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", 0x1000, 0x6}, {&(0x7f00000010c0)="888dc68f7c8b2cd4648fde48bfc5a76f162aa1562897d44a216442af2cc5b262615c52499fd1f4cbe9c4abe17cf1a78704aaec7a77fd49c3aa18f9dc71c935fd49abc2bd306d542eff3e2f4e", 0x4c, 0x8}, {&(0x7f0000001140)="2b2567ba96d91c6b655e32eb8e0a460bb7b34bf8d3294385bebf6e88b6e9fe80cb4614d5a906e0f16e378dc1b1e7dcfacea047a8fd23c0e3809580ff7b036f9fc8e9af5cf04ee7f1498a06fd65d6783a07a505b58f130eb1631ec2f8236a20ccb5baaac12845b621019fac", 0x6b, 0x1}], 0x10, &(0x7f0000001440)={[{@nouser_xattr='nouser_xattr'}, {@quota='quota'}, {@resuid={'resuid', 0x3d, r0}}, {@grpjquota={'grpjquota', 0x3d, '/dev/binder#\x00'}}, {@acl='acl'}, {@fsync_mode_posix='fsync_mode=posix'}], [{@hash='hash'}, {@euid_eq={'euid', 0x3d, r1}}]}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) eventfd(0x78) clone(0x4100000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r2, 0x8000000) 12:46:09 executing program 3: getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e) getpeername(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000100)=0x80) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x1}, 0x28, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'icmp\x00'}, &(0x7f0000000140)=0x1e) 12:46:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="bac599547c1e78344f0000000000000000000000012295c18f101e282ef73f7119bdd1412728182a65414aebfa58dcfa37f527b6c063ad7856f58249c681fd19180b92fefb0d65b1f85ea2d7cc286df7675176e28555bba645ba24aa1521375e1152de5932ae3319306e0bfd5240616ce7e1a53f1dae9994e93d3e9646232bd01fc7ba4ce339f135813d5ff18b835ce1027300c6f994c3b0b2c873cfea1c6561f028d60d95c9bb5b1f8e6848c9ae3302d32bcef501663e497b51edde385853f11600271e02af38300f9f0136b9c1b8d8e69fab98b94f01c54867fb530600a5ad7efbca9c95e38020747c4a1a5ef40ca7041b1ec76e0b27deb319b9ba7de582a1457b5cbfef2d4198930ea10bd7f87ea736161cc998880c8e53a04db9d2e9040b844bc0958f1bdbf9f60e7d23add5c09829310bc51fad921067b342eeba2c04085ad9809c11dc57ffcd260b74e4eaeb1e6ce354d75c290d1a7cad06b02d90fa24f3667ae85d6d7a1eba2f6cef6e6d55e9aa8380d512c384aa20559563cead1945d2542941f715e2d3ce9e5f7d12fc"], 0x14) fallocate(r2, 0x0, 0x0, 0x2000002) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) r4 = openat$cgroup_ro(r0, &(0x7f0000000740)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000780)=0xe1, 0x4) syz_open_procfs(r3, &(0x7f0000000080)='net/snmp\x00') [ 419.199753] input: syz0 as /devices/virtual/input/input1639 [ 419.213115] input: syz0 as /devices/virtual/input/input1640 [ 419.222540] binder: 24283:24297 unknown command 0 [ 419.232245] binder: 24283:24297 ioctl c0306201 20012000 returned -22 12:46:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000, 0x9, 0x100000000, 0x4, 0xfffffffffffeffff, 0x715, 0x2, 0x1], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:09 executing program 3: fstat(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r0, 0x3f) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000040)=0x1e) [ 419.331571] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x57cc2efb) [ 419.336876] binder: 24289:24322 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 419.382981] binder: binder_mmap: 24305 20ffa000-20ffe000 bad vm_flags failed -1 [ 419.389414] input: syz0 as /devices/virtual/input/input1641 [ 419.393066] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 419.409111] F2FS-fs (loop5): Unable to read 2th superblock [ 419.416208] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x57cc2efb) [ 419.416897] input: syz0 as /devices/virtual/input/input1642 12:46:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 419.426083] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 419.447574] F2FS-fs (loop5): Unable to read 2th superblock 12:46:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000, 0x9, 0x100000000, 0x4, 0xfffffffffffeffff, 0x715, 0x2], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 419.482027] binder: binder_mmap: 24305 20ffa000-20ffe000 bad vm_flags failed -1 [ 419.484402] binder: 24311:24332 IncRefs 0 refcount change on invalid ref 0 ret -22 12:46:09 executing program 3: pipe2(&(0x7f0000000000), 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) 12:46:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x6102000ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="346c244bