11960:11961 ioctl c0306201 20000440 returned -22 11:34:59 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 473.528243][ T28] audit: type=1400 audit(1706355299.058:328): avc: denied { execute } for pid=11963 comm="syz-executor.1" path=2F6D656D66643A55FF4105D6E7FCA3B004E21BDACB993232E35A6F4C14A78C27A7CFFF699125EA67F469C344FD80AE546824F02B39AC5CA4E53D5CCCF6C452884194E0FFFFFF58911A758356C148D30D5A012162C0AE57C51FECFDE3C107EB5C2C985020F2FEC5F9D49A16A6B2DE82A8F9CB7BA96D83FB848EEFE323CF24446689E23F6096453D2DD69128347945451D819C202864656C6574656429 dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 11:34:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) sendfile(r0, r1, 0x0, 0x100000000000042) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000bc0)={0x4c4, 0x8001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x12, r1, 0x739be000) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x12, r1, 0x739be000) 11:34:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x4, 0x1, 0x20}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) [ 473.604144][T11968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 11:34:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0xe94, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:59 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x10000, 0x1, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xfffffffd, 0x0, 0x1, 'queue0\x00', 0x8}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x3, 0x9, 0x1, 'queue1\x00', 0xffff8001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async, rerun: 64) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (rerun: 64) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x239, 0x0) (async) sendfile(r0, r1, 0x0, 0x100000000000042) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000bc0)={0x4c4, 0x8001, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6, 0x12, r1, 0x739be000) 11:34:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0xe9c, 0x1, @dev}]}, 0x24}}, 0x0) [ 473.730375][T11974] binder: 11969:11974 unknown command 0 [ 473.743848][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 473.744931][T11974] binder: 11969:11974 ioctl c0306201 20000440 returned -22 11:34:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x4, 0x1, 0x20}) (async, rerun: 64) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (rerun: 64) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) [ 473.817878][T11974] binder_alloc_new_buf: 5 callbacks suppressed [ 473.817898][T11974] binder_alloc: 11969: binder_alloc_buf, no vma [ 473.892775][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 11:34:59 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x1f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:59 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x10000, 0x1, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xfffffffd, 0x0, 0x1, 'queue0\x00', 0x8}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x3, 0x9, 0x1, 'queue1\x00', 0xffff8001}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x1, 0x10000, 0x1, 'queue1\x00', 0x5}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0xfffffffd, 0x0, 0x1, 'queue0\x00', 0x8}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x3, 0x9, 0x1, 'queue1\x00', 0xffff8001}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) 11:34:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0xea4, 0x1, @dev}]}, 0x24}}, 0x0) 11:34:59 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x8, 0x4) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x103382) r2 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x237, 0x5) sendfile(r1, r2, 0x0, 0x100000000000042) [ 474.069504][T11995] binder: 11993:11995 unknown command 0 [ 474.078624][T11995] binder: 11993:11995 ioctl c0306201 20000440 returned -22 11:34:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000000)={0x4, 0x1, 0x20}) (async, rerun: 64) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (rerun: 64) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 11:34:59 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x8, 0x4) (async) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x103382) (async) r2 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x237, 0x5) (async) sendfile(r1, r2, 0x0, 0x100000000000042) [ 474.111223][T11995] binder_alloc: 11993: binder_alloc_buf, no vma [ 474.120349][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 11:34:59 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:34:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x2, @dev}]}, 0x24}}, 0x0) 11:34:59 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffd]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:34:59 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x8, 0x4) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x103382) r2 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x237, 0x5) sendfile(r1, r2, 0x0, 0x100000000000042) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x8, 0x4) (async) syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x103382) (async) memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) (async) pwritev(r1, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00', 0x1}], 0x1, 0x237, 0x5) (async) sendfile(r1, r2, 0x0, 0x100000000000042) (async) 11:34:59 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0xa, @raw_data="bba76c2d58dd1ae582d7f56b9112f50ac4243466a360d0c02a84e703209598f851c45610d4beee87c859aa0840eadee4a4487a40742fef18784561881509cbfbb188bb975493abfc4f4a81da0254c84dbaa51b835dedfdea0341329228c91ef9532576fae20222460effbf0df84efad6cefa10b9b36dc9951316c84e439efdbba2cbd0ff3dab9e80bc1e578a543a3c1d0c825be0fd495be889f1351e87075fb86a34b93a1527792554e14f2c27518542166008e63214a267ba376473e4a97f7b7adbaa54f113eed2"}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=',\x00') 11:34:59 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x4, @dev}]}, 0x24}}, 0x0) [ 474.329388][T12014] binder: 12011:12014 unknown command 0 [ 474.338631][T12014] binder: 12011:12014 ioctl c0306201 20000440 returned -22 [ 474.358093][T12014] binder_alloc: 12011: binder_alloc_buf, no vma 11:34:59 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000000), 0x0, 0x239, 0x2) sendfile(r0, r1, 0x0, 0x100000000000042) 11:34:59 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0xa, @raw_data="bba76c2d58dd1ae582d7f56b9112f50ac4243466a360d0c02a84e703209598f851c45610d4beee87c859aa0840eadee4a4487a40742fef18784561881509cbfbb188bb975493abfc4f4a81da0254c84dbaa51b835dedfdea0341329228c91ef9532576fae20222460effbf0df84efad6cefa10b9b36dc9951316c84e439efdbba2cbd0ff3dab9e80bc1e578a543a3c1d0c825be0fd495be889f1351e87075fb86a34b93a1527792554e14f2c27518542166008e63214a267ba376473e4a97f7b7adbaa54f113eed2"}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=',\x00') 11:35:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1e, @dev}]}, 0x24}}, 0x0) 11:35:00 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) (async) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffd]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 474.534751][T12029] binder: 12027:12029 unknown command 0 [ 474.552659][T12029] binder: 12027:12029 ioctl c0306201 20000440 returned -22 11:35:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000000), 0x0, 0x239, 0x2) sendfile(r0, r1, 0x0, 0x100000000000042) 11:35:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async, rerun: 64) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f00000001c0)={0xa, @raw_data="bba76c2d58dd1ae582d7f56b9112f50ac4243466a360d0c02a84e703209598f851c45610d4beee87c859aa0840eadee4a4487a40742fef18784561881509cbfbb188bb975493abfc4f4a81da0254c84dbaa51b835dedfdea0341329228c91ef9532576fae20222460effbf0df84efad6cefa10b9b36dc9951316c84e439efdbba2cbd0ff3dab9e80bc1e578a543a3c1d0c825be0fd495be889f1351e87075fb86a34b93a1527792554e14f2c27518542166008e63214a267ba376473e4a97f7b7adbaa54f113eed2"}) (async, rerun: 32) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (rerun: 32) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000000)=',\x00') [ 474.589301][T12029] binder_alloc: 12027: binder_alloc_buf, no vma 11:35:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x44, @dev}]}, 0x24}}, 0x0) 11:35:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:00 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) (async) r1 = memfd_create(&(0x7f0000000a00)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\xda\xcb\x9922\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xffi\x91%\xeag\xf4i\xc3D\xfd\x80\xaeTh$\xf0+9\xac\\\xa4\xe5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91(4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\x04\x00\x00\x00\xf1!\xbch\x94\xd6\xf0\xd0\xd8\xe6\xff\x95y\x10\x06^\xdf\x0563\x9dX\xa3\xb5w\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd1AC\xf5Z4h\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\xc0-v\x99\xe9\xed\x1du\x8e\x1a\xa8&[\x9d\xa2\xb9\xe5<\x06g\xfaE \x18|\x03\x00\x91\x1b\x0f\xaar{\xack,d\x84\xc8\xb5q{%\'#\xe1%\xa2M\xd8\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00p\xbabso\x19\x81\x9c\xe7\x92\x1a\x8bS\x95\xeaZ\xefn\xa7F\xe8v\x87\x10\xc0\xb1\x94%\x1c@\x0eV\xb7b\x1f\xf2G\x93\x1c\xbe\x99\x1a\x96S_6\xa7EE/8\x86HEo\'N\xa6\xfa*|\xec[\xe6D\xf1\xfbr\xddW\xdbQX\xd1\xc6w\xd9\x05\xc5\x86R\xf8\x8b\x14\x99h`\xb4/b\xfbpP\x93\xd3.\x90', 0x0) pwritev(r1, &(0x7f0000000000), 0x0, 0x239, 0x2) (async) sendfile(r0, r1, 0x0, 0x100000000000042) 11:35:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x1a}}]}, 0x24}}, 0x0) 11:35:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x3, 0x3, 0x78573ecb, 0x1, 0xfffffffd, 0x1, 0x2}) [ 474.834722][T12052] binder: 12050:12052 unknown command 0 [ 474.846187][T12052] binder: 12050:12052 ioctl c0306201 20000440 returned -22 [ 474.873404][T12052] binder_alloc: 12050: binder_alloc_buf, no vma 11:35:00 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0xfffffffd]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:00 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x1a}}]}, 0x24}}, 0x0) [ 475.032374][T12061] binder: BINDER_SET_CONTEXT_MGR already set [ 475.047988][T12061] binder: 12060:12061 ioctl 4018620d 20000040 returned -16 [ 475.075561][T12061] binder: 12060:12061 unknown command 0 [ 475.087211][T12061] binder: 12060:12061 ioctl c0306201 20000440 returned -22 11:35:00 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x651e000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 475.297227][T12069] binder: 12068:12069 unknown command 0 [ 475.304279][T12069] binder: 12068:12069 ioctl c0306201 20000440 returned -22 [ 475.326920][T12069] binder_alloc: 12068: binder_alloc_buf, no vma 11:35:00 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0xf543, 0x4, 0x1381, {0x5, 0x80000001}, 0x1f, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 11:35:00 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x3, 0x3, 0x78573ecb, 0x1, 0xfffffffd, 0x1, 0x2}) 11:35:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) 11:35:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:01 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000000)={0x3, 0x3, 0x78573ecb, 0x1, 0xfffffffd, 0x1, 0x2}) 11:35:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2}}]}, 0x24}}, 0x0) 11:35:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0xf543, 0x4, 0x1381, {0x5, 0x80000001}, 0x1f, 0x7fff}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) [ 475.621459][T12079] binder: 12078:12079 unknown command 0 [ 475.646923][T12079] binder: 12078:12079 ioctl c0306201 20000440 returned -22 [ 475.672536][T12079] binder_alloc: 12078: binder_alloc_buf, no vma 11:35:01 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x7) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:35:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3}}]}, 0x24}}, 0x0) 11:35:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000100)={0xf543, 0x4, 0x1381, {0x5, 0x80000001}, 0x1f, 0x7fff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) 11:35:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x4}}]}, 0x24}}, 0x0) 11:35:01 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x7) (async, rerun: 64) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (rerun: 64) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) [ 475.904910][T12094] binder: 12092:12094 unknown command 0 [ 475.927410][T12094] binder: 12092:12094 ioctl c0306201 20000440 returned -22 11:35:01 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000280)=[{0x80, 0x5, 0x1, 0x3, @tick=0x81, {0x3f, 0xff}, {0xb3, 0x40}, @raw32={[0x1, 0x9, 0x8]}}, {0xff, 0x0, 0x8, 0xf8, @time={0x2, 0x81}, {0x7, 0x1f}, {0x3, 0xa0}, @ext={0x7c, &(0x7f0000000140)="3f7ec18b08a1b58206ad4abe237f1b03acf37bbc2c25d15b143f57389fc6f0ea00b8a5333e8ac82e8cb972d44604677ade89791a72522fc8ae88ec229820ebc345763f2d8a3bab49ccf63c568b6abbe78bfbe928f159cb6ea16e67ac8928254e9a7c510ba1aaffdc879d31a2597a342cd57e2804cfd342638f9e8f93"}}, {0x20, 0x7f, 0x0, 0x80, @time={0x6, 0x8}, {0x1, 0x82}, {0x8, 0xff}, @queue={0x40, {0x10001, 0x9b}}}], 0x54) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000004}) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x100) r3 = socket$l2tp6(0xa, 0x2, 0x73) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r0, 0xf0187cded5fd3585}, {r0, 0x20}, {0xffffffffffffffff, 0x12}, {r2, 0x408}, {r0, 0x100}, {r0}, {r0, 0x10}, {r3}, {r0, 0x8000}, {r0, 0xc250}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0x4]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000300)={{0x6, 0x46}, {0xbe, 0x5}, 0x4, 0x4}) [ 475.972297][T12094] binder_alloc: 12092: binder_alloc_buf, no vma 11:35:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x5}}]}, 0x24}}, 0x0) 11:35:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x6}}]}, 0x24}}, 0x0) [ 476.207775][T12111] binder: 12107:12111 unknown command 0 [ 476.215995][T12111] binder: 12107:12111 ioctl c0306201 20000440 returned -22 [ 476.256750][T12111] binder_alloc_mmap_handler: 10 callbacks suppressed [ 476.256771][T12111] binder_alloc: binder_alloc_mmap_handler: 12107 20bfe000-20ffe000 already mapped failed -16 11:35:01 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x7}}]}, 0x24}}, 0x0) 11:35:01 executing program 0: creat(&(0x7f0000000000)='./file0\x00', 0x7) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) [ 476.334356][T12111] binder_alloc: 12107: binder_alloc_buf, no vma 11:35:01 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x8}}]}, 0x24}}, 0x0) 11:35:02 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000280), &(0x7f00000004c0)=0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) sendfile(r1, r0, &(0x7f0000000480)=0x8, 0xffffffff) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x8, @win={{0x1000, 0xb8c8, 0x2, 0x3f}, 0x2, 0x8, &(0x7f0000000300)={{0x26f, 0x2, 0x0, 0x80000001}, &(0x7f00000002c0)={{0x800, 0x10001, 0x6, 0xf0000000}, &(0x7f0000000000)={{0x7f, 0x9, 0xfffffffa, 0x1ff}}}}, 0xf4, &(0x7f0000000340)="5154254ddad1ac1d497cbb989c936c6988501d4a1adbe9"}}) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/106, 0x6a}, 0x5}], 0x1, 0x40002001, &(0x7f0000000780)={0x0, 0x3938700}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x6, 0x401, 0x1, {0xa, @raw_data="f580ad273ff099ef327851d29256705920ebbf5eaeee887b03fa80a1927882e50bc76dd99850a49b3e1dfebd195faee9e6ebc31febc9e0fbc2fca08865cf057215ed0413567d921cc4556e9d7c8e761e81c9ffa345ccd5daa9735584eef7785b490b1c51b163bbaa7d1989bd2d44bd2816c2d35ee71f6c13c5aa32f8f49b6c6b7441e62672f01463e7c646d1318e4a6df2cf9698f707fb4d1c01ee847d6c7f5aae9cde41c8cb38da2a40ba025855f3f1d1040beaca4b57e956c12919b69ebada61324b57de13ac61"}, 0x3c8}) [ 476.569978][T12123] binder: 12122:12123 unknown command 0 [ 476.575597][T12123] binder: 12122:12123 ioctl c0306201 20000440 returned -22 11:35:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x9}}]}, 0x24}}, 0x0) [ 476.604936][ T28] audit: type=1400 audit(1706355302.138:329): avc: denied { create } for pid=12125 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 476.633413][T12123] binder_alloc: binder_alloc_mmap_handler: 12122 20bfe000-20ffe000 already mapped failed -16 [ 476.658144][ T28] audit: type=1400 audit(1706355302.138:330): avc: denied { getopt } for pid=12125 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 476.686638][T12123] binder_alloc: 12122: binder_alloc_buf, no vma 11:35:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0xa9cda7d5987f0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 476.704449][ T28] audit: type=1400 audit(1706355302.138:331): avc: denied { read } for pid=12125 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 11:35:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x24}}, 0x0) [ 476.824695][T12132] binder: 12131:12132 unknown command 0 [ 476.842123][T12132] binder: 12131:12132 ioctl c0306201 20000440 returned -22 11:35:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xc}}]}, 0x24}}, 0x0) [ 476.865382][T12132] binder_alloc: binder_alloc_mmap_handler: 12131 20bfe000-20ffe000 already mapped failed -16 11:35:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:02 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000280)=[{0x80, 0x5, 0x1, 0x3, @tick=0x81, {0x3f, 0xff}, {0xb3, 0x40}, @raw32={[0x1, 0x9, 0x8]}}, {0xff, 0x0, 0x8, 0xf8, @time={0x2, 0x81}, {0x7, 0x1f}, {0x3, 0xa0}, @ext={0x7c, &(0x7f0000000140)="3f7ec18b08a1b58206ad4abe237f1b03acf37bbc2c25d15b143f57389fc6f0ea00b8a5333e8ac82e8cb972d44604677ade89791a72522fc8ae88ec229820ebc345763f2d8a3bab49ccf63c568b6abbe78bfbe928f159cb6ea16e67ac8928254e9a7c510ba1aaffdc879d31a2597a342cd57e2804cfd342638f9e8f93"}}, {0x20, 0x7f, 0x0, 0x80, @time={0x6, 0x8}, {0x1, 0x82}, {0x8, 0xff}, @queue={0x40, {0x10001, 0x9b}}}], 0x54) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) (async) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000004}) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x100) (async) r3 = socket$l2tp6(0xa, 0x2, 0x73) (async) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r0, 0xf0187cded5fd3585}, {r0, 0x20}, {0xffffffffffffffff, 0x12}, {r2, 0x408}, {r0, 0x100}, {r0}, {r0, 0x10}, {r3}, {r0, 0x8000}, {r0, 0xc250}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0x4]}, 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000300)={{0x6, 0x46}, {0xbe, 0x5}, 0x4, 0x4}) 11:35:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xe}}]}, 0x24}}, 0x0) [ 477.042236][T12137] binder: 12136:12137 unknown command 0 [ 477.053482][T12137] binder: 12136:12137 ioctl c0306201 20000440 returned -22 [ 477.068122][T12137] binder_alloc: binder_alloc_mmap_handler: 12136 20bfe000-20ffe000 already mapped failed -16 11:35:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xf}}]}, 0x24}}, 0x0) 11:35:02 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000280)=[{0x80, 0x5, 0x1, 0x3, @tick=0x81, {0x3f, 0xff}, {0xb3, 0x40}, @raw32={[0x1, 0x9, 0x8]}}, {0xff, 0x0, 0x8, 0xf8, @time={0x2, 0x81}, {0x7, 0x1f}, {0x3, 0xa0}, @ext={0x7c, &(0x7f0000000140)="3f7ec18b08a1b58206ad4abe237f1b03acf37bbc2c25d15b143f57389fc6f0ea00b8a5333e8ac82e8cb972d44604677ade89791a72522fc8ae88ec229820ebc345763f2d8a3bab49ccf63c568b6abbe78bfbe928f159cb6ea16e67ac8928254e9a7c510ba1aaffdc879d31a2597a342cd57e2804cfd342638f9e8f93"}}, {0x20, 0x7f, 0x0, 0x80, @time={0x6, 0x8}, {0x1, 0x82}, {0x8, 0xff}, @queue={0x40, {0x10001, 0x9b}}}], 0x54) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) fcntl$setstatus(r1, 0x4, 0x2000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000004}) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x100) r3 = socket$l2tp6(0xa, 0x2, 0x73) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) ppoll(&(0x7f0000000380)=[{r0, 0xf0187cded5fd3585}, {r0, 0x20}, {0xffffffffffffffff, 0x12}, {r2, 0x408}, {r0, 0x100}, {r0}, {r0, 0x10}, {r3}, {r0, 0x8000}, {r0, 0xc250}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0x4]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000300)={{0x6, 0x46}, {0xbe, 0x5}, 0x4, 0x4}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000280)=[{0x80, 0x5, 0x1, 0x3, @tick=0x81, {0x3f, 0xff}, {0xb3, 0x40}, @raw32={[0x1, 0x9, 0x8]}}, {0xff, 0x0, 0x8, 0xf8, @time={0x2, 0x81}, {0x7, 0x1f}, {0x3, 0xa0}, @ext={0x7c, &(0x7f0000000140)="3f7ec18b08a1b58206ad4abe237f1b03acf37bbc2c25d15b143f57389fc6f0ea00b8a5333e8ac82e8cb972d44604677ade89791a72522fc8ae88ec229820ebc345763f2d8a3bab49ccf63c568b6abbe78bfbe928f159cb6ea16e67ac8928254e9a7c510ba1aaffdc879d31a2597a342cd57e2804cfd342638f9e8f93"}}, {0x20, 0x7f, 0x0, 0x80, @time={0x6, 0x8}, {0x1, 0x82}, {0x8, 0xff}, @queue={0x40, {0x10001, 0x9b}}}], 0x54) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) fcntl$setstatus(r1, 0x4, 0x2000) (async) epoll_create1(0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x20000004}) (async) epoll_wait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x100) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) clock_gettime(0x0, &(0x7f0000000400)) (async) ppoll(&(0x7f0000000380)=[{r0, 0xf0187cded5fd3585}, {r0, 0x20}, {0xffffffffffffffff, 0x12}, {r2, 0x408}, {r0, 0x100}, {r0}, {r0, 0x10}, {r3}, {r0, 0x8000}, {r0, 0xc250}], 0xa, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0x4]}, 0x8) (async) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000300)={{0x6, 0x46}, {0xbe, 0x5}, 0x4, 0x4}) (async) [ 477.299295][T12147] binder: BINDER_SET_CONTEXT_MGR already set [ 477.308981][T12147] binder: 12145:12147 ioctl 4018620d 20000040 returned -16 [ 477.325875][T12147] binder: 12145:12147 unknown command 0 [ 477.332284][T12147] binder: 12145:12147 ioctl c0306201 20000440 returned -22 11:35:02 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}]}, 0x24}}, 0x0) [ 477.351927][T12147] binder_alloc: binder_alloc_mmap_handler: 12145 20bfe000-20ffe000 already mapped failed -16 11:35:02 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:03 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000280), &(0x7f00000004c0)=0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) sendfile(r1, r0, &(0x7f0000000480)=0x8, 0xffffffff) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x8, @win={{0x1000, 0xb8c8, 0x2, 0x3f}, 0x2, 0x8, &(0x7f0000000300)={{0x26f, 0x2, 0x0, 0x80000001}, &(0x7f00000002c0)={{0x800, 0x10001, 0x6, 0xf0000000}, &(0x7f0000000000)={{0x7f, 0x9, 0xfffffffa, 0x1ff}}}}, 0xf4, &(0x7f0000000340)="5154254ddad1ac1d497cbb989c936c6988501d4a1adbe9"}}) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/106, 0x6a}, 0x5}], 0x1, 0x40002001, &(0x7f0000000780)={0x0, 0x3938700}) (async) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x6, 0x401, 0x1, {0xa, @raw_data="f580ad273ff099ef327851d29256705920ebbf5eaeee887b03fa80a1927882e50bc76dd99850a49b3e1dfebd195faee9e6ebc31febc9e0fbc2fca08865cf057215ed0413567d921cc4556e9d7c8e761e81c9ffa345ccd5daa9735584eef7785b490b1c51b163bbaa7d1989bd2d44bd2816c2d35ee71f6c13c5aa32f8f49b6c6b7441e62672f01463e7c646d1318e4a6df2cf9698f707fb4d1c01ee847d6c7f5aae9cde41c8cb38da2a40ba025855f3f1d1040beaca4b57e956c12919b69ebada61324b57de13ac61"}, 0x3c8}) 11:35:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1c}}]}, 0x24}}, 0x0) [ 477.592683][T12158] binder: 12155:12158 unknown command 0 [ 477.620866][T12158] binder: 12155:12158 ioctl c0306201 20000440 returned -22 11:35:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x60}}]}, 0x24}}, 0x0) [ 477.647690][T12158] binder_alloc: binder_alloc_mmap_handler: 12155 20bfe000-20ffe000 already mapped failed -16 11:35:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:03 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000100), 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000280)=[{0x3, 0xf1, 0x6, 0x62, @tick=0x2, {0x2, 0x4}, {0xf7, 0x40}, @queue={0x9, {0x5, 0x80}}}, {0x7f, 0xd7, 0x7f, 0x2, @time={0xbb, 0x7fff}, {0x40, 0x9}, {0x7, 0x3}, @raw8={"d65264c0403aebcbd414719e"}}, {0x20, 0x6, 0xef, 0x4, @tick=0x2, {0x7f, 0x40}, {0x7f}, @time=@tick=0xffffff81}, {0x3, 0xa, 0x1, 0x3, @tick=0x8, {0x3}, {0x1, 0x80}, @raw32={[0x1ff, 0x6]}}, {0x1, 0x4, 0xd7, 0x6, @time={0x8, 0x3}, {0x96}, {0xb0, 0xff}, @addr={0x81, 0x2}}, {0x4, 0x3, 0x5, 0x3f, @time={0x7fffffff, 0x2}, {0x8, 0x7}, {0x8, 0x5}, @connect={{0x81, 0x1}, {0x0, 0x7f}}}, {0x3, 0x2, 0x40, 0x5, @tick=0x1000, {0xff, 0x80}, {0xff, 0x1f}, @result={0xae, 0xffffffff}}, {0x1, 0xff, 0x1b, 0x1f, @time={0x30ad, 0xfffffffc}, {0x7, 0x4}, {0x7}, @note={0x2, 0x7f, 0x0, 0x3f, 0x261}}], 0xe0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0xf}}, 0x0) [ 477.896955][T12168] binder: 12166:12168 unknown command 0 [ 477.917716][T12168] binder: 12166:12168 ioctl c0306201 20000440 returned -22 [ 477.945543][T12168] binder_alloc: binder_alloc_mmap_handler: 12166 20bfe000-20ffe000 already mapped failed -16 11:35:03 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000100), 0x0) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000280)=[{0x3, 0xf1, 0x6, 0x62, @tick=0x2, {0x2, 0x4}, {0xf7, 0x40}, @queue={0x9, {0x5, 0x80}}}, {0x7f, 0xd7, 0x7f, 0x2, @time={0xbb, 0x7fff}, {0x40, 0x9}, {0x7, 0x3}, @raw8={"d65264c0403aebcbd414719e"}}, {0x20, 0x6, 0xef, 0x4, @tick=0x2, {0x7f, 0x40}, {0x7f}, @time=@tick=0xffffff81}, {0x3, 0xa, 0x1, 0x3, @tick=0x8, {0x3}, {0x1, 0x80}, @raw32={[0x1ff, 0x6]}}, {0x1, 0x4, 0xd7, 0x6, @time={0x8, 0x3}, {0x96}, {0xb0, 0xff}, @addr={0x81, 0x2}}, {0x4, 0x3, 0x5, 0x3f, @time={0x7fffffff, 0x2}, {0x8, 0x7}, {0x8, 0x5}, @connect={{0x81, 0x1}, {0x0, 0x7f}}}, {0x3, 0x2, 0x40, 0x5, @tick=0x1000, {0xff, 0x80}, {0xff, 0x1f}, @result={0xae, 0xffffffff}}, {0x1, 0xff, 0x1b, 0x1f, @time={0x30ad, 0xfffffffc}, {0x7, 0x4}, {0x7}, @note={0x2, 0x7f, 0x0, 0x3f, 0x261}}], 0xe0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x10}}, 0x0) 11:35:03 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000100), 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) write$sndseq(r0, &(0x7f0000000280)=[{0x3, 0xf1, 0x6, 0x62, @tick=0x2, {0x2, 0x4}, {0xf7, 0x40}, @queue={0x9, {0x5, 0x80}}}, {0x7f, 0xd7, 0x7f, 0x2, @time={0xbb, 0x7fff}, {0x40, 0x9}, {0x7, 0x3}, @raw8={"d65264c0403aebcbd414719e"}}, {0x20, 0x6, 0xef, 0x4, @tick=0x2, {0x7f, 0x40}, {0x7f}, @time=@tick=0xffffff81}, {0x3, 0xa, 0x1, 0x3, @tick=0x8, {0x3}, {0x1, 0x80}, @raw32={[0x1ff, 0x6]}}, {0x1, 0x4, 0xd7, 0x6, @time={0x8, 0x3}, {0x96}, {0xb0, 0xff}, @addr={0x81, 0x2}}, {0x4, 0x3, 0x5, 0x3f, @time={0x7fffffff, 0x2}, {0x8, 0x7}, {0x8, 0x5}, @connect={{0x81, 0x1}, {0x0, 0x7f}}}, {0x3, 0x2, 0x40, 0x5, @tick=0x1000, {0xff, 0x80}, {0xff, 0x1f}, @result={0xae, 0xffffffff}}, {0x1, 0xff, 0x1b, 0x1f, @time={0x30ad, 0xfffffffc}, {0x7, 0x4}, {0x7}, @note={0x2, 0x7f, 0x0, 0x3f, 0x261}}], 0xe0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000100), 0x0) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) write$sndseq(r0, &(0x7f0000000280)=[{0x3, 0xf1, 0x6, 0x62, @tick=0x2, {0x2, 0x4}, {0xf7, 0x40}, @queue={0x9, {0x5, 0x80}}}, {0x7f, 0xd7, 0x7f, 0x2, @time={0xbb, 0x7fff}, {0x40, 0x9}, {0x7, 0x3}, @raw8={"d65264c0403aebcbd414719e"}}, {0x20, 0x6, 0xef, 0x4, @tick=0x2, {0x7f, 0x40}, {0x7f}, @time=@tick=0xffffff81}, {0x3, 0xa, 0x1, 0x3, @tick=0x8, {0x3}, {0x1, 0x80}, @raw32={[0x1ff, 0x6]}}, {0x1, 0x4, 0xd7, 0x6, @time={0x8, 0x3}, {0x96}, {0xb0, 0xff}, @addr={0x81, 0x2}}, {0x4, 0x3, 0x5, 0x3f, @time={0x7fffffff, 0x2}, {0x8, 0x7}, {0x8, 0x5}, @connect={{0x81, 0x1}, {0x0, 0x7f}}}, {0x3, 0x2, 0x40, 0x5, @tick=0x1000, {0xff, 0x80}, {0xff, 0x1f}, @result={0xae, 0xffffffff}}, {0x1, 0xff, 0x1b, 0x1f, @time={0x30ad, 0xfffffffc}, {0x7, 0x4}, {0x7}, @note={0x2, 0x7f, 0x0, 0x3f, 0x261}}], 0xe0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) 11:35:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x1b}}, 0x0) [ 478.161755][T12177] binder: 12174:12177 unknown command 0 [ 478.190316][T12177] binder: 12174:12177 ioctl c0306201 20000440 returned -22 [ 478.223733][T12177] binder_alloc: binder_alloc_mmap_handler: 12174 20bfe000-20ffe000 already mapped failed -16 11:35:03 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x140}}, 0x0) 11:35:03 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000280), &(0x7f00000004c0)=0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) sendfile(r1, r0, &(0x7f0000000480)=0x8, 0xffffffff) (async) sendfile(r1, r0, &(0x7f0000000480)=0x8, 0xffffffff) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x8, @win={{0x1000, 0xb8c8, 0x2, 0x3f}, 0x2, 0x8, &(0x7f0000000300)={{0x26f, 0x2, 0x0, 0x80000001}, &(0x7f00000002c0)={{0x800, 0x10001, 0x6, 0xf0000000}, &(0x7f0000000000)={{0x7f, 0x9, 0xfffffffa, 0x1ff}}}}, 0xf4, &(0x7f0000000340)="5154254ddad1ac1d497cbb989c936c6988501d4a1adbe9"}}) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x8, @win={{0x1000, 0xb8c8, 0x2, 0x3f}, 0x2, 0x8, &(0x7f0000000300)={{0x26f, 0x2, 0x0, 0x80000001}, &(0x7f00000002c0)={{0x800, 0x10001, 0x6, 0xf0000000}, &(0x7f0000000000)={{0x7f, 0x9, 0xfffffffa, 0x1ff}}}}, 0xf4, &(0x7f0000000340)="5154254ddad1ac1d497cbb989c936c6988501d4a1adbe9"}}) recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000500)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/106, 0x6a}, 0x5}], 0x1, 0x40002001, &(0x7f0000000780)={0x0, 0x3938700}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000180)={0x6, 0x401, 0x1, {0xa, @raw_data="f580ad273ff099ef327851d29256705920ebbf5eaeee887b03fa80a1927882e50bc76dd99850a49b3e1dfebd195faee9e6ebc31febc9e0fbc2fca08865cf057215ed0413567d921cc4556e9d7c8e761e81c9ffa345ccd5daa9735584eef7785b490b1c51b163bbaa7d1989bd2d44bd2816c2d35ee71f6c13c5aa32f8f49b6c6b7441e62672f01463e7c646d1318e4a6df2cf9698f707fb4d1c01ee847d6c7f5aae9cde41c8cb38da2a40ba025855f3f1d1040beaca4b57e956c12919b69ebada61324b57de13ac61"}, 0x3c8}) 11:35:03 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = syz_io_uring_complete(0x0) write$sndseq(r1, &(0x7f0000000280)=[{0x22, 0x4e, 0x0, 0x81, @tick=0xcc, {0x3f, 0xf8}, {0x80, 0x80}, @queue={0x0, {0x5, 0x6}}}, {0x3f, 0xf0, 0x5, 0xcf, @tick=0x10001, {0x2, 0x2}, {0x80, 0xa2}, @connect={{0x6, 0x5}, {0xa0, 0x2b}}}, {0x3, 0x81, 0x89, 0x0, @time={0x0, 0x5}, {0xfd, 0x9}, {0x1, 0xf8}, @quote={{0x3f, 0x40}, 0x4, &(0x7f0000000140)={0x37, 0x7, 0x1, 0x5, @time={0x6, 0x400}, {0x28}, {0x1, 0xb3}, @quote={{0x1, 0x4}, 0xdfd, &(0x7f0000000100)={0x43, 0x9e, 0x95, 0x2, @tick=0x81, {}, {0x3f, 0x7f}, @quote={{0x3, 0x3}, 0xcec}}}}}}], 0x54) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0xec0}}, 0x0) 11:35:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) r1 = syz_io_uring_complete(0x0) write$sndseq(r1, &(0x7f0000000280)=[{0x22, 0x4e, 0x0, 0x81, @tick=0xcc, {0x3f, 0xf8}, {0x80, 0x80}, @queue={0x0, {0x5, 0x6}}}, {0x3f, 0xf0, 0x5, 0xcf, @tick=0x10001, {0x2, 0x2}, {0x80, 0xa2}, @connect={{0x6, 0x5}, {0xa0, 0x2b}}}, {0x3, 0x81, 0x89, 0x0, @time={0x0, 0x5}, {0xfd, 0x9}, {0x1, 0xf8}, @quote={{0x3f, 0x40}, 0x4, &(0x7f0000000140)={0x37, 0x7, 0x1, 0x5, @time={0x6, 0x400}, {0x28}, {0x1, 0xb3}, @quote={{0x1, 0x4}, 0xdfd, &(0x7f0000000100)={0x43, 0x9e, 0x95, 0x2, @tick=0x81, {}, {0x3f, 0x7f}, @quote={{0x3, 0x3}, 0xcec}}}}}}], 0x54) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 478.557751][T12189] binder: 12188:12189 unknown command 0 [ 478.590107][T12189] binder: 12188:12189 ioctl c0306201 20000440 returned -22 [ 478.615373][T12194] binder_alloc: binder_alloc_mmap_handler: 12188 20bfe000-20ffe000 already mapped failed -16 11:35:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x33fe0}}, 0x0) 11:35:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) r1 = syz_io_uring_complete(0x0) write$sndseq(r1, &(0x7f0000000280)=[{0x22, 0x4e, 0x0, 0x81, @tick=0xcc, {0x3f, 0xf8}, {0x80, 0x80}, @queue={0x0, {0x5, 0x6}}}, {0x3f, 0xf0, 0x5, 0xcf, @tick=0x10001, {0x2, 0x2}, {0x80, 0xa2}, @connect={{0x6, 0x5}, {0xa0, 0x2b}}}, {0x3, 0x81, 0x89, 0x0, @time={0x0, 0x5}, {0xfd, 0x9}, {0x1, 0xf8}, @quote={{0x3f, 0x40}, 0x4, &(0x7f0000000140)={0x37, 0x7, 0x1, 0x5, @time={0x6, 0x400}, {0x28}, {0x1, 0xb3}, @quote={{0x1, 0x4}, 0xdfd, &(0x7f0000000100)={0x43, 0x9e, 0x95, 0x2, @tick=0x81, {}, {0x3f, 0x7f}, @quote={{0x3, 0x3}, 0xcec}}}}}}], 0x54) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:04 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0xfffffdef}}, 0x0) 11:35:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x1, 'queue0\x00', 0x6}) write$sndseq(r0, &(0x7f0000000000), 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x5, 0x20, 0x9}) [ 478.886373][T12207] binder: 12205:12207 unknown command 0 [ 478.928043][T12207] binder: 12205:12207 ioctl c0306201 20000440 returned -22 [ 478.953066][T12210] binder_alloc: binder_alloc_mmap_handler: 12205 20bfe000-20ffe000 already mapped failed -16 [ 478.991723][ T28] audit: type=1400 audit(1706355304.518:332): avc: denied { open } for pid=12211 comm="syz-executor.3" path="/dev/ptyqb" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 479.043315][T12207] binder_alloc_new_buf: 5 callbacks suppressed [ 479.043338][T12207] binder_alloc: 12205: binder_alloc_buf, no vma [ 479.072123][ T28] audit: type=1400 audit(1706355304.578:333): avc: denied { ioctl } for pid=12211 comm="syz-executor.3" path="/dev/ptyqb" dev="devtmpfs" ino=132 ioctlcmd=0x5441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 11:35:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x2}, 0x0) 11:35:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x1, 'queue0\x00', 0x6}) write$sndseq(r0, &(0x7f0000000000), 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x5, 0x20, 0x9}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x1, 'queue0\x00', 0x6}) (async) write$sndseq(r0, &(0x7f0000000000), 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000000) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x5, 0x20, 0x9}) (async) 11:35:04 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:04 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x1, 'queue0\x00', 0x6}) (async) write$sndseq(r0, &(0x7f0000000000), 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x5, 0x20, 0x9}) [ 479.275430][T12221] binder: 12218:12221 unknown command 0 [ 479.296504][T12221] binder: 12218:12221 ioctl c0306201 20000440 returned -22 11:35:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x4}, 0x0) 11:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1e}, 0x0) 11:35:05 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:05 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc0090) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000040) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)) 11:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x44}, 0x0) [ 479.675189][T12232] binder: 12231:12232 unknown command 0 [ 479.699218][T12232] binder: 12231:12232 ioctl c0306201 20000440 returned -22 11:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0xffffff1f}, 0x0) [ 479.739958][T12232] binder_alloc: 12231: binder_alloc_buf, no vma 11:35:05 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:05 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc0090) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000040) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)) 11:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x2}, 0x0) [ 479.968211][T12244] binder: 12241:12244 unknown command 0 [ 479.988222][T12244] binder: 12241:12244 ioctl c0306201 20000440 returned -22 11:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x3}, 0x0) 11:35:05 executing program 3: r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc0090) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000040) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000080)) [ 480.021862][T12244] binder_alloc: 12241: binder_alloc_buf, no vma 11:35:05 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x4}, 0x0) [ 480.224682][T12253] binder: 12251:12253 unknown command 0 [ 480.244961][T12253] binder: 12251:12253 ioctl c0306201 20000440 returned -22 11:35:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 480.276341][T12253] binder_alloc: 12251: binder_alloc_buf, no vma 11:35:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x5}, 0x0) 11:35:05 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:05 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) 11:35:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x4, @sliced={0x8001, [0x0, 0x0, 0x0, 0x1f, 0x8, 0xff, 0x3, 0x1008, 0xada, 0x1, 0x9, 0x6, 0x737, 0x2d6, 0x7, 0x6, 0xe834, 0xbbe1, 0x8, 0x6, 0x6, 0x3, 0xa08e, 0x2, 0x8000, 0x7f, 0x0, 0xe8d, 0x38, 0x7ff, 0x7, 0x4, 0x81, 0x0, 0x9, 0x4, 0x7, 0x401, 0x9, 0x1, 0x401, 0x8, 0x40, 0x4, 0x2, 0x1, 0xfff9, 0x8], 0x81}}) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r1, &(0x7f0000929000/0x4000)=nil, 0x1000) shmat(r1, &(0x7f00002a8000/0x2000)=nil, 0xffffffffffffdfff) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4000) 11:35:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x6}, 0x0) [ 480.498980][T12261] binder: 12260:12261 unknown command 0 [ 480.517608][T12261] binder: 12260:12261 ioctl c0306201 20000440 returned -22 [ 480.569478][T12261] binder_alloc: 12260: binder_alloc_buf, no vma [ 480.595595][ T28] audit: type=1800 audit(1706355306.128:334): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 11:35:06 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:06 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x4, @sliced={0x8001, [0x0, 0x0, 0x0, 0x1f, 0x8, 0xff, 0x3, 0x1008, 0xada, 0x1, 0x9, 0x6, 0x737, 0x2d6, 0x7, 0x6, 0xe834, 0xbbe1, 0x8, 0x6, 0x6, 0x3, 0xa08e, 0x2, 0x8000, 0x7f, 0x0, 0xe8d, 0x38, 0x7ff, 0x7, 0x4, 0x81, 0x0, 0x9, 0x4, 0x7, 0x401, 0x9, 0x1, 0x401, 0x8, 0x40, 0x4, 0x2, 0x1, 0xfff9, 0x8], 0x81}}) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r1, &(0x7f0000929000/0x4000)=nil, 0x1000) shmat(r1, &(0x7f00002a8000/0x2000)=nil, 0xffffffffffffdfff) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4000) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x4, @sliced={0x8001, [0x0, 0x0, 0x0, 0x1f, 0x8, 0xff, 0x3, 0x1008, 0xada, 0x1, 0x9, 0x6, 0x737, 0x2d6, 0x7, 0x6, 0xe834, 0xbbe1, 0x8, 0x6, 0x6, 0x3, 0xa08e, 0x2, 0x8000, 0x7f, 0x0, 0xe8d, 0x38, 0x7ff, 0x7, 0x4, 0x81, 0x0, 0x9, 0x4, 0x7, 0x401, 0x9, 0x1, 0x401, 0x8, 0x40, 0x4, 0x2, 0x1, 0xfff9, 0x8], 0x81}}) (async) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) (async) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) shmat(r1, &(0x7f0000929000/0x4000)=nil, 0x1000) (async) shmat(r1, &(0x7f00002a8000/0x2000)=nil, 0xffffffffffffdfff) (async) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4000) (async) 11:35:06 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0xfffffffffffffe8e, 0xc0000) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="ffc742c9fc1f68fbd9b285b57feb5dfe2c5b4a493229561605009e75ef1988807a9aea54d1ec038cb40e420a05000000"]) sendmsg$rds(r0, &(0x7f0000001780)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/164, 0xa4}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001600)=""/164, 0xa4}], 0x7, &(0x7f0000001740), 0x0, 0x4000010}, 0x8001) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x101]}}], 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000002c0)={0xf6}) 11:35:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x7}, 0x0) [ 480.832549][T12275] binder: 12273:12275 unknown command 0 [ 480.849091][T12275] binder: 12273:12275 ioctl c0306201 20000440 returned -22 [ 480.855804][ T28] audit: type=1800 audit(1706355306.388:335): pid=12276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 480.888129][T12275] binder_alloc: 12273: binder_alloc_buf, no vma 11:35:06 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x8}, 0x0) 11:35:06 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x4, @sliced={0x8001, [0x0, 0x0, 0x0, 0x1f, 0x8, 0xff, 0x3, 0x1008, 0xada, 0x1, 0x9, 0x6, 0x737, 0x2d6, 0x7, 0x6, 0xe834, 0xbbe1, 0x8, 0x6, 0x6, 0x3, 0xa08e, 0x2, 0x8000, 0x7f, 0x0, 0xe8d, 0x38, 0x7ff, 0x7, 0x4, 0x81, 0x0, 0x9, 0x4, 0x7, 0x401, 0x9, 0x1, 0x401, 0x8, 0x40, 0x4, 0x2, 0x1, 0xfff9, 0x8], 0x81}}) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) (async) r1 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r1, &(0x7f0000929000/0x4000)=nil, 0x1000) shmat(r1, &(0x7f00002a8000/0x2000)=nil, 0xffffffffffffdfff) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x4000) [ 480.953055][ T28] audit: type=1400 audit(1706355306.458:336): avc: denied { ioctl } for pid=12278 comm="syz-executor.3" path="socket:[29245]" dev="sockfs" ino=29245 ioctlcmd=0x9403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 11:35:06 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0xfffffffffffffe8e, 0xc0000) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="ffc742c9fc1f68fbd9b285b57feb5dfe2c5b4a493229561605009e75ef1988807a9aea54d1ec038cb40e420a05000000"]) sendmsg$rds(r0, &(0x7f0000001780)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/164, 0xa4}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001600)=""/164, 0xa4}], 0x7, &(0x7f0000001740), 0x0, 0x4000010}, 0x8001) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x101]}}], 0x1c) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000002c0)={0xf6}) [ 481.056686][ T28] audit: type=1400 audit(1706355306.458:337): avc: denied { write } for pid=12278 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 481.116765][ T28] audit: type=1400 audit(1706355306.478:338): avc: denied { read write } for pid=12278 comm="syz-executor.3" name="uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 481.163978][T12286] binder: 12283:12286 unknown command 0 [ 481.181694][T12286] binder: 12283:12286 ioctl c0306201 20000440 returned -22 11:35:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x9}, 0x0) 11:35:06 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) (async) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0xfffffffffffffe8e, 0xc0000) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="ffc742c9fc1f68fbd9b285b57feb5dfe2c5b4a493229561605009e75ef1988807a9aea54d1ec038cb40e420a05000000"]) (async) sendmsg$rds(r0, &(0x7f0000001780)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/85, 0x55}, {&(0x7f00000004c0)=""/112, 0x70}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/164, 0xa4}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000001600)=""/164, 0xa4}], 0x7, &(0x7f0000001740), 0x0, 0x4000010}, 0x8001) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x101]}}], 0x1c) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000002c0)={0xf6}) [ 481.201166][ T28] audit: type=1400 audit(1706355306.478:339): avc: denied { open } for pid=12278 comm="syz-executor.3" path="/dev/uinput" dev="devtmpfs" ino=835 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 481.228895][T12294] binder_alloc: 12283: binder_alloc_buf, no vma [ 481.299992][ T28] audit: type=1400 audit(1706355306.488:340): avc: denied { ioctl } for pid=12278 comm="syz-executor.3" path="/dev/uinput" dev="devtmpfs" ino=835 ioctlcmd=0x5567 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 11:35:06 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:06 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x4, 0x7, 0x2, {0xb, @pix_mp={0x7fffffff, 0x4, 0xb5315258, 0x3, 0x6, [{0x3d2d, 0x6}, {0x68, 0x680d}, {0x3650411f, 0x1000}, {0x200, 0x5}, {0x5, 0x7}, {0x2, 0x1000}, {0xb0, 0xffffffff}, {0x8000, 0x80000001}], 0x81, 0x5, 0x8, 0x0, 0x5}}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0x754, 0x9, 0x31435750, 0x1, 0x7, [{0x0, 0x8}, {0x9, 0x100000}, {0x6, 0x6}, {0x8, 0x1}, {0x8, 0x7}, {0x9, 0x9}, {0x1, 0x4}, {0x1000, 0x42c}], 0x6, 0x9, 0x8, 0x2, 0x7}}) 11:35:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xa}, 0x0) 11:35:06 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) [ 481.393800][ T28] audit: type=1800 audit(1706355306.698:341): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=7 res=0 errno=0 [ 481.496504][T12303] binder: 12301:12303 unknown command 0 [ 481.502521][T12303] binder: 12301:12303 ioctl c0306201 20000440 returned -22 [ 481.529967][T12303] binder_alloc_mmap_handler: 7 callbacks suppressed [ 481.529989][T12303] binder_alloc: binder_alloc_mmap_handler: 12301 20bfe000-20ffe000 already mapped failed -16 11:35:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x4, 0x7, 0x2, {0xb, @pix_mp={0x7fffffff, 0x4, 0xb5315258, 0x3, 0x6, [{0x3d2d, 0x6}, {0x68, 0x680d}, {0x3650411f, 0x1000}, {0x200, 0x5}, {0x5, 0x7}, {0x2, 0x1000}, {0xb0, 0xffffffff}, {0x8000, 0x80000001}], 0x81, 0x5, 0x8, 0x0, 0x5}}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0x754, 0x9, 0x31435750, 0x1, 0x7, [{0x0, 0x8}, {0x9, 0x100000}, {0x6, 0x6}, {0x8, 0x1}, {0x8, 0x7}, {0x9, 0x9}, {0x1, 0x4}, {0x1000, 0x42c}], 0x6, 0x9, 0x8, 0x2, 0x7}}) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x4, 0x7, 0x2, {0xb, @pix_mp={0x7fffffff, 0x4, 0xb5315258, 0x3, 0x6, [{0x3d2d, 0x6}, {0x68, 0x680d}, {0x3650411f, 0x1000}, {0x200, 0x5}, {0x5, 0x7}, {0x2, 0x1000}, {0xb0, 0xffffffff}, {0x8000, 0x80000001}], 0x81, 0x5, 0x8, 0x0, 0x5}}}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0x754, 0x9, 0x31435750, 0x1, 0x7, [{0x0, 0x8}, {0x9, 0x100000}, {0x6, 0x6}, {0x8, 0x1}, {0x8, 0x7}, {0x9, 0x9}, {0x1, 0x4}, {0x1000, 0x42c}], 0x6, 0x9, 0x8, 0x2, 0x7}}) (async) 11:35:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xc}, 0x0) [ 481.583329][T12303] binder_alloc: 12301: binder_alloc_buf, no vma 11:35:07 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:07 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x4, 0x7, 0x2, {0xb, @pix_mp={0x7fffffff, 0x4, 0xb5315258, 0x3, 0x6, [{0x3d2d, 0x6}, {0x68, 0x680d}, {0x3650411f, 0x1000}, {0x200, 0x5}, {0x5, 0x7}, {0x2, 0x1000}, {0xb0, 0xffffffff}, {0x8000, 0x80000001}], 0x81, 0x5, 0x8, 0x0, 0x5}}}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix_mp={0x754, 0x9, 0x31435750, 0x1, 0x7, [{0x0, 0x8}, {0x9, 0x100000}, {0x6, 0x6}, {0x8, 0x1}, {0x8, 0x7}, {0x9, 0x9}, {0x1, 0x4}, {0x1000, 0x42c}], 0x6, 0x9, 0x8, 0x2, 0x7}}) 11:35:07 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) [ 481.795405][T12316] binder: 12315:12316 unknown command 0 [ 481.828732][T12316] binder: 12315:12316 ioctl c0306201 20000440 returned -22 11:35:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xe}, 0x0) [ 481.855300][T12316] binder_alloc: binder_alloc_mmap_handler: 12315 20bfe000-20ffe000 already mapped failed -16 [ 481.900150][T12316] binder_alloc: 12315: binder_alloc_buf, no vma 11:35:07 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:07 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x4300, 0x0) pidfd_send_signal(r0, 0x11, &(0x7f0000000180)={0x4, 0x4, 0x4}, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x35}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x77a1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0x40801}, 0x20000800) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:35:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xf}, 0x0) 11:35:07 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000100)) 11:35:07 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x4300, 0x0) (async) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x4300, 0x0) pidfd_send_signal(r0, 0x11, &(0x7f0000000180)={0x4, 0x4, 0x4}, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x35}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x77a1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0x40801}, 0x20000800) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) [ 482.144681][T12329] binder: 12328:12329 unknown command 0 [ 482.158556][T12329] binder: 12328:12329 ioctl c0306201 20000440 returned -22 11:35:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x10}, 0x0) [ 482.192143][T12329] binder_alloc: binder_alloc_mmap_handler: 12328 20bfe000-20ffe000 already mapped failed -16 [ 482.229963][T12329] binder_alloc: 12328: binder_alloc_buf, no vma 11:35:07 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:07 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:07 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000380), 0x4300, 0x0) pidfd_send_signal(r0, 0x11, &(0x7f0000000180)={0x4, 0x4, 0x4}, 0x0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x1c}}, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r3, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x35}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x77a1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x9}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @loopback}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x81}]}, 0x68}, 0x1, 0x0, 0x0, 0x40801}, 0x20000800) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000200)) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:35:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x1c}, 0x0) [ 482.416841][T12342] binder: 12341:12342 unknown command 0 [ 482.446355][T12342] binder: 12341:12342 ioctl c0306201 20000440 returned -22 11:35:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x60}, 0x0) 11:35:08 executing program 0: ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x1ff) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) writev(r1, &(0x7f0000001480)=[{&(0x7f00000001c0)="92a5d4d04ee711432d4428c49376db1828e93216a1018d", 0x17}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="6ea503f9939d88ea6f831068ad28ab7ee49eef90205c7112f4a84191aa681e7991bbf313b5b02fc444e6260b9086b9dc98706a03bd6b5f85b959fc3571782779be7f5460cb70ab279a8f5d681ad6816f3ef1a13d5fcd29ee01d0720f45c6554ee35e08f854d20b6b738cbd5ff8ec628ae812632d75e980504b0e06d39b6a68c6ab585c431cda73ca1d38bd0ca5a5", 0x8e}, {&(0x7f00000012c0)="e5898f80535438d98c4178a8de443bdeddfad79901b6b4bc228c417c02b4594189aebd0af932b9556fdcb8771fba47c43d9535130f09146cdce2f9c5813bd515ac310143f395d3e9ba418b7de2a9ddfb6c12b1188af60ee78d4441748e29f705665977931fe2071053c81badf4c87a3e373b3ccc4975460df3d2ace4e515d0024ca4fd6bc3b877cd76e572b6c6b0a37bac96ab9b05355ad094df3734a432d3aa47b103238c4654fa516f40a2fcef63a64a575df07ea605ae21814b3b390a2833466da78350fc88b0a069f71486a856b9d6afa8879fa6eb", 0xd7}, {&(0x7f00000013c0)="013e2e70c72f86f74ab4ea30017e6aa2bb8ec10a8d7dd626edf18724b63cc44ca914f51f01cf9b8344eb4b96d4046c8e1d82bc77f6703dd09c26ad4ff2cb088426f7193b48fc97fc94276c821169d62e8f3c0753d7155978373ffe5feb58dea48cb9d6b3c11e4406bfb0e0be0ca5b8d0f5c2769027507a06cbf7edee5e9699bc02a75a1a4664a32dd906fea8ce4d12f792aba28246881c6d568f8eec1b1a", 0x9e}], 0x5) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r2 = syz_open_dev$sndpcmp(&(0x7f0000001500), 0x6, 0x8800) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000001800)={0x0, &(0x7f00000017c0)=[&(0x7f0000001540)="88e9c49f4c997c6718d9a794697edc4e3a32530a1103cfc374c9d22a332e666202e4aacb50e2b09024439b60e4a2ec9068c779cd363f00450c3a6b0cc108171fc0048df4a866d004f8b19b939e5848695ca80283229aadfae4af74e8a4763242479da2fee8dae458510cdd1039fabd223b6edd8124fc4eb49673316462d4a9f4042bb6e8117b2f6a509b51c23e17c9ed4c671fa7058f506632d8f59d2636277c9f923be97987ee20bf4eaaf95fb240f7229c5f197b87229924aadc4563c5759b48ba670dda0a861e4c25c8ead71164e0eb96f9235e7ac6da", &(0x7f0000001640)="f0da5473945ffbc4cf36d97750c247418bf69f269836805b784c8778c64b54e4df5ebaea1b3b2d28dd6d7b19c0df78a80b766582d18166e531b1fdb2065e27c134d8aaf36a773137ba638997eea67cda26f34fdb5a2b7c22e1068daff9066b508e339086", &(0x7f00000016c0)="cac57234abc4fd8308e1f133bfddcf637f398b5301d53a52812f73d68ced9c3052493426be394039aac557e4182f32ab44ed5546ca63fe57", &(0x7f0000001700)="8436f72d63a123eecb7f9eb01f24d2cd59e92f9c5ae58c97b902cf103bf917613f56f85e1497a69f4f443a9634566040e2c4e8862d0f111066797544768a6f4509c63516236bfb9cbf736e30f9af48d4804832133e2aa4dd7730346e3ef0d06efe087e1c3492901ff3a1325dce1c3b1e6a917be736101d486e1975afada01f308359fc4cf89e9f7f0b38598558f99daf54"]}) [ 482.473949][T12342] binder_alloc: binder_alloc_mmap_handler: 12341 20bfe000-20ffe000 already mapped failed -16 11:35:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xf0}, 0x0) 11:35:08 executing program 0: ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x1ff) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) (async) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) writev(r1, &(0x7f0000001480)=[{&(0x7f00000001c0)="92a5d4d04ee711432d4428c49376db1828e93216a1018d", 0x17}, {&(0x7f0000000200)="6b97ec7ae0c37d61c557e2b2c1d4d24d6db2a6d4c14972bb9ebf904f8d199948d56c03452c2641c14efbb4b8c54a1ba76e63c9cb73e27899d21f51ed26ca18bc52ec1486c47d7b911d3919b94a8f2776ef3becbd29a4871908ce7a92e539a1c9732bddfdacd4f9b4af7ffb99c95407b6c7ef4c34585471f4eefc6b5e3dc72e700802463f365bd0181ce5cfaf1bb5441845ff9e2a5cee45824ba1589da7e64e7762e8fad41dd37328860446c054d19355d2ddc08b0c4154d107f8dd9805b7f76a5cde662884a11ae639991826228c0ce84bea19ff4b51451eda23ef9e66db57df0d84fd8c436b3f490fb40c92768c6ca630a70bf92d7520f35ee7eba313e0ddb02d934e9bc9ebc8b33dd7a6e7437facb2e9fd30b1ba622294cd5ad99ba3c088d3c439ac19f2de37f34b193af219bc970b96ba858be187a128310cda56e3ce85051bc35a7b20da99baf4b02e305f666b6cf8a83450467d55be538b72dc163f0e947bcd24773ffe41159b4e525b9549b56720cffd403f8ed4ace793e432584ea19b532b0c5a819d3d9c699d65fdbfe8cb9ff74700036f83a3411dd71d8c3e1496c601bee077227707883479d9f12080717ffd78361931472a07d740713603e72bab478454c59e623346eeb27a15d1653c0d0c6064296e1db106efb1ab22fb32fccbb5f32dc5060ae9bd39f1cee57880cfc7d44f47421e98638424ff4e8f81a2e7bad89230e049cd4ec46c24a5b703f87e1ba4bea68cf871311453337bd6a32db247e2eab80fbf3f9a47066345407edfb543563e80aadc347fa265b8e179499ec62946f08aa3a3742c76f880f3eb9a1112adc9af3a369348c4ccd195b1bb7c06cad703e5231413c4de1b16363d34b0e88c7b4721a2e5c0b1badfd42b9edf742e918ad323142a67814f23a89c4ca97c74f60fff1df7803cf93710bbba8b8bc7d8a41e8b0bcdc581ea14c17b3791681b658a8501ed7c091baa900f56af0cbf2ac24ae4abdb75e3ee2afbda87d2da3b8b0a9ef29b94b8ad1a105621425911b8ddffd54410539f9b853e36cdecbe61c6d8404a41ca541e89b34b8d355e918e76cbc6f832afce24651592c1ea886bbfa26015f7b997981d3c219e9e55bd49bdaa6efa63daf90be62a2e12576bae6b5a9e62af15fe32fbea0461045d746af602ab1bd6bfc2c854cac4161b7e8e57714a5805b545f6d151eab818c3678b5de42307cc77c23f40184b03225cfc01a3787df43a29b8b3d43496dd773658ac76efd1e1f439bb51b5f43b94c4f7a505f90f1db79b0c3a284559aff6b108a9802f82f22f78027912d35a98175ad6b42bc0eaebeaf233449dc6c05c1443d7a9674dee13a7a82af906522564bb085dbf2c5ea90ba108e02a6ab4a91bb571c3d7e36d6b04338a2ca6f11ea7ee394b58adbfbea757d1a0a99fcd8b11560e1e298053a5094a9fdb6e064c00aacb4001bbd4c2ae3883aff63d46f6aae6e856ad409a982bfaa2c38a8cc13f3dec5ebc9e54e48c08375f8e0fab08703a5e355548df19461c598e55d05e7bcbf160c0f00f4bc2976639db7a2ceb9d93121096e95d7aa0a38da501ccfbed701e88013133856788d4b0029c26ff4a9266fde7a4437454714f351f4e2021ed719b9e8c44551c117d5f0fbb2f50c1aa7d128f369f17c9439a0abddb88675661368018d0fd526bde7fa200236e8c418aaf43c10d912c601fa285c071a668f1bd0a4783ead56fd921f2bf9d8a22c48f34a54127f40b256cc23c9457fc8880d09a6afe8ec9d38236c0e67f7fba1581a7803ba60e15272b338268697a49331fa945c72bd859d6d7f933eafc8a3671660465f4083a7db4e6eb92ca2b71bbf7ae724022f2d120c9d681a91a216a05362dce287f5cd4f69978cdf57627e61aef3d8ee5ef19c4daf9ba947eac05057d2066961ba0461f10ea743c9c802129f4afa741241d4d623776ac7b1e64280e4d4862e1f2a708b7a63e53d224bc451e6dad0b2063248c71e412d256ccbf1fbb8fbeb1d037eba4968891a55a7a86e85612674a26806d45665afbb53347d1f17c08338e1d9b5707d203881515d269dc87242a3a0403c9f05b0c11b3885d2145fd3e66e192a970de7b1ac74ca632cd69ae6f6c16fe4a865b366289cf1c11c836a375b3248c0ac2b0573dbf858be041160272e98d8321920f01a72d8201e7ad285365342553ede38eeb346e19afa29a37ea9edd1a90fe6c472e9f38bd44aabe28d47d5cff8e9cabd69becd53b99598c888d6f39c059751a9d03c230e4d07ab434cf3deb90e62db27b2a1ae817e414d1510e501cfbd59c67a1f1ea51eb2f105f2f59ada4a6e4881ac7334a8e23ec15b78f23b011d2eea232e5f41563dda8b6b1c57d7efcbcb629d45feaa6395ab16f13db7849e58e104b02dd045779a0f01c12ec22318d9436c3147f56fd43582fd3ea5f977dd42e7b8db9e00904370e7c9ea719df234a2a849669c7d7ff508508faad56654c5e87cf03450f6bbf70e45d2491dd25ddbf2dc17b5d1591d57a5212b71c85112cdd0986c28bda80548f2a640a83423a70ff2a173364541c92d38da1a36d6d9afacd25e25e356678c0a4473ba16138c20c626c4e363f933c39c4a580813e16255cfd2c99f99a39a06f6f0cfc80d80c42a3f0e040951b29b22bed646738e32e7e025d95d6ae588bd501f2e14acf115c8780b72061c9a5a21ea5d13c7efa3bd0ea505b16e6067aebe8fd210fcc0737229559dedffa6dfe06db8e8e30d21ede98e06dbc8aa2a6429839e361cdd85e74195899b07baab19121edeeccb53d703d3be0d2d8ceb8531077b7cca9be7793fcf9addfe0b621229670864757093339e4c5878d2f6b8ea923dbabe9d2a652c71968e623fe2fbebaa7dc98fc64ca5fe30ce7ef8d28e5ae2ec1c4708c8bae9ae4a8998d45bafaa5deca5dde086aa5fdcee70a6665ab032ee123bf612d465cebc2e96aab00db5fcf533db0803f0c4b79090b0fa82f2361b7d59275f6c509e1b748b7e28cd88189375ca9f27760f4faec3d96db7f2c307402d3a41dd0e0aeef4b14613794b228b083b93c43c0431aa184e507fcfb659a481ecd11d341576315e73d230f4e4650eab392dd15d8bd39bb68598fc491ce193854140b02c90c735eaa8753add6cbfea2b755216db321fb45e2aab0836a759486181153820c3fd9fbc59c9f96e88578bd57d31b44c245ef96d42e231faabeb1ce5854078b86ea2400bfe5ff62448349e59562080d82e543841565a292b2cbb20e7ac198ab33119d55e671d02f197c215ea9c2ad17c1b3e4ba8185444017627436885ebed3621517e744a5e7c72eb090309a97a9fbbfb1b34e5698194fb70a87aa631463a870f0246a6f0be630ed675ce5dc15eb234b71171c99d3cec90f69e2074cc2362947068b5904707fd14c7e5748a76627c1afa46e5092b982fb3161d80b0eb820b403658b5643e51eca095ed2e97f5e614d0d06fce3962554486c4b73eae34ecb7d8547c9353b4165d26782ae5acd703ebe2eb770da978eb5d2b03361d4500fe0f76ea6034614f40638042295f650bdb47128dd7b58f5016d89e7449c5fc4d1be0342e354bc9d0b50b878899dac3c575be319141af61e9e7ddfcf000dec8cd7fb41f0e4b21ce28a7ffb2b63475cbf0ce3869a00c7dac524acb101f24bdab2ba3965e36b725c4e7e7ef11ff71895581ecf451aba1e4b21286b6f545d1c1ed9bd7354e4925705157000ff72b53946650bf0fca5d5bb834e7cf3d6bd164d0a139ed95bb0d61fb201416c5c0eca6487e516201532b2ac8827ec7ae536f782852aca2589eef50159127b242dfc0cc1a75f4b69a1f410b0055f4ff5c6f92cbf8abe11d4571216e8b32c4e08e021edd5ab468c4143dd7a41b673d21de4fe98f6b02d728d0e9edca6bceef9c54a85d8e4e48e8d52a03a8948882b1bf0029d9f6ab4c36191f6c88cf362961911bbd0372e4ff1a2e797c17b9fbd152ccfe18691c1f1c1475a24ef8d73c57d724c54abcda3c541ad45ae63eb2995c6930de970c0e95f6e138fefc574fb8d7665ba95367aafa2adcefffbaad301468a729d29afd1c571ea60a9552f3fbade30218baff39e43b181e1cbf63928166d6bb802b3cb25c4b408feb6240e422aa1f41eab0d53df75f7cdc1b59b0f9591a137458183be8200ece6a3ea822a4a9af02e0fb3a996c6281d1dd3c6e53aa24458f12ccadb3883b724bcc2f4d992187a1f11467fe32e56129c9fa93520c92a338187fa17174a03f5216d7db6884969d34626f2a3696355e19d1755333cb30c2c397570f5f6ac5de4f29cae415605c6df8c6d4ae5f9606f88e91324ae9efcc56f8988ea617d064422119dbd206cde8ab1dafe7bff376435ec8e62ff0589dc60680a533344fc870ca2f4d421a4b45467313e89cdcb110b06b63a1d2284b8cd40ccf18ee3efa2d9d2d974746cd141dffe909e51db2a16b24d7d02c94543c36a4a35d97cae005ab0008acf897c23bbdaec44f9f7eab42d16138184c1eb845024d51df0c6a1cfadff9eb927b10726990682f1e01fb637a17ad618590bb6e9043c4895bb19997e0707b3e401da9027ab7792a75ac8f22c3d9172ca1d2fadbe9aaf4d9bc89c041d3df97c61253a7805e5f6e9dc34c3f35725e1ae8bda388e92e83bf6f1fa32a1d8d961e5db0b683dde2232b4663fb5999ef1036d05433e054f3566b6cb3fdb6310df261ff947fbe77cc1b5e5789cd890cb826bdcef689edf00fee71f4124ad1c5ffdd05ae61901ef0da465821c5604187dc9d56bf1308127c2df3d9cef5d5a7acf68b076ba799cae184d44c0a3620a9f9fc0da0821cb165c0392bd7ebca5cb21bdb0a8733f3e49246a3350dd0fb34bc802ac2853c6cb7dcf2a87a704820b8c04d425ed0072f09751db49c42062935680360527ae4166f5b003d06d07c87b52bddfe672404803bab40c1944f726c5dca44971a54b6566e3a58761d38eff1213caa5f7625527d21be6d1cdddd9ef8fe74811701c6e732ee6ef13147a888a147a457715a8e19b727e2211bc33d5e62009e64b6fa08902f8de2e2219c4770c576c8075d775bb92c10533dfe14de1d6dc865b473f3538bb99f1300745ebe967ff97efa7158660fd5de655674a67ba6667175185c253b1f8fd6f342cc1b192bc92c7f90e2a27b95e8ddec27ec8a51d285da73f732fd83960cd9e4b4d1512b44a2b4d6c1da604fc1abf8836c9e11d6f59bb20ca5921e69402a13e4fad4694b8e762e790c48ab9cb479bed22837feed9420cd85716df2ba43a90121c09a88a9112f177462310d80122b6d3c7f2e2cffda61a567cd39233ef421148fd77766379d0a374ddfff972301aeee20761614e1887f7fdc7f7bb0ae4d9e8bda037f6a2facab531b6f6100fd69625350c891a966b68aacab1e6f2ecc13ba62967274e05c89100ba87ed5223848bdd8906d99aac6bd1d44a98bd06493fd8c16fc4cd8e2ee9aa72e1a39841bc965df612f716fe2ec81e2af3ee1489c4123b36eb783ea34059b49909f02be7a82fbc603a4e565f7517d2712c66ea12972cfc9d932ef8e57e715d03c1b81e994fd2815bb51a0c03fb8b5022bb18ef8882f365b89e8934b0015e9406d780c8297bccae03914bf413c9b10fec7b65599af6aafbc9c2af02c01bdd379d86a7c0c755e61ed73f2b694e692df41d911606fd18facc3912d65ab0608ba3723c132d7b06732e8c35b331c853732d1c6c7789284d38fb98bd0c8e0966d12314fbd1ede5bc7dd4713a99e9fc16058d203667bb1dbf513d8cd539ddf6225fe7ba67aa98593334c4f55a35806b", 0x1000}, {&(0x7f0000001200)="6ea503f9939d88ea6f831068ad28ab7ee49eef90205c7112f4a84191aa681e7991bbf313b5b02fc444e6260b9086b9dc98706a03bd6b5f85b959fc3571782779be7f5460cb70ab279a8f5d681ad6816f3ef1a13d5fcd29ee01d0720f45c6554ee35e08f854d20b6b738cbd5ff8ec628ae812632d75e980504b0e06d39b6a68c6ab585c431cda73ca1d38bd0ca5a5", 0x8e}, {&(0x7f00000012c0)="e5898f80535438d98c4178a8de443bdeddfad79901b6b4bc228c417c02b4594189aebd0af932b9556fdcb8771fba47c43d9535130f09146cdce2f9c5813bd515ac310143f395d3e9ba418b7de2a9ddfb6c12b1188af60ee78d4441748e29f705665977931fe2071053c81badf4c87a3e373b3ccc4975460df3d2ace4e515d0024ca4fd6bc3b877cd76e572b6c6b0a37bac96ab9b05355ad094df3734a432d3aa47b103238c4654fa516f40a2fcef63a64a575df07ea605ae21814b3b390a2833466da78350fc88b0a069f71486a856b9d6afa8879fa6eb", 0xd7}, {&(0x7f00000013c0)="013e2e70c72f86f74ab4ea30017e6aa2bb8ec10a8d7dd626edf18724b63cc44ca914f51f01cf9b8344eb4b96d4046c8e1d82bc77f6703dd09c26ad4ff2cb088426f7193b48fc97fc94276c821169d62e8f3c0753d7155978373ffe5feb58dea48cb9d6b3c11e4406bfb0e0be0ca5b8d0f5c2769027507a06cbf7edee5e9699bc02a75a1a4664a32dd906fea8ce4d12f792aba28246881c6d568f8eec1b1a", 0x9e}], 0x5) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r2 = syz_open_dev$sndpcmp(&(0x7f0000001500), 0x6, 0x8800) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000001800)={0x0, &(0x7f00000017c0)=[&(0x7f0000001540)="88e9c49f4c997c6718d9a794697edc4e3a32530a1103cfc374c9d22a332e666202e4aacb50e2b09024439b60e4a2ec9068c779cd363f00450c3a6b0cc108171fc0048df4a866d004f8b19b939e5848695ca80283229aadfae4af74e8a4763242479da2fee8dae458510cdd1039fabd223b6edd8124fc4eb49673316462d4a9f4042bb6e8117b2f6a509b51c23e17c9ed4c671fa7058f506632d8f59d2636277c9f923be97987ee20bf4eaaf95fb240f7229c5f197b87229924aadc4563c5759b48ba670dda0a861e4c25c8ead71164e0eb96f9235e7ac6da", &(0x7f0000001640)="f0da5473945ffbc4cf36d97750c247418bf69f269836805b784c8778c64b54e4df5ebaea1b3b2d28dd6d7b19c0df78a80b766582d18166e531b1fdb2065e27c134d8aaf36a773137ba638997eea67cda26f34fdb5a2b7c22e1068daff9066b508e339086", &(0x7f00000016c0)="cac57234abc4fd8308e1f133bfddcf637f398b5301d53a52812f73d68ced9c3052493426be394039aac557e4182f32ab44ed5546ca63fe57", &(0x7f0000001700)="8436f72d63a123eecb7f9eb01f24d2cd59e92f9c5ae58c97b902cf103bf917613f56f85e1497a69f4f443a9634566040e2c4e8862d0f111066797544768a6f4509c63516236bfb9cbf736e30f9af48d4804832133e2aa4dd7730346e3ef0d06efe087e1c3492901ff3a1325dce1c3b1e6a917be736101d486e1975afada01f308359fc4cf89e9f7f0b38598558f99daf54"]}) [ 482.692132][T12357] binder: 12356:12357 unknown command 0 [ 482.713266][T12357] binder: 12356:12357 ioctl c0306201 20000440 returned -22 11:35:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x3, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 482.759412][T12357] binder_alloc: binder_alloc_mmap_handler: 12356 20bfe000-20ffe000 already mapped failed -16 11:35:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x1f1}, 0x0) 11:35:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:08 executing program 0: ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x1ff) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) writev(r1, &(0x7f0000001480)=[{&(0x7f00000001c0)="92a5d4d04ee711432d4428c49376db1828e93216a1018d", 0x17}, {&(0x7f0000000200)="6b97ec7ae0c37d61c557e2b2c1d4d24d6db2a6d4c14972bb9ebf904f8d199948d56c03452c2641c14efbb4b8c54a1ba76e63c9cb73e27899d21f51ed26ca18bc52ec1486c47d7b911d3919b94a8f2776ef3becbd29a4871908ce7a92e539a1c9732bddfdacd4f9b4af7ffb99c95407b6c7ef4c34585471f4eefc6b5e3dc72e700802463f365bd0181ce5cfaf1bb5441845ff9e2a5cee45824ba1589da7e64e7762e8fad41dd37328860446c054d19355d2ddc08b0c4154d107f8dd9805b7f76a5cde662884a11ae639991826228c0ce84bea19ff4b51451eda23ef9e66db57df0d84fd8c436b3f490fb40c92768c6ca630a70bf92d7520f35ee7eba313e0ddb02d934e9bc9ebc8b33dd7a6e7437facb2e9fd30b1ba622294cd5ad99ba3c088d3c439ac19f2de37f34b193af219bc970b96ba858be187a128310cda56e3ce85051bc35a7b20da99baf4b02e305f666b6cf8a83450467d55be538b72dc163f0e947bcd24773ffe41159b4e525b9549b56720cffd403f8ed4ace793e432584ea19b532b0c5a819d3d9c699d65fdbfe8cb9ff74700036f83a3411dd71d8c3e1496c601bee077227707883479d9f12080717ffd78361931472a07d740713603e72bab478454c59e623346eeb27a15d1653c0d0c6064296e1db106efb1ab22fb32fccbb5f32dc5060ae9bd39f1cee57880cfc7d44f47421e98638424ff4e8f81a2e7bad89230e049cd4ec46c24a5b703f87e1ba4bea68cf871311453337bd6a32db247e2eab80fbf3f9a47066345407edfb543563e80aadc347fa265b8e179499ec62946f08aa3a3742c76f880f3eb9a1112adc9af3a369348c4ccd195b1bb7c06cad703e5231413c4de1b16363d34b0e88c7b4721a2e5c0b1badfd42b9edf742e918ad323142a67814f23a89c4ca97c74f60fff1df7803cf93710bbba8b8bc7d8a41e8b0bcdc581ea14c17b3791681b658a8501ed7c091baa900f56af0cbf2ac24ae4abdb75e3ee2afbda87d2da3b8b0a9ef29b94b8ad1a105621425911b8ddffd54410539f9b853e36cdecbe61c6d8404a41ca541e89b34b8d355e918e76cbc6f832afce24651592c1ea886bbfa26015f7b997981d3c219e9e55bd49bdaa6efa63daf90be62a2e12576bae6b5a9e62af15fe32fbea0461045d746af602ab1bd6bfc2c854cac4161b7e8e57714a5805b545f6d151eab818c3678b5de42307cc77c23f40184b03225cfc01a3787df43a29b8b3d43496dd773658ac76efd1e1f439bb51b5f43b94c4f7a505f90f1db79b0c3a284559aff6b108a9802f82f22f78027912d35a98175ad6b42bc0eaebeaf233449dc6c05c1443d7a9674dee13a7a82af906522564bb085dbf2c5ea90ba108e02a6ab4a91bb571c3d7e36d6b04338a2ca6f11ea7ee394b58adbfbea757d1a0a99fcd8b11560e1e298053a5094a9fdb6e064c00aacb4001bbd4c2ae3883aff63d46f6aae6e856ad409a982bfaa2c38a8cc13f3dec5ebc9e54e48c08375f8e0fab08703a5e355548df19461c598e55d05e7bcbf160c0f00f4bc2976639db7a2ceb9d93121096e95d7aa0a38da501ccfbed701e88013133856788d4b0029c26ff4a9266fde7a4437454714f351f4e2021ed719b9e8c44551c117d5f0fbb2f50c1aa7d128f369f17c9439a0abddb88675661368018d0fd526bde7fa200236e8c418aaf43c10d912c601fa285c071a668f1bd0a4783ead56fd921f2bf9d8a22c48f34a54127f40b256cc23c9457fc8880d09a6afe8ec9d38236c0e67f7fba1581a7803ba60e15272b338268697a49331fa945c72bd859d6d7f933eafc8a3671660465f4083a7db4e6eb92ca2b71bbf7ae724022f2d120c9d681a91a216a05362dce287f5cd4f69978cdf57627e61aef3d8ee5ef19c4daf9ba947eac05057d2066961ba0461f10ea743c9c802129f4afa741241d4d623776ac7b1e64280e4d4862e1f2a708b7a63e53d224bc451e6dad0b2063248c71e412d256ccbf1fbb8fbeb1d037eba4968891a55a7a86e85612674a26806d45665afbb53347d1f17c08338e1d9b5707d203881515d269dc87242a3a0403c9f05b0c11b3885d2145fd3e66e192a970de7b1ac74ca632cd69ae6f6c16fe4a865b366289cf1c11c836a375b3248c0ac2b0573dbf858be041160272e98d8321920f01a72d8201e7ad285365342553ede38eeb346e19afa29a37ea9edd1a90fe6c472e9f38bd44aabe28d47d5cff8e9cabd69becd53b99598c888d6f39c059751a9d03c230e4d07ab434cf3deb90e62db27b2a1ae817e414d1510e501cfbd59c67a1f1ea51eb2f105f2f59ada4a6e4881ac7334a8e23ec15b78f23b011d2eea232e5f41563dda8b6b1c57d7efcbcb629d45feaa6395ab16f13db7849e58e104b02dd045779a0f01c12ec22318d9436c3147f56fd43582fd3ea5f977dd42e7b8db9e00904370e7c9ea719df234a2a849669c7d7ff508508faad56654c5e87cf03450f6bbf70e45d2491dd25ddbf2dc17b5d1591d57a5212b71c85112cdd0986c28bda80548f2a640a83423a70ff2a173364541c92d38da1a36d6d9afacd25e25e356678c0a4473ba16138c20c626c4e363f933c39c4a580813e16255cfd2c99f99a39a06f6f0cfc80d80c42a3f0e040951b29b22bed646738e32e7e025d95d6ae588bd501f2e14acf115c8780b72061c9a5a21ea5d13c7efa3bd0ea505b16e6067aebe8fd210fcc0737229559dedffa6dfe06db8e8e30d21ede98e06dbc8aa2a6429839e361cdd85e74195899b07baab19121edeeccb53d703d3be0d2d8ceb8531077b7cca9be7793fcf9addfe0b621229670864757093339e4c5878d2f6b8ea923dbabe9d2a652c71968e623fe2fbebaa7dc98fc64ca5fe30ce7ef8d28e5ae2ec1c4708c8bae9ae4a8998d45bafaa5deca5dde086aa5fdcee70a6665ab032ee123bf612d465cebc2e96aab00db5fcf533db0803f0c4b79090b0fa82f2361b7d59275f6c509e1b748b7e28cd88189375ca9f27760f4faec3d96db7f2c307402d3a41dd0e0aeef4b14613794b228b083b93c43c0431aa184e507fcfb659a481ecd11d341576315e73d230f4e4650eab392dd15d8bd39bb68598fc491ce193854140b02c90c735eaa8753add6cbfea2b755216db321fb45e2aab0836a759486181153820c3fd9fbc59c9f96e88578bd57d31b44c245ef96d42e231faabeb1ce5854078b86ea2400bfe5ff62448349e59562080d82e543841565a292b2cbb20e7ac198ab33119d55e671d02f197c215ea9c2ad17c1b3e4ba8185444017627436885ebed3621517e744a5e7c72eb090309a97a9fbbfb1b34e5698194fb70a87aa631463a870f0246a6f0be630ed675ce5dc15eb234b71171c99d3cec90f69e2074cc2362947068b5904707fd14c7e5748a76627c1afa46e5092b982fb3161d80b0eb820b403658b5643e51eca095ed2e97f5e614d0d06fce3962554486c4b73eae34ecb7d8547c9353b4165d26782ae5acd703ebe2eb770da978eb5d2b03361d4500fe0f76ea6034614f40638042295f650bdb47128dd7b58f5016d89e7449c5fc4d1be0342e354bc9d0b50b878899dac3c575be319141af61e9e7ddfcf000dec8cd7fb41f0e4b21ce28a7ffb2b63475cbf0ce3869a00c7dac524acb101f24bdab2ba3965e36b725c4e7e7ef11ff71895581ecf451aba1e4b21286b6f545d1c1ed9bd7354e4925705157000ff72b53946650bf0fca5d5bb834e7cf3d6bd164d0a139ed95bb0d61fb201416c5c0eca6487e516201532b2ac8827ec7ae536f782852aca2589eef50159127b242dfc0cc1a75f4b69a1f410b0055f4ff5c6f92cbf8abe11d4571216e8b32c4e08e021edd5ab468c4143dd7a41b673d21de4fe98f6b02d728d0e9edca6bceef9c54a85d8e4e48e8d52a03a8948882b1bf0029d9f6ab4c36191f6c88cf362961911bbd0372e4ff1a2e797c17b9fbd152ccfe18691c1f1c1475a24ef8d73c57d724c54abcda3c541ad45ae63eb2995c6930de970c0e95f6e138fefc574fb8d7665ba95367aafa2adcefffbaad301468a729d29afd1c571ea60a9552f3fbade30218baff39e43b181e1cbf63928166d6bb802b3cb25c4b408feb6240e422aa1f41eab0d53df75f7cdc1b59b0f9591a137458183be8200ece6a3ea822a4a9af02e0fb3a996c6281d1dd3c6e53aa24458f12ccadb3883b724bcc2f4d992187a1f11467fe32e56129c9fa93520c92a338187fa17174a03f5216d7db6884969d34626f2a3696355e19d1755333cb30c2c397570f5f6ac5de4f29cae415605c6df8c6d4ae5f9606f88e91324ae9efcc56f8988ea617d064422119dbd206cde8ab1dafe7bff376435ec8e62ff0589dc60680a533344fc870ca2f4d421a4b45467313e89cdcb110b06b63a1d2284b8cd40ccf18ee3efa2d9d2d974746cd141dffe909e51db2a16b24d7d02c94543c36a4a35d97cae005ab0008acf897c23bbdaec44f9f7eab42d16138184c1eb845024d51df0c6a1cfadff9eb927b10726990682f1e01fb637a17ad618590bb6e9043c4895bb19997e0707b3e401da9027ab7792a75ac8f22c3d9172ca1d2fadbe9aaf4d9bc89c041d3df97c61253a7805e5f6e9dc34c3f35725e1ae8bda388e92e83bf6f1fa32a1d8d961e5db0b683dde2232b4663fb5999ef1036d05433e054f3566b6cb3fdb6310df261ff947fbe77cc1b5e5789cd890cb826bdcef689edf00fee71f4124ad1c5ffdd05ae61901ef0da465821c5604187dc9d56bf1308127c2df3d9cef5d5a7acf68b076ba799cae184d44c0a3620a9f9fc0da0821cb165c0392bd7ebca5cb21bdb0a8733f3e49246a3350dd0fb34bc802ac2853c6cb7dcf2a87a704820b8c04d425ed0072f09751db49c42062935680360527ae4166f5b003d06d07c87b52bddfe672404803bab40c1944f726c5dca44971a54b6566e3a58761d38eff1213caa5f7625527d21be6d1cdddd9ef8fe74811701c6e732ee6ef13147a888a147a457715a8e19b727e2211bc33d5e62009e64b6fa08902f8de2e2219c4770c576c8075d775bb92c10533dfe14de1d6dc865b473f3538bb99f1300745ebe967ff97efa7158660fd5de655674a67ba6667175185c253b1f8fd6f342cc1b192bc92c7f90e2a27b95e8ddec27ec8a51d285da73f732fd83960cd9e4b4d1512b44a2b4d6c1da604fc1abf8836c9e11d6f59bb20ca5921e69402a13e4fad4694b8e762e790c48ab9cb479bed22837feed9420cd85716df2ba43a90121c09a88a9112f177462310d80122b6d3c7f2e2cffda61a567cd39233ef421148fd77766379d0a374ddfff972301aeee20761614e1887f7fdc7f7bb0ae4d9e8bda037f6a2facab531b6f6100fd69625350c891a966b68aacab1e6f2ecc13ba62967274e05c89100ba87ed5223848bdd8906d99aac6bd1d44a98bd06493fd8c16fc4cd8e2ee9aa72e1a39841bc965df612f716fe2ec81e2af3ee1489c4123b36eb783ea34059b49909f02be7a82fbc603a4e565f7517d2712c66ea12972cfc9d932ef8e57e715d03c1b81e994fd2815bb51a0c03fb8b5022bb18ef8882f365b89e8934b0015e9406d780c8297bccae03914bf413c9b10fec7b65599af6aafbc9c2af02c01bdd379d86a7c0c755e61ed73f2b694e692df41d911606fd18facc3912d65ab0608ba3723c132d7b06732e8c35b331c853732d1c6c7789284d38fb98bd0c8e0966d12314fbd1ede5bc7dd4713a99e9fc16058d203667bb1dbf513d8cd539ddf6225fe7ba67aa98593334c4f55a35806b", 0x1000}, {&(0x7f0000001200)="6ea503f9939d88ea6f831068ad28ab7ee49eef90205c7112f4a84191aa681e7991bbf313b5b02fc444e6260b9086b9dc98706a03bd6b5f85b959fc3571782779be7f5460cb70ab279a8f5d681ad6816f3ef1a13d5fcd29ee01d0720f45c6554ee35e08f854d20b6b738cbd5ff8ec628ae812632d75e980504b0e06d39b6a68c6ab585c431cda73ca1d38bd0ca5a5", 0x8e}, {&(0x7f00000012c0)="e5898f80535438d98c4178a8de443bdeddfad79901b6b4bc228c417c02b4594189aebd0af932b9556fdcb8771fba47c43d9535130f09146cdce2f9c5813bd515ac310143f395d3e9ba418b7de2a9ddfb6c12b1188af60ee78d4441748e29f705665977931fe2071053c81badf4c87a3e373b3ccc4975460df3d2ace4e515d0024ca4fd6bc3b877cd76e572b6c6b0a37bac96ab9b05355ad094df3734a432d3aa47b103238c4654fa516f40a2fcef63a64a575df07ea605ae21814b3b390a2833466da78350fc88b0a069f71486a856b9d6afa8879fa6eb", 0xd7}, {&(0x7f00000013c0)="013e2e70c72f86f74ab4ea30017e6aa2bb8ec10a8d7dd626edf18724b63cc44ca914f51f01cf9b8344eb4b96d4046c8e1d82bc77f6703dd09c26ad4ff2cb088426f7193b48fc97fc94276c821169d62e8f3c0753d7155978373ffe5feb58dea48cb9d6b3c11e4406bfb0e0be0ca5b8d0f5c2769027507a06cbf7edee5e9699bc02a75a1a4664a32dd906fea8ce4d12f792aba28246881c6d568f8eec1b1a", 0x9e}], 0x5) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r2 = syz_open_dev$sndpcmp(&(0x7f0000001500), 0x6, 0x8800) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000001800)={0x0, &(0x7f00000017c0)=[&(0x7f0000001540)="88e9c49f4c997c6718d9a794697edc4e3a32530a1103cfc374c9d22a332e666202e4aacb50e2b09024439b60e4a2ec9068c779cd363f00450c3a6b0cc108171fc0048df4a866d004f8b19b939e5848695ca80283229aadfae4af74e8a4763242479da2fee8dae458510cdd1039fabd223b6edd8124fc4eb49673316462d4a9f4042bb6e8117b2f6a509b51c23e17c9ed4c671fa7058f506632d8f59d2636277c9f923be97987ee20bf4eaaf95fb240f7229c5f197b87229924aadc4563c5759b48ba670dda0a861e4c25c8ead71164e0eb96f9235e7ac6da", &(0x7f0000001640)="f0da5473945ffbc4cf36d97750c247418bf69f269836805b784c8778c64b54e4df5ebaea1b3b2d28dd6d7b19c0df78a80b766582d18166e531b1fdb2065e27c134d8aaf36a773137ba638997eea67cda26f34fdb5a2b7c22e1068daff9066b508e339086", &(0x7f00000016c0)="cac57234abc4fd8308e1f133bfddcf637f398b5301d53a52812f73d68ced9c3052493426be394039aac557e4182f32ab44ed5546ca63fe57", &(0x7f0000001700)="8436f72d63a123eecb7f9eb01f24d2cd59e92f9c5ae58c97b902cf103bf917613f56f85e1497a69f4f443a9634566040e2c4e8862d0f111066797544768a6f4509c63516236bfb9cbf736e30f9af48d4804832133e2aa4dd7730346e3ef0d06efe087e1c3492901ff3a1325dce1c3b1e6a917be736101d486e1975afada01f308359fc4cf89e9f7f0b38598558f99daf54"]}) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000000)=0x1ff) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) (async) writev(r1, &(0x7f0000001480)=[{&(0x7f00000001c0)="92a5d4d04ee711432d4428c49376db1828e93216a1018d", 0x17}, {&(0x7f0000000200)="6b97ec7ae0c37d61c557e2b2c1d4d24d6db2a6d4c14972bb9ebf904f8d199948d56c03452c2641c14efbb4b8c54a1ba76e63c9cb73e27899d21f51ed26ca18bc52ec1486c47d7b911d3919b94a8f2776ef3becbd29a4871908ce7a92e539a1c9732bddfdacd4f9b4af7ffb99c95407b6c7ef4c34585471f4eefc6b5e3dc72e700802463f365bd0181ce5cfaf1bb5441845ff9e2a5cee45824ba1589da7e64e7762e8fad41dd37328860446c054d19355d2ddc08b0c4154d107f8dd9805b7f76a5cde662884a11ae639991826228c0ce84bea19ff4b51451eda23ef9e66db57df0d84fd8c436b3f490fb40c92768c6ca630a70bf92d7520f35ee7eba313e0ddb02d934e9bc9ebc8b33dd7a6e7437facb2e9fd30b1ba622294cd5ad99ba3c088d3c439ac19f2de37f34b193af219bc970b96ba858be187a128310cda56e3ce85051bc35a7b20da99baf4b02e305f666b6cf8a83450467d55be538b72dc163f0e947bcd24773ffe41159b4e525b9549b56720cffd403f8ed4ace793e432584ea19b532b0c5a819d3d9c699d65fdbfe8cb9ff74700036f83a3411dd71d8c3e1496c601bee077227707883479d9f12080717ffd78361931472a07d740713603e72bab478454c59e623346eeb27a15d1653c0d0c6064296e1db106efb1ab22fb32fccbb5f32dc5060ae9bd39f1cee57880cfc7d44f47421e98638424ff4e8f81a2e7bad89230e049cd4ec46c24a5b703f87e1ba4bea68cf871311453337bd6a32db247e2eab80fbf3f9a47066345407edfb543563e80aadc347fa265b8e179499ec62946f08aa3a3742c76f880f3eb9a1112adc9af3a369348c4ccd195b1bb7c06cad703e5231413c4de1b16363d34b0e88c7b4721a2e5c0b1badfd42b9edf742e918ad323142a67814f23a89c4ca97c74f60fff1df7803cf93710bbba8b8bc7d8a41e8b0bcdc581ea14c17b3791681b658a8501ed7c091baa900f56af0cbf2ac24ae4abdb75e3ee2afbda87d2da3b8b0a9ef29b94b8ad1a105621425911b8ddffd54410539f9b853e36cdecbe61c6d8404a41ca541e89b34b8d355e918e76cbc6f832afce24651592c1ea886bbfa26015f7b997981d3c219e9e55bd49bdaa6efa63daf90be62a2e12576bae6b5a9e62af15fe32fbea0461045d746af602ab1bd6bfc2c854cac4161b7e8e57714a5805b545f6d151eab818c3678b5de42307cc77c23f40184b03225cfc01a3787df43a29b8b3d43496dd773658ac76efd1e1f439bb51b5f43b94c4f7a505f90f1db79b0c3a284559aff6b108a9802f82f22f78027912d35a98175ad6b42bc0eaebeaf233449dc6c05c1443d7a9674dee13a7a82af906522564bb085dbf2c5ea90ba108e02a6ab4a91bb571c3d7e36d6b04338a2ca6f11ea7ee394b58adbfbea757d1a0a99fcd8b11560e1e298053a5094a9fdb6e064c00aacb4001bbd4c2ae3883aff63d46f6aae6e856ad409a982bfaa2c38a8cc13f3dec5ebc9e54e48c08375f8e0fab08703a5e355548df19461c598e55d05e7bcbf160c0f00f4bc2976639db7a2ceb9d93121096e95d7aa0a38da501ccfbed701e88013133856788d4b0029c26ff4a9266fde7a4437454714f351f4e2021ed719b9e8c44551c117d5f0fbb2f50c1aa7d128f369f17c9439a0abddb88675661368018d0fd526bde7fa200236e8c418aaf43c10d912c601fa285c071a668f1bd0a4783ead56fd921f2bf9d8a22c48f34a54127f40b256cc23c9457fc8880d09a6afe8ec9d38236c0e67f7fba1581a7803ba60e15272b338268697a49331fa945c72bd859d6d7f933eafc8a3671660465f4083a7db4e6eb92ca2b71bbf7ae724022f2d120c9d681a91a216a05362dce287f5cd4f69978cdf57627e61aef3d8ee5ef19c4daf9ba947eac05057d2066961ba0461f10ea743c9c802129f4afa741241d4d623776ac7b1e64280e4d4862e1f2a708b7a63e53d224bc451e6dad0b2063248c71e412d256ccbf1fbb8fbeb1d037eba4968891a55a7a86e85612674a26806d45665afbb53347d1f17c08338e1d9b5707d203881515d269dc87242a3a0403c9f05b0c11b3885d2145fd3e66e192a970de7b1ac74ca632cd69ae6f6c16fe4a865b366289cf1c11c836a375b3248c0ac2b0573dbf858be041160272e98d8321920f01a72d8201e7ad285365342553ede38eeb346e19afa29a37ea9edd1a90fe6c472e9f38bd44aabe28d47d5cff8e9cabd69becd53b99598c888d6f39c059751a9d03c230e4d07ab434cf3deb90e62db27b2a1ae817e414d1510e501cfbd59c67a1f1ea51eb2f105f2f59ada4a6e4881ac7334a8e23ec15b78f23b011d2eea232e5f41563dda8b6b1c57d7efcbcb629d45feaa6395ab16f13db7849e58e104b02dd045779a0f01c12ec22318d9436c3147f56fd43582fd3ea5f977dd42e7b8db9e00904370e7c9ea719df234a2a849669c7d7ff508508faad56654c5e87cf03450f6bbf70e45d2491dd25ddbf2dc17b5d1591d57a5212b71c85112cdd0986c28bda80548f2a640a83423a70ff2a173364541c92d38da1a36d6d9afacd25e25e356678c0a4473ba16138c20c626c4e363f933c39c4a580813e16255cfd2c99f99a39a06f6f0cfc80d80c42a3f0e040951b29b22bed646738e32e7e025d95d6ae588bd501f2e14acf115c8780b72061c9a5a21ea5d13c7efa3bd0ea505b16e6067aebe8fd210fcc0737229559dedffa6dfe06db8e8e30d21ede98e06dbc8aa2a6429839e361cdd85e74195899b07baab19121edeeccb53d703d3be0d2d8ceb8531077b7cca9be7793fcf9addfe0b621229670864757093339e4c5878d2f6b8ea923dbabe9d2a652c71968e623fe2fbebaa7dc98fc64ca5fe30ce7ef8d28e5ae2ec1c4708c8bae9ae4a8998d45bafaa5deca5dde086aa5fdcee70a6665ab032ee123bf612d465cebc2e96aab00db5fcf533db0803f0c4b79090b0fa82f2361b7d59275f6c509e1b748b7e28cd88189375ca9f27760f4faec3d96db7f2c307402d3a41dd0e0aeef4b14613794b228b083b93c43c0431aa184e507fcfb659a481ecd11d341576315e73d230f4e4650eab392dd15d8bd39bb68598fc491ce193854140b02c90c735eaa8753add6cbfea2b755216db321fb45e2aab0836a759486181153820c3fd9fbc59c9f96e88578bd57d31b44c245ef96d42e231faabeb1ce5854078b86ea2400bfe5ff62448349e59562080d82e543841565a292b2cbb20e7ac198ab33119d55e671d02f197c215ea9c2ad17c1b3e4ba8185444017627436885ebed3621517e744a5e7c72eb090309a97a9fbbfb1b34e5698194fb70a87aa631463a870f0246a6f0be630ed675ce5dc15eb234b71171c99d3cec90f69e2074cc2362947068b5904707fd14c7e5748a76627c1afa46e5092b982fb3161d80b0eb820b403658b5643e51eca095ed2e97f5e614d0d06fce3962554486c4b73eae34ecb7d8547c9353b4165d26782ae5acd703ebe2eb770da978eb5d2b03361d4500fe0f76ea6034614f40638042295f650bdb47128dd7b58f5016d89e7449c5fc4d1be0342e354bc9d0b50b878899dac3c575be319141af61e9e7ddfcf000dec8cd7fb41f0e4b21ce28a7ffb2b63475cbf0ce3869a00c7dac524acb101f24bdab2ba3965e36b725c4e7e7ef11ff71895581ecf451aba1e4b21286b6f545d1c1ed9bd7354e4925705157000ff72b53946650bf0fca5d5bb834e7cf3d6bd164d0a139ed95bb0d61fb201416c5c0eca6487e516201532b2ac8827ec7ae536f782852aca2589eef50159127b242dfc0cc1a75f4b69a1f410b0055f4ff5c6f92cbf8abe11d4571216e8b32c4e08e021edd5ab468c4143dd7a41b673d21de4fe98f6b02d728d0e9edca6bceef9c54a85d8e4e48e8d52a03a8948882b1bf0029d9f6ab4c36191f6c88cf362961911bbd0372e4ff1a2e797c17b9fbd152ccfe18691c1f1c1475a24ef8d73c57d724c54abcda3c541ad45ae63eb2995c6930de970c0e95f6e138fefc574fb8d7665ba95367aafa2adcefffbaad301468a729d29afd1c571ea60a9552f3fbade30218baff39e43b181e1cbf63928166d6bb802b3cb25c4b408feb6240e422aa1f41eab0d53df75f7cdc1b59b0f9591a137458183be8200ece6a3ea822a4a9af02e0fb3a996c6281d1dd3c6e53aa24458f12ccadb3883b724bcc2f4d992187a1f11467fe32e56129c9fa93520c92a338187fa17174a03f5216d7db6884969d34626f2a3696355e19d1755333cb30c2c397570f5f6ac5de4f29cae415605c6df8c6d4ae5f9606f88e91324ae9efcc56f8988ea617d064422119dbd206cde8ab1dafe7bff376435ec8e62ff0589dc60680a533344fc870ca2f4d421a4b45467313e89cdcb110b06b63a1d2284b8cd40ccf18ee3efa2d9d2d974746cd141dffe909e51db2a16b24d7d02c94543c36a4a35d97cae005ab0008acf897c23bbdaec44f9f7eab42d16138184c1eb845024d51df0c6a1cfadff9eb927b10726990682f1e01fb637a17ad618590bb6e9043c4895bb19997e0707b3e401da9027ab7792a75ac8f22c3d9172ca1d2fadbe9aaf4d9bc89c041d3df97c61253a7805e5f6e9dc34c3f35725e1ae8bda388e92e83bf6f1fa32a1d8d961e5db0b683dde2232b4663fb5999ef1036d05433e054f3566b6cb3fdb6310df261ff947fbe77cc1b5e5789cd890cb826bdcef689edf00fee71f4124ad1c5ffdd05ae61901ef0da465821c5604187dc9d56bf1308127c2df3d9cef5d5a7acf68b076ba799cae184d44c0a3620a9f9fc0da0821cb165c0392bd7ebca5cb21bdb0a8733f3e49246a3350dd0fb34bc802ac2853c6cb7dcf2a87a704820b8c04d425ed0072f09751db49c42062935680360527ae4166f5b003d06d07c87b52bddfe672404803bab40c1944f726c5dca44971a54b6566e3a58761d38eff1213caa5f7625527d21be6d1cdddd9ef8fe74811701c6e732ee6ef13147a888a147a457715a8e19b727e2211bc33d5e62009e64b6fa08902f8de2e2219c4770c576c8075d775bb92c10533dfe14de1d6dc865b473f3538bb99f1300745ebe967ff97efa7158660fd5de655674a67ba6667175185c253b1f8fd6f342cc1b192bc92c7f90e2a27b95e8ddec27ec8a51d285da73f732fd83960cd9e4b4d1512b44a2b4d6c1da604fc1abf8836c9e11d6f59bb20ca5921e69402a13e4fad4694b8e762e790c48ab9cb479bed22837feed9420cd85716df2ba43a90121c09a88a9112f177462310d80122b6d3c7f2e2cffda61a567cd39233ef421148fd77766379d0a374ddfff972301aeee20761614e1887f7fdc7f7bb0ae4d9e8bda037f6a2facab531b6f6100fd69625350c891a966b68aacab1e6f2ecc13ba62967274e05c89100ba87ed5223848bdd8906d99aac6bd1d44a98bd06493fd8c16fc4cd8e2ee9aa72e1a39841bc965df612f716fe2ec81e2af3ee1489c4123b36eb783ea34059b49909f02be7a82fbc603a4e565f7517d2712c66ea12972cfc9d932ef8e57e715d03c1b81e994fd2815bb51a0c03fb8b5022bb18ef8882f365b89e8934b0015e9406d780c8297bccae03914bf413c9b10fec7b65599af6aafbc9c2af02c01bdd379d86a7c0c755e61ed73f2b694e692df41d911606fd18facc3912d65ab0608ba3723c132d7b06732e8c35b331c853732d1c6c7789284d38fb98bd0c8e0966d12314fbd1ede5bc7dd4713a99e9fc16058d203667bb1dbf513d8cd539ddf6225fe7ba67aa98593334c4f55a35806b", 0x1000}, {&(0x7f0000001200)="6ea503f9939d88ea6f831068ad28ab7ee49eef90205c7112f4a84191aa681e7991bbf313b5b02fc444e6260b9086b9dc98706a03bd6b5f85b959fc3571782779be7f5460cb70ab279a8f5d681ad6816f3ef1a13d5fcd29ee01d0720f45c6554ee35e08f854d20b6b738cbd5ff8ec628ae812632d75e980504b0e06d39b6a68c6ab585c431cda73ca1d38bd0ca5a5", 0x8e}, {&(0x7f00000012c0)="e5898f80535438d98c4178a8de443bdeddfad79901b6b4bc228c417c02b4594189aebd0af932b9556fdcb8771fba47c43d9535130f09146cdce2f9c5813bd515ac310143f395d3e9ba418b7de2a9ddfb6c12b1188af60ee78d4441748e29f705665977931fe2071053c81badf4c87a3e373b3ccc4975460df3d2ace4e515d0024ca4fd6bc3b877cd76e572b6c6b0a37bac96ab9b05355ad094df3734a432d3aa47b103238c4654fa516f40a2fcef63a64a575df07ea605ae21814b3b390a2833466da78350fc88b0a069f71486a856b9d6afa8879fa6eb", 0xd7}, {&(0x7f00000013c0)="013e2e70c72f86f74ab4ea30017e6aa2bb8ec10a8d7dd626edf18724b63cc44ca914f51f01cf9b8344eb4b96d4046c8e1d82bc77f6703dd09c26ad4ff2cb088426f7193b48fc97fc94276c821169d62e8f3c0753d7155978373ffe5feb58dea48cb9d6b3c11e4406bfb0e0be0ca5b8d0f5c2769027507a06cbf7edee5e9699bc02a75a1a4664a32dd906fea8ce4d12f792aba28246881c6d568f8eec1b1a", 0x9e}], 0x5) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) syz_open_dev$sndpcmp(&(0x7f0000001500), 0x6, 0x8800) (async) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f0000001800)={0x0, &(0x7f00000017c0)=[&(0x7f0000001540)="88e9c49f4c997c6718d9a794697edc4e3a32530a1103cfc374c9d22a332e666202e4aacb50e2b09024439b60e4a2ec9068c779cd363f00450c3a6b0cc108171fc0048df4a866d004f8b19b939e5848695ca80283229aadfae4af74e8a4763242479da2fee8dae458510cdd1039fabd223b6edd8124fc4eb49673316462d4a9f4042bb6e8117b2f6a509b51c23e17c9ed4c671fa7058f506632d8f59d2636277c9f923be97987ee20bf4eaaf95fb240f7229c5f197b87229924aadc4563c5759b48ba670dda0a861e4c25c8ead71164e0eb96f9235e7ac6da", &(0x7f0000001640)="f0da5473945ffbc4cf36d97750c247418bf69f269836805b784c8778c64b54e4df5ebaea1b3b2d28dd6d7b19c0df78a80b766582d18166e531b1fdb2065e27c134d8aaf36a773137ba638997eea67cda26f34fdb5a2b7c22e1068daff9066b508e339086", &(0x7f00000016c0)="cac57234abc4fd8308e1f133bfddcf637f398b5301d53a52812f73d68ced9c3052493426be394039aac557e4182f32ab44ed5546ca63fe57", &(0x7f0000001700)="8436f72d63a123eecb7f9eb01f24d2cd59e92f9c5ae58c97b902cf103bf917613f56f85e1497a69f4f443a9634566040e2c4e8862d0f111066797544768a6f4509c63516236bfb9cbf736e30f9af48d4804832133e2aa4dd7730346e3ef0d06efe087e1c3492901ff3a1325dce1c3b1e6a917be736101d486e1975afada01f308359fc4cf89e9f7f0b38598558f99daf54"]}) (async) 11:35:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x300}, 0x0) 11:35:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) r1 = getpgid(0xffffffffffffffff) r2 = getpgrp(0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x4) r4 = open(&(0x7f0000000100)='./bus\x00', 0x1, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000040000783dd8097ab18775738fade5010000006cba5cc77015d680e04437823059f8e50d5853548d9d000000000000000000"], 0x0, 0x0, 0x1000, &(0x7f0000000400)=""/4096}, 0x80) mmap(&(0x7f000002e000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0x248b4000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xa, &(0x7f00000001c0)=""/10, 0x41000, 0xc, '\x00', 0x0, 0x9, r3, 0x8, &(0x7f0000000200)={0x4, 0x1000005}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xb, 0x2, 0x6}, 0x10, 0xffffffffffffffff, r5}, 0x90) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000300)=0x0) fcntl$lock(r3, 0x26, &(0x7f0000000340)={0x2, 0x2, 0x2, 0x7f, r6}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 482.991031][T12369] binder: 12368:12369 unknown command 0 [ 483.007968][T12369] binder: 12368:12369 ioctl c0306201 20000440 returned -22 [ 483.024062][T12369] binder_alloc: binder_alloc_mmap_handler: 12368 20bfe000-20ffe000 already mapped failed -16 11:35:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x1e65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:08 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd1) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:35:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x500}, 0x0) 11:35:08 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) r1 = getpgid(0xffffffffffffffff) (async) r2 = getpgrp(0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x4) (async) r4 = open(&(0x7f0000000100)='./bus\x00', 0x1, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000040000783dd8097ab18775738fade5010000006cba5cc77015d680e04437823059f8e50d5853548d9d000000000000000000"], 0x0, 0x0, 0x1000, &(0x7f0000000400)=""/4096}, 0x80) mmap(&(0x7f000002e000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0x248b4000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xa, &(0x7f00000001c0)=""/10, 0x41000, 0xc, '\x00', 0x0, 0x9, r3, 0x8, &(0x7f0000000200)={0x4, 0x1000005}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xb, 0x2, 0x6}, 0x10, 0xffffffffffffffff, r5}, 0x90) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000300)=0x0) fcntl$lock(r3, 0x26, &(0x7f0000000340)={0x2, 0x2, 0x2, 0x7f, r6}) (async) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 483.218751][T12381] binder: 12380:12381 unknown command 0 [ 483.231601][T12381] binder: 12380:12381 ioctl c0306201 20000440 returned -22 [ 483.249066][T12381] binder_alloc: binder_alloc_mmap_handler: 12380 20bfe000-20ffe000 already mapped failed -16 11:35:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x600}, 0x0) 11:35:08 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd1) (async) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) 11:35:08 executing program 3: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) (async) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) getpgid(0xffffffffffffffff) (async) r1 = getpgid(0xffffffffffffffff) r2 = getpgrp(0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x4) r4 = open(&(0x7f0000000100)='./bus\x00', 0x1, 0x40) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x0, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000040000783dd8097ab18775738fade5010000006cba5cc77015d680e04437823059f8e50d5853548d9d000000000000000000"], 0x0, 0x0, 0x1000, &(0x7f0000000400)=""/4096}, 0x80) mmap(&(0x7f000002e000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0x248b4000) (async) mmap(&(0x7f000002e000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r3, 0x248b4000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0xa, &(0x7f00000001c0)=""/10, 0x41000, 0xc, '\x00', 0x0, 0x9, r3, 0x8, &(0x7f0000000200)={0x4, 0x1000005}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xb, 0x2, 0x6}, 0x10, 0xffffffffffffffff, r5}, 0x90) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000300)=0x0) fcntl$lock(r3, 0x26, &(0x7f0000000340)={0x2, 0x2, 0x2, 0x7f, r6}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000100)={0xffffffffffffffff, r0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:08 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x700}, 0x0) 11:35:09 executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd1) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd1) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) [ 483.475829][T12396] binder: 12394:12396 unknown command 0 [ 483.490864][T12396] binder: 12394:12396 ioctl c0306201 20000440 returned -22 [ 483.512229][T12396] binder_alloc: binder_alloc_mmap_handler: 12394 20bfe000-20ffe000 already mapped failed -16 11:35:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000100), 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x701841) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x900}, 0x0) 11:35:09 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0x8001, 0x7fffffff}) write(r0, &(0x7f00000002c0)="37e19c10edd936ed899292c2b7341e57f6cfca32899ec573c532260ab5342e5fe68515a5fe57d9dcc3965c3fb900961e7a826c02634054eb0e10e4b0e03bf5d14926b41e5d9e8c61470d16f1d2ab013722c7318d95fa255b8a1f4b43b39689162025aee92ef6d61334ef3599498444959f994ea4f238b3c4c7ef52f6b6cc2a83", 0x80) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000180)={0xa7, 0xd, 0x3, "7ae764aaef0861b3ac26362e6d5e1d3430f01eabd34f4fcaec0998a5909f05a7aed99a10d655b3a972ddaa58030447b84ccfde9fc5fd1c4897e55cab", 0x1, "b91ae7eca2ced55e4615ba880d3b7e11baf751fb33ed5e8b351909743cf2979a4800962d89b1981a32bbae9cd66d22a954469d567835233fcf36bb45", 0x8}) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '/dev/vbi#\x00'}, {0x20, '@@'}], 0xa, "d9142e0e0dee8b3690fd0c4e140031921d6a129955bd8a0d1daa9de25e0371"}, 0x3c) [ 483.742247][T12411] binder: 12408:12411 unknown command 0 [ 483.757137][T12411] binder: 12408:12411 ioctl c0306201 20000440 returned -22 [ 483.778766][T12411] binder_alloc: binder_alloc_mmap_handler: 12408 20bfe000-20ffe000 already mapped failed -16 11:35:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xa00}, 0x0) 11:35:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000100), 0x0) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x701841) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000280)) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:09 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0x8001, 0x7fffffff}) write(r0, &(0x7f00000002c0)="37e19c10edd936ed899292c2b7341e57f6cfca32899ec573c532260ab5342e5fe68515a5fe57d9dcc3965c3fb900961e7a826c02634054eb0e10e4b0e03bf5d14926b41e5d9e8c61470d16f1d2ab013722c7318d95fa255b8a1f4b43b39689162025aee92ef6d61334ef3599498444959f994ea4f238b3c4c7ef52f6b6cc2a83", 0x80) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000180)={0xa7, 0xd, 0x3, "7ae764aaef0861b3ac26362e6d5e1d3430f01eabd34f4fcaec0998a5909f05a7aed99a10d655b3a972ddaa58030447b84ccfde9fc5fd1c4897e55cab", 0x1, "b91ae7eca2ced55e4615ba880d3b7e11baf751fb33ed5e8b351909743cf2979a4800962d89b1981a32bbae9cd66d22a954469d567835233fcf36bb45", 0x8}) (async) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '/dev/vbi#\x00'}, {0x20, '@@'}], 0xa, "d9142e0e0dee8b3690fd0c4e140031921d6a129955bd8a0d1daa9de25e0371"}, 0x3c) 11:35:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xc00}, 0x0) 11:35:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000100), 0x0) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x701841) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000280)) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 484.005310][T12424] binder: 12420:12424 unknown command 0 11:35:09 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x2, 0x8001, 0x7fffffff}) write(r0, &(0x7f00000002c0)="37e19c10edd936ed899292c2b7341e57f6cfca32899ec573c532260ab5342e5fe68515a5fe57d9dcc3965c3fb900961e7a826c02634054eb0e10e4b0e03bf5d14926b41e5d9e8c61470d16f1d2ab013722c7318d95fa255b8a1f4b43b39689162025aee92ef6d61334ef3599498444959f994ea4f238b3c4c7ef52f6b6cc2a83", 0x80) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000180)={0xa7, 0xd, 0x3, "7ae764aaef0861b3ac26362e6d5e1d3430f01eabd34f4fcaec0998a5909f05a7aed99a10d655b3a972ddaa58030447b84ccfde9fc5fd1c4897e55cab", 0x1, "b91ae7eca2ced55e4615ba880d3b7e11baf751fb33ed5e8b351909743cf2979a4800962d89b1981a32bbae9cd66d22a954469d567835233fcf36bb45", 0x8}) (async) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './file0', [{0x20, '\x00'}, {0x20, ','}, {0x20, '/dev/vbi#\x00'}, {0x20, '@@'}], 0xa, "d9142e0e0dee8b3690fd0c4e140031921d6a129955bd8a0d1daa9de25e0371"}, 0x3c) [ 484.046965][T12424] binder: 12420:12424 ioctl c0306201 20000440 returned -22 [ 484.058071][T12424] binder_alloc: binder_alloc_mmap_handler: 12420 20bfe000-20ffe000 already mapped failed -16 11:35:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xe00}, 0x0) [ 484.120757][T12431] binder_alloc_new_buf: 6 callbacks suppressed [ 484.120777][T12431] binder_alloc: 12420: binder_alloc_buf, no vma 11:35:09 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0xfffffffffffffffa, 0xcabf, 0x7fffffff, 0xffffffffffffffe1, 0xa27]}, &(0x7f00000005c0)=0x78) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="152019790000e98155d55a198d0fa0aec32072532d00294e66157a8e275437870ad89a15c97bb2527c030000007485fc3e3761c5c1d6f937e916d68b318a05ffb821af2106065dbc710aa72e8d415761ba3e14249a072bff0b0b28fa9c8dc59f2a44707bcf12718391b4248aaaaa9f6fbd73eefbdc2a6c638ec65f9200f873365d94e0b9ed74d20fe85d5238fe6ca22eb221fd93264eaffab7b7caa428d46a441d5c313e526bc3710a99436d1e9bc23810a880d0d36f7c1ee7205a6eed63b2a9ff28ef0f6de7081e96f84460aa5b81cd7686246f5cabe5b48d2245df176f2f38a0a4844f08657584b57a2d73e755f5113dc6bc8a5dfe97000000000000000700b6b40717211367211b4a74d13a39b6010a2e9915ae29519fe53807e4f447bade9cfab76b9e2fe8e4b5dfe823402052a4cc3ebf667a7b147827c3384cb9fcb8a199b32d81e7264c7713ce3c589d7a1fb0ea612adb4f65c0f8d838dbfa2eb9c0e5dba3130c92413d2be16b9c0a2ff61581983bb7654ee260538b5fc1ab1269bd7e5cb3b526083be20c6408dea6cc76b047a1d1982173e93d11c88a42c419a41abb6eca410f98a5ee59407dd65164554d29ae3403b4b15c7e3122"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x53, 0x4, 0x9, 0x2, @local, @local, 0x8, 0x7801, 0x10000, 0x1}}) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_deladdr={0x20, 0x15, 0x800, 0x70bd28, 0x25dfdbfe, {0x2, 0x3f, 0x43, 0xff, r5}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 11:35:09 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @pix_mp={0x2, 0xb3, 0x38415261, 0x1, 0xa, [{0x100, 0x9}, {0x6}, {0x3, 0x80000000}, {0x936ded0, 0x200}, {0x1, 0x8}, {0xc0, 0x5}, {0x80000001, 0x10001}, {0x2, 0x40}], 0x7, 0x4, 0x0, 0x1, 0x2}}) 11:35:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xf00}, 0x0) 11:35:09 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x1c00}, 0x0) [ 484.319460][T12443] binder: 12439:12443 unknown command 0 [ 484.340896][T12443] binder: 12439:12443 ioctl c0306201 20000440 returned -22 [ 484.362121][T12443] binder_alloc: 12439: binder_alloc_buf, no vma 11:35:09 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @pix_mp={0x2, 0xb3, 0x38415261, 0x1, 0xa, [{0x100, 0x9}, {0x6}, {0x3, 0x80000000}, {0x936ded0, 0x200}, {0x1, 0x8}, {0xc0, 0x5}, {0x80000001, 0x10001}, {0x2, 0x40}], 0x7, 0x4, 0x0, 0x1, 0x2}}) 11:35:09 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0xfffffffffffffffa, 0xcabf, 0x7fffffff, 0xffffffffffffffe1, 0xa27]}, &(0x7f00000005c0)=0x78) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x15) (async) write$P9_RVERSION(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="152019790000e98155d55a198d0fa0aec32072532d00294e66157a8e275437870ad89a15c97bb2527c030000007485fc3e3761c5c1d6f937e916d68b318a05ffb821af2106065dbc710aa72e8d415761ba3e14249a072bff0b0b28fa9c8dc59f2a44707bcf12718391b4248aaaaa9f6fbd73eefbdc2a6c638ec65f9200f873365d94e0b9ed74d20fe85d5238fe6ca22eb221fd93264eaffab7b7caa428d46a441d5c313e526bc3710a99436d1e9bc23810a880d0d36f7c1ee7205a6eed63b2a9ff28ef0f6de7081e96f84460aa5b81cd7686246f5cabe5b48d2245df176f2f38a0a4844f08657584b57a2d73e755f5113dc6bc8a5dfe97000000000000000700b6b40717211367211b4a74d13a39b6010a2e9915ae29519fe53807e4f447bade9cfab76b9e2fe8e4b5dfe823402052a4cc3ebf667a7b147827c3384cb9fcb8a199b32d81e7264c7713ce3c589d7a1fb0ea612adb4f65c0f8d838dbfa2eb9c0e5dba3130c92413d2be16b9c0a2ff61581983bb7654ee260538b5fc1ab1269bd7e5cb3b526083be20c6408dea6cc76b047a1d1982173e93d11c88a42c419a41abb6eca410f98a5ee59407dd65164554d29ae3403b4b15c7e3122"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x53, 0x4, 0x9, 0x2, @local, @local, 0x8, 0x7801, 0x10000, 0x1}}) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_deladdr={0x20, 0x15, 0x800, 0x70bd28, 0x25dfdbfe, {0x2, 0x3f, 0x43, 0xff, r5}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 11:35:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x1f00}, 0x0) [ 484.543693][T12452] binder: 12450:12452 unknown command 0 [ 484.561189][T12452] binder: 12450:12452 ioctl c0306201 20000440 returned -22 11:35:10 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @pix_mp={0x2, 0xb3, 0x38415261, 0x1, 0xa, [{0x100, 0x9}, {0x6}, {0x3, 0x80000000}, {0x936ded0, 0x200}, {0x1, 0x8}, {0xc0, 0x5}, {0x80000001, 0x10001}, {0x2, 0x40}], 0x7, 0x4, 0x0, 0x1, 0x2}}) [ 484.599944][T12452] binder_alloc: 12450: binder_alloc_buf, no vma 11:35:10 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x651e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x2000}, 0x0) 11:35:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) socket$igmp(0x2, 0x3, 0x2) (async) r1 = socket$igmp(0x2, 0x3, 0x2) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0xfffffffffffffffa, 0xcabf, 0x7fffffff, 0xffffffffffffffe1, 0xa27]}, &(0x7f00000005c0)=0x78) (async) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000540)={'broute\x00', 0x0, 0x0, 0x0, [0x6, 0xfffffffffffffffa, 0xcabf, 0x7fffffff, 0xffffffffffffffe1, 0xa27]}, &(0x7f00000005c0)=0x78) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="152019790000e98155d55a198d0fa0aec32072532d00294e66157a8e275437870ad89a15c97bb2527c030000007485fc3e3761c5c1d6f937e916d68b318a05ffb821af2106065dbc710aa72e8d415761ba3e14249a072bff0b0b28fa9c8dc59f2a44707bcf12718391b4248aaaaa9f6fbd73eefbdc2a6c638ec65f9200f873365d94e0b9ed74d20fe85d5238fe6ca22eb221fd93264eaffab7b7caa428d46a441d5c313e526bc3710a99436d1e9bc23810a880d0d36f7c1ee7205a6eed63b2a9ff28ef0f6de7081e96f84460aa5b81cd7686246f5cabe5b48d2245df176f2f38a0a4844f08657584b57a2d73e755f5113dc6bc8a5dfe97000000000000000700b6b40717211367211b4a74d13a39b6010a2e9915ae29519fe53807e4f447bade9cfab76b9e2fe8e4b5dfe823402052a4cc3ebf667a7b147827c3384cb9fcb8a199b32d81e7264c7713ce3c589d7a1fb0ea612adb4f65c0f8d838dbfa2eb9c0e5dba3130c92413d2be16b9c0a2ff61581983bb7654ee260538b5fc1ab1269bd7e5cb3b526083be20c6408dea6cc76b047a1d1982173e93d11c88a42c419a41abb6eca410f98a5ee59407dd65164554d29ae3403b4b15c7e3122"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x53, 0x4, 0x9, 0x2, @local, @local, 0x8, 0x7801, 0x10000, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x53, 0x4, 0x9, 0x2, @local, @local, 0x8, 0x7801, 0x10000, 0x1}}) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_deladdr={0x20, 0x15, 0x800, 0x70bd28, 0x25dfdbfe, {0x2, 0x3f, 0x43, 0xff, r5}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x40) 11:35:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x3f00}, 0x0) [ 484.819939][T12465] binder: 12463:12465 unknown command 0 [ 484.833353][T12465] binder: 12463:12465 ioctl c0306201 20000440 returned -22 11:35:10 executing program 0: ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xff1d, 0x7, 0x4, 0x2}, {0x1, 0x98, 0x3, 0x2}, {0x7f, 0x5, 0x8, 0x3f}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468dced19dede26dddd8f9b6dc8a388641f9d4aab8dcbc6dab679b6ce26af069ceca46e8b99e22dae98320ddcfd7017cb5e25aae1dc469932a7e84bb9a4a2bb1d1c7ec930422a59c7a4ab166e7fff65a2a131c384f076a63e718d1b88ce0f48f4a20df1f6d0ef4b1d071c680eb33d8f1200e4c9a64a42318c36a56af536e7b1bd190918d4cf94aa"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@delchain={0x24, 0x24, 0xf31, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e00)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x8}, {0x14}]}]}]}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000480)={@rand_addr, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0xfb, 0x1, 0x1, 0x76, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7, 0x1, 0x5, 0x8592}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) r15 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r15, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000740)=0xc) r17 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r16, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000006c0)={0x778, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x69}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x4, 0x5, 0x8001}, {0xfff9, 0x4, 0x80, 0x1ff}, {0xffff, 0x4, 0x6, 0x1}, {0x8, 0x20, 0x8f, 0x9}, {0x9, 0x5, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x556}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x778}, 0x1, 0x0, 0x0, 0x81}, 0x20004011) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix={0xffff, 0x2, 0x39555659, 0x7, 0x9, 0x1, 0x9, 0x7, 0x1, 0x8, 0x2, 0x4}}) [ 484.869288][T12465] binder_alloc: 12463: binder_alloc_buf, no vma 11:35:10 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 484.979442][ T28] audit: type=1400 audit(1706355310.518:342): avc: denied { read } for pid=12472 comm="syz-executor.0" name="ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 485.002978][T12476] binder: 12475:12476 unknown command 0 [ 485.010314][T12476] binder: 12475:12476 ioctl c0306201 20000440 returned -22 11:35:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000100)) [ 485.033960][T12476] binder_alloc: 12475: binder_alloc_buf, no vma [ 485.043312][T12474] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.0'. 11:35:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x5865}, 0x0) 11:35:10 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 485.061554][ T28] audit: type=1400 audit(1706355310.518:343): avc: denied { open } for pid=12472 comm="syz-executor.0" path="/dev/ppp" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 11:35:10 executing program 0: ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) (async) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xff1d, 0x7, 0x4, 0x2}, {0x1, 0x98, 0x3, 0x2}, {0x7f, 0x5, 0x8, 0x3f}]}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468dced19dede26dddd8f9b6dc8a388641f9d4aab8dcbc6dab679b6ce26af069ceca46e8b99e22dae98320ddcfd7017cb5e25aae1dc469932a7e84bb9a4a2bb1d1c7ec930422a59c7a4ab166e7fff65a2a131c384f076a63e718d1b88ce0f48f4a20df1f6d0ef4b1d071c680eb33d8f1200e4c9a64a42318c36a56af536e7b1bd190918d4cf94aa"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@delchain={0x24, 0x24, 0xf31, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e00)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x8}, {0x14}]}]}]}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000480)={@rand_addr, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0xfb, 0x1, 0x1, 0x76, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7, 0x1, 0x5, 0x8592}}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) r15 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r15, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000740)=0xc) (async) r17 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r16, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000006c0)={0x778, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x69}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x4, 0x5, 0x8001}, {0xfff9, 0x4, 0x80, 0x1ff}, {0xffff, 0x4, 0x6, 0x1}, {0x8, 0x20, 0x8f, 0x9}, {0x9, 0x5, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x556}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x778}, 0x1, 0x0, 0x0, 0x81}, 0x20004011) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix={0xffff, 0x2, 0x39555659, 0x7, 0x9, 0x1, 0x9, 0x7, 0x1, 0x8, 0x2, 0x4}}) [ 485.156118][ T28] audit: type=1400 audit(1706355310.558:344): avc: denied { ioctl } for pid=12472 comm="syz-executor.0" path="/dev/ppp" dev="devtmpfs" ino=693 ioctlcmd=0x7447 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 11:35:10 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000100)) 11:35:10 executing program 0: ioctl$PPPIOCUNBRIDGECHAN(0xffffffffffffffff, 0x7434) (async) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xff1d, 0x7, 0x4, 0x2}, {0x1, 0x98, 0x3, 0x2}, {0x7f, 0x5, 0x8, 0x3f}]}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r4 = socket(0x10, 0x803, 0x0) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468dced19dede26dddd8f9b6dc8a388641f9d4aab8dcbc6dab679b6ce26af069ceca46e8b99e22dae98320ddcfd7017cb5e25aae1dc469932a7e84bb9a4a2bb1d1c7ec930422a59c7a4ab166e7fff65a2a131c384f076a63e718d1b88ce0f48f4a20df1f6d0ef4b1d071c680eb33d8f1200e4c9a64a42318c36a56af536e7b1bd190918d4cf94aa"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r5, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@delchain={0x24, 0x24, 0xf31, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x0, 0xffe0}}}, 0x24}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e00)=@newlink={0x54, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x8}, {0x14}]}]}]}]}, 0x54}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) (rerun: 32) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000480)={@rand_addr, @multicast2, 0x0}, &(0x7f00000004c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg1\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'ip6gre0\x00', 0x0, 0x2f, 0xfb, 0x1, 0x1, 0x76, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7, 0x1, 0x5, 0x8592}}) (async, rerun: 64) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) (async) r15 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r15, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r15, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000740)=0xc) (async) r17 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="7c02000024000b0f0000000c0000000000000000", @ANYRES32=r16, @ANYBLOB="00000000ffffffff000000000a00010063686f6b650000004c02020014000100000500000000000000000000000000000800030007000000040102"], 0x27c}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f00000006c0)={0x778, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x230, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x69}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1, 0x4, 0x5, 0x8001}, {0xfff9, 0x4, 0x80, 0x1ff}, {0xffff, 0x4, 0x6, 0x1}, {0x8, 0x20, 0x8f, 0x9}, {0x9, 0x5, 0x0, 0x9}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x556}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}]}}]}, 0x778}, 0x1, 0x0, 0x0, 0x81}, 0x20004011) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @pix={0xffff, 0x2, 0x39555659, 0x7, 0x9, 0x1, 0x9, 0x7, 0x1, 0x8, 0x2, 0x4}}) 11:35:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x6000}, 0x0) [ 485.264484][T12482] binder: 12481:12482 unknown command 0 [ 485.290792][T12482] binder: 12481:12482 ioctl c0306201 20000440 returned -22 [ 485.327623][T12482] binder_alloc: 12481: binder_alloc_buf, no vma 11:35:10 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x6558}, 0x0) 11:35:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000100)) 11:35:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf, 0x7, 0x4, 0x800}) 11:35:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x8100}, 0x0) [ 485.537633][T12502] binder: 12499:12502 unknown command 0 [ 485.567129][T12502] binder: 12499:12502 ioctl c0306201 20000440 returned -22 [ 485.617341][T12506] binder_alloc: 12499: binder_alloc_buf, no vma 11:35:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf, 0x7, 0x4, 0x800}) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf, 0x7, 0x4, 0x800}) 11:35:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:11 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) dup(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)) 11:35:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xf000}, 0x0) 11:35:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000000)={0xf, 0x7, 0x4, 0x800}) [ 485.837130][T12518] binder: 12516:12518 unknown command 0 [ 485.864400][T12518] binder: 12516:12518 ioctl c0306201 20000440 returned -22 11:35:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xf101}, 0x0) 11:35:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0xe0ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 485.892724][T12518] binder_alloc: 12516: binder_alloc_buf, no vma 11:35:11 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) dup(r0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)) 11:35:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @sdr={0x563e5068}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x400080, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x19, 0x3, 0x4, 0x4, 0x0, {0x0, 0xea60}, {0x4, 0xb794f4cff6824c32, 0x2, 0x7, 0x80, 0x56, "a0157b79"}, 0x10000, 0x4, {&(0x7f00000001c0)=[{0x9, 0xd211, {r2}, 0x4}, {0x5, 0x9, {}, 0xcf}]}, 0xff, 0x0, r3}) 11:35:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x34000}, 0x0) [ 486.062936][T12530] binder: 12529:12530 unknown command 0 [ 486.082901][T12530] binder: 12529:12530 ioctl c0306201 20000440 returned -22 [ 486.112017][T12530] binder_alloc: 12529: binder_alloc_buf, no vma 11:35:11 executing program 3: r0 = socket$l2tp(0x2, 0x2, 0x73) dup(r0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)) 11:35:11 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @sdr={0x563e5068}}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x400080, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x19, 0x3, 0x4, 0x4, 0x0, {0x0, 0xea60}, {0x4, 0xb794f4cff6824c32, 0x2, 0x7, 0x80, 0x56, "a0157b79"}, 0x10000, 0x4, {&(0x7f00000001c0)=[{0x9, 0xd211, {r2}, 0x4}, {0x5, 0x9, {}, 0xcf}]}, 0xff, 0x0, r3}) 11:35:11 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:11 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x400300}, 0x0) [ 486.326562][T12544] binder: BINDER_SET_CONTEXT_MGR already set [ 486.345643][T12544] binder: 12543:12544 ioctl 4018620d 20000040 returned -16 11:35:11 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @sdr={0x563e5068}}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x400080, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x19, 0x3, 0x4, 0x4, 0x0, {0x0, 0xea60}, {0x4, 0xb794f4cff6824c32, 0x2, 0x7, 0x80, 0x56, "a0157b79"}, 0x10000, 0x4, {&(0x7f00000001c0)=[{0x9, 0xd211, {r2}, 0x4}, {0x5, 0x9, {}, 0xcf}]}, 0xff, 0x0, r3}) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x3, @sdr={0x563e5068}}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) (async) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240), 0x400080, 0x0) (async) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x19, 0x3, 0x4, 0x4, 0x0, {0x0, 0xea60}, {0x4, 0xb794f4cff6824c32, 0x2, 0x7, 0x80, 0x56, "a0157b79"}, 0x10000, 0x4, {&(0x7f00000001c0)=[{0x9, 0xd211, {r2}, 0x4}, {0x5, 0x9, {}, 0xcf}]}, 0xff, 0x0, r3}) (async) [ 486.379784][T12544] binder: 12543:12544 unknown command 0 [ 486.388168][T12544] binder: 12543:12544 ioctl c0306201 20000440 returned -22 11:35:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xf0ffff}, 0x0) 11:35:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:12 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8) fdatasync(r0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) 11:35:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x1000000}, 0x0) 11:35:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 486.625130][T12559] binder: 12557:12559 unknown command 0 [ 486.658977][T12559] binder: 12557:12559 ioctl c0306201 20000440 returned -22 11:35:12 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8) fdatasync(r0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async, rerun: 32) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) (rerun: 32) [ 486.686479][T12565] binder_alloc_mmap_handler: 9 callbacks suppressed [ 486.686500][T12565] binder_alloc: binder_alloc_mmap_handler: 12557 20bfe000-20ffe000 already mapped failed -16 11:35:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x2000000}, 0x0) [ 486.745132][T12559] binder_alloc: 12557: binder_alloc_buf, no vma 11:35:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x7f, 0xff}, 'port1\x00', 0x88c3c72206258f41, 0x340a, 0xdb, 0x7, 0x9, 0x2, 0x9881, 0x0, 0x7, 0x7}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x2]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x3000000}, 0x0) 11:35:12 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000180)={[0x1]}, 0x8) fdatasync(r0) (async) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000000000)) [ 486.948256][T12577] binder: 12575:12577 unknown command 0 [ 486.963236][T12577] binder: 12575:12577 ioctl c0306201 20000440 returned -22 [ 486.986979][T12577] binder_alloc: binder_alloc_mmap_handler: 12575 20bfe000-20ffe000 already mapped failed -16 11:35:12 executing program 0: r0 = epoll_create(0x10001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x1e}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x9, @sliced={0x1, [0x9812, 0x0, 0x40, 0x3, 0x100, 0x8, 0x6, 0x40, 0x0, 0x1000, 0x7ce, 0x6, 0x2, 0x100, 0x0, 0xffff, 0xd7ad, 0x4, 0x6, 0xfffc, 0x7, 0x90fe, 0x4, 0x7, 0xd4c1, 0x0, 0x20, 0x0, 0x9, 0x3, 0x800, 0x4, 0x8001, 0x1, 0x2, 0x1, 0x4, 0x1, 0x8000, 0x8, 0xff, 0x9, 0x6, 0x195f, 0xf001, 0xffff, 0xecbe, 0x7], 0x9}}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x3ec1040800, 0x6) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000001c0)={0x422b, 0x0, '\x00', {0x0, @bt={0x10001, 0xe59b, 0x1, 0x0, 0x2, 0x81, 0x1, 0x0, 0x10001, 0x3, 0xc00, 0x3f, 0x3, 0x80, 0x7, 0x1e, {0x8001, 0x87}, 0x20, 0x4}}}) 11:35:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x7f, 0xff}, 'port1\x00', 0x88c3c72206258f41, 0x340a, 0xdb, 0x7, 0x9, 0x2, 0x9881, 0x0, 0x7, 0x7}) (async, rerun: 64) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x2]}}], 0x1c) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x4000000}, 0x0) 11:35:12 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:12 executing program 0: r0 = epoll_create(0x10001) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x1e}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x9, @sliced={0x1, [0x9812, 0x0, 0x40, 0x3, 0x100, 0x8, 0x6, 0x40, 0x0, 0x1000, 0x7ce, 0x6, 0x2, 0x100, 0x0, 0xffff, 0xd7ad, 0x4, 0x6, 0xfffc, 0x7, 0x90fe, 0x4, 0x7, 0xd4c1, 0x0, 0x20, 0x0, 0x9, 0x3, 0x800, 0x4, 0x8001, 0x1, 0x2, 0x1, 0x4, 0x1, 0x8000, 0x8, 0xff, 0x9, 0x6, 0x195f, 0xf001, 0xffff, 0xecbe, 0x7], 0x9}}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x3ec1040800, 0x6) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000001c0)={0x422b, 0x0, '\x00', {0x0, @bt={0x10001, 0xe59b, 0x1, 0x0, 0x2, 0x81, 0x1, 0x0, 0x10001, 0x3, 0xc00, 0x3f, 0x3, 0x80, 0x7, 0x1e, {0x8001, 0x87}, 0x20, 0x4}}}) epoll_create(0x10001) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x1e}) (async) syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) (async) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x9, @sliced={0x1, [0x9812, 0x0, 0x40, 0x3, 0x100, 0x8, 0x6, 0x40, 0x0, 0x1000, 0x7ce, 0x6, 0x2, 0x100, 0x0, 0xffff, 0xd7ad, 0x4, 0x6, 0xfffc, 0x7, 0x90fe, 0x4, 0x7, 0xd4c1, 0x0, 0x20, 0x0, 0x9, 0x3, 0x800, 0x4, 0x8001, 0x1, 0x2, 0x1, 0x4, 0x1, 0x8000, 0x8, 0xff, 0x9, 0x6, 0x195f, 0xf001, 0xffff, 0xecbe, 0x7], 0x9}}) (async) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x3ec1040800, 0x6) (async) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000001c0)={0x422b, 0x0, '\x00', {0x0, @bt={0x10001, 0xe59b, 0x1, 0x0, 0x2, 0x81, 0x1, 0x0, 0x10001, 0x3, 0xc00, 0x3f, 0x3, 0x80, 0x7, 0x1e, {0x8001, 0x87}, 0x20, 0x4}}}) (async) 11:35:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x5000000}, 0x0) 11:35:12 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000100)={{0x7f, 0xff}, 'port1\x00', 0x88c3c72206258f41, 0x340a, 0xdb, 0x7, 0x9, 0x2, 0x9881, 0x0, 0x7, 0x7}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x2]}}], 0x1c) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x2]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) [ 487.290826][T12593] binder: 12588:12593 unknown command 0 11:35:12 executing program 0: r0 = epoll_create(0x10001) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000180)={0x1e}) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x9, @sliced={0x1, [0x9812, 0x0, 0x40, 0x3, 0x100, 0x8, 0x6, 0x40, 0x0, 0x1000, 0x7ce, 0x6, 0x2, 0x100, 0x0, 0xffff, 0xd7ad, 0x4, 0x6, 0xfffc, 0x7, 0x90fe, 0x4, 0x7, 0xd4c1, 0x0, 0x20, 0x0, 0x9, 0x3, 0x800, 0x4, 0x8001, 0x1, 0x2, 0x1, 0x4, 0x1, 0x8000, 0x8, 0xff, 0x9, 0x6, 0x195f, 0xf001, 0xffff, 0xecbe, 0x7], 0x9}}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x3ec1040800, 0x6) (async) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x3ec1040800, 0x6) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f00000001c0)={0x422b, 0x0, '\x00', {0x0, @bt={0x10001, 0xe59b, 0x1, 0x0, 0x2, 0x81, 0x1, 0x0, 0x10001, 0x3, 0xc00, 0x3f, 0x3, 0x80, 0x7, 0x1e, {0x8001, 0x87}, 0x20, 0x4}}}) 11:35:12 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x6000000}, 0x0) [ 487.333520][T12593] binder: 12588:12593 ioctl c0306201 20000440 returned -22 [ 487.343532][T12601] binder_alloc: binder_alloc_mmap_handler: 12588 20bfe000-20ffe000 already mapped failed -16 11:35:13 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x7, 0x1, 0x1, 'queue0\x00', 0x8000}) 11:35:13 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 11:35:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0x8001, 0x7ff}}) 11:35:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x7000000}, 0x0) [ 487.518645][ T29] INFO: task kworker/0:2:922 blocked for more than 143 seconds. [ 487.526828][ T29] Not tainted 6.8.0-rc1-syzkaller-00286-g168174d78157 #0 11:35:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) (async) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0x8001, 0x7ff}}) [ 487.568497][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.577492][ T29] task:kworker/0:2 state:D stack:23664 pid:922 tgid:922 ppid:2 flags:0x00004000 [ 487.587891][ T29] Workqueue: usb_hub_wq hub_event [ 487.593031][ T29] Call Trace: [ 487.595782][T12612] binder: BINDER_SET_CONTEXT_MGR already set [ 487.596319][ T29] [ 487.596350][ T29] __schedule+0xf12/0x5c00 [ 487.612261][ T29] ? print_usage_bug.part.0+0x550/0x550 [ 487.617876][ T29] ? io_schedule_timeout+0x150/0x150 [ 487.623310][ T29] ? schedule+0x1fc/0x270 [ 487.627699][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 487.633214][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.640371][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 487.645629][ T29] schedule+0xe9/0x270 [ 487.650090][ T29] usb_kill_urb.part.0+0x1c6/0x250 [ 487.655251][ T29] ? usb_anchor_suspend_wakeups+0x40/0x40 [ 487.667646][ T29] ? prepare_to_swait_exclusive+0x240/0x240 [ 487.670550][T12612] binder: 12611:12612 ioctl 4018620d 20000040 returned -16 [ 487.678177][T12616] binder: 12611:12616 unknown command 0 [ 487.697665][ T29] ? preempt_count_sub+0x160/0x160 [ 487.709926][ T29] usb_kill_urb+0x83/0xa0 11:35:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x8000000}, 0x0) [ 487.715596][ T29] usb_start_wait_urb+0x251/0x4c0 [ 487.724526][T12616] binder: 12611:12616 ioctl c0306201 20000440 returned -22 [ 487.740274][ T29] ? usb_api_blocking_completion+0xa0/0xa0 [ 487.740926][T12619] binder_alloc: binder_alloc_mmap_handler: 12611 20bfe000-20ffe000 already mapped failed -16 11:35:13 executing program 0: syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sdr={0x563e5068}}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0x8001, 0x7ff}}) [ 487.788541][ T29] usb_control_msg+0x327/0x4a0 [ 487.793413][ T29] ? usb_start_wait_urb+0x4c0/0x4c0 [ 487.815453][ T29] ? hub_resume+0x3e0/0x3e0 [ 487.834817][ T29] get_bMaxPacketSize0.constprop.0+0xa5/0x1c0 [ 487.845830][ T29] hub_port_init+0x68c/0x39e0 [ 487.878521][ T29] hub_event+0x2b61/0x4e10 [ 487.883050][ T29] ? hub_port_debounce+0x3d0/0x3d0 11:35:13 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x7, 0x1, 0x1, 'queue0\x00', 0x8000}) 11:35:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x9000000}, 0x0) [ 487.888220][ T29] ? check_irq_usage+0x13f1/0x1490 11:35:13 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 487.938522][ T29] ? lock_sync+0x190/0x190 [ 487.943046][ T29] ? reacquire_held_locks+0x4c0/0x4c0 [ 487.964404][ T29] process_one_work+0x886/0x15d0 [ 487.975708][ T29] ? hcd_died_work+0x60/0x60 11:35:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, '\xaa\xaa\xaa\xaa\xaa'}], 0xa, "4eaed0ae14556489c6f952f29a32df2affbbaa74b9a0e1b55e39f239891550d69ad4edca307f22b11930ce48186be361a76a1ecd3d258a771483f538b6f74123f868bad4a84f4060b365da588046caa012ce9435289934c96d758652bedc582b621f741ed0b58e5d7a69eb921ec73b0d5d0b3dc31fc1c0ec02e943616b4ab69f2862a59a382acb5538a1221138fed2a2c8bc548bf8891dcbdee8002443b523901574d2a2f608122ae4aad4b041d913af28bbbbadbfe0f806fd24d6"}, 0xcc) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001940)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002940)=""/125, 0x7d}, {&(0x7f00000029c0)=""/232, 0xe8}], 0x2, &(0x7f0000002ac0)=""/101, 0x65}, 0xffff}, {{&(0x7f0000002b40)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000002c00)=""/116, 0x74}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x3}, 0x200}], 0x3, 0x40000002, &(0x7f0000003d80)={0x77359400}) sendfile(r2, r1, 0x0, 0xffefffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x7fb0, 0xa, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x2, 0x1, 0x20, 0x20, 0xf5, 0x0, "350c1b94"}, 0x5, 0x4, {}, 0x40, 0x0, r1}) [ 487.986379][ T29] ? workqueue_congested+0x300/0x300 [ 487.997825][ T29] ? assign_work+0x1a0/0x250 [ 488.018540][ T29] worker_thread+0x8b9/0x1290 [ 488.023304][ T29] ? __kthread_parkme+0x14b/0x220 11:35:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xa000000}, 0x0) [ 488.028382][ T29] ? process_one_work+0x15d0/0x15d0 [ 488.083798][ T29] kthread+0x2c6/0x3a0 [ 488.101903][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 488.122120][T12633] binder: 12632:12633 unknown command 0 [ 488.122881][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 488.150231][T12633] binder: 12632:12633 ioctl c0306201 20000440 returned -22 [ 488.175172][T12633] binder_alloc: binder_alloc_mmap_handler: 12632 20bfe000-20ffe000 already mapped failed -16 11:35:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xc000000}, 0x0) [ 488.268554][ T29] ret_from_fork+0x45/0x80 [ 488.273103][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 488.280540][ T29] ret_from_fork_asm+0x11/0x20 [ 488.285489][ T29] [ 488.292211][ T29] [ 488.292211][ T29] Showing all locks held in the system: [ 488.343200][ T29] 1 lock held by khungtaskd/29: [ 488.357149][ T29] #0: ffffffff8d1a9120 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 11:35:13 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000100)={0x7, 0x1, 0x1, 'queue0\x00', 0x8000}) 11:35:13 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 488.375003][ T28] audit: type=1400 audit(1706355313.848:345): avc: denied { create } for pid=12636 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 488.407171][ T29] 5 locks held by kworker/0:2/922: [ 488.415637][ T29] #0: ffff888015e82538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x789/0x15d0 11:35:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xe000000}, 0x0) [ 488.452247][ T29] #1: ffffc9000444fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7eb/0x15d0 [ 488.468652][ T28] audit: type=1400 audit(1706355313.868:346): avc: denied { connect } for pid=12636 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 488.518643][ T29] #2: ffff888022364190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 488.545409][ T28] audit: type=1400 audit(1706355313.958:347): avc: denied { read } for pid=12636 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 488.577205][ T29] #3: ffff888022367510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x27fe/0x4e10 [ 488.587903][T12649] binder: 12647:12649 unknown command 0 [ 488.597906][T12649] binder: 12647:12649 ioctl c0306201 20000440 returned -22 [ 488.614140][ T29] #4: ffff888022161178 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x2827/0x4e10 [ 488.635703][T12649] binder_alloc: binder_alloc_mmap_handler: 12647 20bfe000-20ffe000 already mapped failed -16 [ 488.654564][ T28] audit: type=1400 audit(1706355314.078:348): avc: denied { write } for pid=12636 comm="syz-executor.0" path="socket:[30703]" dev="sockfs" ino=30703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 11:35:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0xf000000}, 0x0) [ 488.684625][ T29] 2 locks held by getty/4800: [ 488.698384][ T29] #0: ffff88802c9080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 488.748926][ T29] #1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc6/0x1490 [ 488.778503][ T29] 2 locks held by syz-fuzzer/5042: [ 488.787207][ T29] 4 locks held by syz-executor.4/5078: 11:35:14 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x1, 0xa, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 488.799044][ T29] 3 locks held by syz-executor.0/8007: [ 488.817370][ T29] 3 locks held by syz-executor.0/12638: [ 488.829891][ T29] 1 lock held by syz-executor.0/12640: [ 488.857535][ T29] #0: ffff88823bd520c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x170 11:35:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c00}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x10000000}, 0x0) [ 488.908891][ T29] 1 lock held by syz-executor.0/12641: [ 488.914425][ T29] 1 lock held by syz-executor.0/12645: [ 488.934238][ T29] 2 locks held by syz-executor.2/12658: [ 488.959170][T12659] binder: BINDER_SET_CONTEXT_MGR already set [ 488.966303][ T29] #0: ffff8880b993cc98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 488.980345][T12659] binder: 12658:12659 ioctl 4018620d 20000040 returned -16 [ 489.003559][T12659] binder: 12658:12659 unknown command 0 11:35:14 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1e1c81) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r1 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000500)=0x21d6edc8) r3 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r3, &(0x7f0000000280)={&(0x7f00000000c0), 0x10, &(0x7f0000000240)={&(0x7f0000000100)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "d97a65f5e8434c7b8b69ba8a57e425254fd63598e9f636aab631b6f7844a3de053e71b5a2ab85958ad6fcac5842f63576eb0e29c728c497a4755f579fe2c7922"}, 0x48}, 0x1, 0x0, 0x0, 0xc024}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8880) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000080), 0x4) r5 = socket$igmp6(0xa, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000540)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x6, 0x3}) r6 = dup(0xffffffffffffffff) getpid() recvfrom(r5, &(0x7f00000018c0)=""/4096, 0x1000, 0x40000000, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x8, 0x1, 0x7, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x446b59cc, 0x9cd, 0x1, 'queue0\x00', 0x647}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000100)={{0x8, 0x6}, 'port0\x00', 0x41, 0x0, 0x4, 0x2, 0x0, 0x2, 0x1f, 0x0, 0x4, 0x7}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x186940, 0x202, 0x12}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x1, 0xfffffff9, 0x1, 'queue0\x00', 0xfffffff3}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)) 11:35:14 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, '\xaa\xaa\xaa\xaa\xaa'}], 0xa, "4eaed0ae14556489c6f952f29a32df2affbbaa74b9a0e1b55e39f239891550d69ad4edca307f22b11930ce48186be361a76a1ecd3d258a771483f538b6f74123f868bad4a84f4060b365da588046caa012ce9435289934c96d758652bedc582b621f741ed0b58e5d7a69eb921ec73b0d5d0b3dc31fc1c0ec02e943616b4ab69f2862a59a382acb5538a1221138fed2a2c8bc548bf8891dcbdee8002443b523901574d2a2f608122ae4aad4b041d913af28bbbbadbfe0f806fd24d6"}, 0xcc) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001940)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002940)=""/125, 0x7d}, {&(0x7f00000029c0)=""/232, 0xe8}], 0x2, &(0x7f0000002ac0)=""/101, 0x65}, 0xffff}, {{&(0x7f0000002b40)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000002c00)=""/116, 0x74}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x3}, 0x200}], 0x3, 0x40000002, &(0x7f0000003d80)={0x77359400}) sendfile(r2, r1, 0x0, 0xffefffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x7fb0, 0xa, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x2, 0x1, 0x20, 0x20, 0xf5, 0x0, "350c1b94"}, 0x5, 0x4, {}, 0x40, 0x0, r1}) syz_open_dev$vbi(&(0x7f0000000040), 0x1, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) (async) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, '\xaa\xaa\xaa\xaa\xaa'}], 0xa, "4eaed0ae14556489c6f952f29a32df2affbbaa74b9a0e1b55e39f239891550d69ad4edca307f22b11930ce48186be361a76a1ecd3d258a771483f538b6f74123f868bad4a84f4060b365da588046caa012ce9435289934c96d758652bedc582b621f741ed0b58e5d7a69eb921ec73b0d5d0b3dc31fc1c0ec02e943616b4ab69f2862a59a382acb5538a1221138fed2a2c8bc548bf8891dcbdee8002443b523901574d2a2f608122ae4aad4b041d913af28bbbbadbfe0f806fd24d6"}, 0xcc) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) recvmmsg(r2, &(0x7f0000003cc0)=[{{&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f00000018c0), 0x0, &(0x7f0000001940)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002940)=""/125, 0x7d}, {&(0x7f00000029c0)=""/232, 0xe8}], 0x2, &(0x7f0000002ac0)=""/101, 0x65}, 0xffff}, {{&(0x7f0000002b40)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000002c00)=""/116, 0x74}, {&(0x7f0000002c80)=""/4096, 0x1000}], 0x3}, 0x200}], 0x3, 0x40000002, &(0x7f0000003d80)={0x77359400}) (async) sendfile(r2, r1, 0x0, 0xffefffff) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000080)={0x7fb0, 0xa, 0x4, 0x40, 0x3, {0x0, 0xea60}, {0x2, 0x1, 0x20, 0x20, 0xf5, 0x0, "350c1b94"}, 0x5, 0x4, {}, 0x40, 0x0, r1}) (async) [ 489.007829][ T29] #1: ffff8880b9928a08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x2d9/0x900 [ 489.023014][T12659] binder: 12658:12659 ioctl c0306201 20000440 returned -22 [ 489.038671][ T29] [ 489.050811][ T29] ============================================= [ 489.050811][ T29] [ 489.076218][ T29] NMI backtrace for cpu 0 [ 489.079205][T12659] binder_alloc: binder_alloc_mmap_handler: 12658 20bfe000-20ffe000 already mapped failed -16 [ 489.080593][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc1-syzkaller-00286-g168174d78157 #0 [ 489.080622][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 489.080636][ T29] Call Trace: [ 489.114074][ T29] [ 489.117043][ T29] dump_stack_lvl+0xd9/0x1b0 [ 489.121774][ T29] nmi_cpu_backtrace+0x277/0x390 [ 489.126764][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 489.132014][ T29] nmi_trigger_cpumask_backtrace+0x299/0x300 [ 489.138135][ T29] watchdog+0xf87/0x1210 [ 489.142422][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 489.148969][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 489.154219][ T29] ? __kthread_parkme+0x14b/0x220 [ 489.159375][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 489.165408][ T29] kthread+0x2c6/0x3a0 [ 489.169517][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.174755][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 489.180429][ T29] ret_from_fork+0x45/0x80 [ 489.184890][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 489.190561][ T29] ret_from_fork_asm+0x11/0x20 [ 489.195380][ T29] [ 489.200055][ T29] Sending NMI from CPU 0 to CPUs 1: [ 489.205309][ C1] NMI backtrace for cpu 1 [ 489.205322][ C1] CPU: 1 PID: 8007 Comm: syz-executor.0 Not tainted 6.8.0-rc1-syzkaller-00286-g168174d78157 #0 [ 489.205346][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 489.205359][ C1] RIP: 0010:unwind_next_frame+0x1a4f/0x2390 [ 489.205389][ C1] Code: 49 8d 7c 24 02 48 ba 00 00 00 00 00 fc ff df 48 89 f8 48 c1 e8 03 0f b6 0c 10 49 8d 44 24 03 48 89 c6 48 c1 ee 03 0f b6 14 16 <48> 89 fe 83 e6 07 40 38 f1 40 0f 9e c6 84 c9 0f 95 c1 40 84 ce 0f [ 489.205410][ C1] RSP: 0018:ffffc90009807490 EFLAGS: 00000a02 [ 489.205427][ C1] RAX: ffffffff8fc4e5f9 RBX: ffffc90009807568 RCX: 0000000000000000 [ 489.205442][ C1] RDX: 0000000000000000 RSI: 1ffffffff1f89cbf RDI: ffffffff8fc4e5f8 [ 489.205456][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000004 [ 489.205470][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8fc4e5f6 [ 489.205483][ C1] R13: ffffc90009807560 R14: 0000000000000001 R15: 0000000000000001 [ 489.205497][ C1] FS: 0000555555d75480(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 489.205519][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 489.205534][ C1] CR2: 0000000020001380 CR3: 000000002a65e000 CR4: 00000000003506f0 [ 489.205555][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 489.205568][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 489.205582][ C1] Call Trace: [ 489.205589][ C1] [ 489.205596][ C1] ? show_regs+0x8f/0xa0 [ 489.205623][ C1] ? nmi_cpu_backtrace+0x1d4/0x390 [ 489.205651][ C1] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 489.205684][ C1] ? nmi_handle+0x1a6/0x570 [ 489.205711][ C1] ? unwind_next_frame+0x1a4f/0x2390 [ 489.205731][ C1] ? default_do_nmi+0x6a/0x160 [ 489.205753][ C1] ? exc_nmi+0x186/0x200 [ 489.205771][ C1] ? end_repeat_nmi+0xf/0x2a [ 489.205802][ C1] ? unwind_next_frame+0x1a4f/0x2390 [ 489.205822][ C1] ? unwind_next_frame+0x1a4f/0x2390 [ 489.205843][ C1] ? unwind_next_frame+0x1a4f/0x2390 [ 489.205863][ C1] [ 489.205869][ C1] [ 489.205876][ C1] ? __unwind_start+0x6b4/0x880 [ 489.205899][ C1] __unwind_start+0x5a4/0x880 [ 489.205920][ C1] ? write_profile+0x450/0x450 [ 489.205941][ C1] arch_stack_walk+0xaf/0x170 [ 489.205965][ C1] ? arch_stack_walk+0xaf/0x170 [ 489.205987][ C1] stack_trace_save+0x96/0xd0 [ 489.206008][ C1] ? filter_irq_stacks+0x90/0x90 [ 489.206030][ C1] save_stack+0x160/0x1f0 [ 489.206055][ C1] ? register_early_stack+0xd0/0xd0 [ 489.206077][ C1] ? lock_sync+0x190/0x190 [ 489.206112][ C1] __reset_page_owner+0x51/0x2e0 [ 489.206135][ C1] ? rcu_is_watching+0x12/0xb0 [ 489.206160][ C1] free_unref_page_prepare+0x51f/0xb10 [ 489.206187][ C1] ? __mem_cgroup_uncharge_list+0x116/0x170 [ 489.206209][ C1] free_unref_page_list+0xe6/0xb40 [ 489.206236][ C1] ? _raw_spin_unlock_irqrestore+0x4e/0x70 [ 489.206268][ C1] release_pages+0x32a/0x14f0 [ 489.206301][ C1] ? put_pages_list+0x570/0x570 [ 489.206331][ C1] ? filemap_remove_folio+0x210/0x210 [ 489.206365][ C1] __folio_batch_release+0x77/0xe0 [ 489.206397][ C1] truncate_inode_pages_range+0x33e/0xf00 [ 489.206433][ C1] ? truncate_inode_partial_folio+0x740/0x740 [ 489.206467][ C1] ? hlock_class+0x4e/0x130 [ 489.206499][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 489.206526][ C1] ? lockdep_hardirqs_on+0x7d/0x110 [ 489.206554][ C1] ext4_evict_inode+0x2c7/0x1a40 [ 489.206584][ C1] ? evict+0x2b7/0x6b0 [ 489.206609][ C1] ? reacquire_held_locks+0x4c0/0x4c0 [ 489.206639][ C1] ? update_triggers+0x580/0x580 [ 489.206670][ C1] ? ext4_da_write_begin+0x8c0/0x8c0 [ 489.206698][ C1] ? spin_bug+0x1d0/0x1d0 [ 489.206716][ C1] ? ext4_da_write_begin+0x8c0/0x8c0 [ 489.206744][ C1] evict+0x2ed/0x6b0 [ 489.206770][ C1] iput.part.0+0x560/0x7b0 [ 489.206796][ C1] ? ext4_nfs_commit_metadata+0x280/0x280 [ 489.206830][ C1] iput+0x5c/0x80 [ 489.206855][ C1] do_unlinkat+0x60f/0x740 [ 489.206883][ C1] ? __ia32_sys_rmdir+0x110/0x110 [ 489.206909][ C1] ? __check_object_size+0x323/0x730 [ 489.206936][ C1] ? getname_flags.part.0+0x1e2/0x4e0 [ 489.206960][ C1] __x64_sys_unlink+0xc8/0x110 [ 489.206987][ C1] do_syscall_64+0xd3/0x250 [ 489.207020][ C1] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 489.207047][ C1] RIP: 0033:0x7fe82a07c557 [ 489.207063][ C1] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 489.207083][ C1] RSP: 002b:00007fffea7aae38 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 489.207102][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe82a07c557 [ 489.207116][ C1] RDX: 00007fffea7aae60 RSI: 00007fffea7aaef0 RDI: 00007fffea7aaef0 [ 489.207131][ C1] RBP: 00007fffea7aaef0 R08: 0000000000000000 R09: 0000000000000000 [ 489.207144][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fffea7abfb0 [ 489.207157][ C1] R13: 00007fe82a0c83b9 R14: 0000000000077280 R15: 0000000000000009 [ 489.207174][ C1] [ 490.038538][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 490.045732][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.8.0-rc1-syzkaller-00286-g168174d78157 #0 [ 490.055582][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 490.065676][ T29] Call Trace: [ 490.068980][ T29] [ 490.071946][ T29] dump_stack_lvl+0xd9/0x1b0 [ 490.076594][ T29] panic+0x6dc/0x790 [ 490.080538][ T29] ? panic_smp_self_stop+0xa0/0xa0 [ 490.085693][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 490.091111][ T29] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 490.096339][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 490.101825][ T29] ? watchdog+0xd3e/0x1210 [ 490.106261][ T29] ? watchdog+0xd31/0x1210 [ 490.110691][ T29] watchdog+0xd4f/0x1210 [ 490.114975][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 490.120974][ T29] ? lockdep_hardirqs_on+0x7d/0x110 [ 490.126188][ T29] ? __kthread_parkme+0x14b/0x220 [ 490.131235][ T29] ? proc_dohung_task_timeout_secs+0x90/0x90 [ 490.137233][ T29] kthread+0x2c6/0x3a0 [ 490.141311][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 490.146528][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 490.152191][ T29] ret_from_fork+0x45/0x80 [ 490.156622][ T29] ? kthread_complete_and_exit+0x40/0x40 [ 490.162354][ T29] ret_from_fork_asm+0x11/0x20 [ 490.167144][ T29] [ 490.170355][ T29] Kernel Offset: disabled [ 490.174678][ T29] Rebooting in 86400 seconds..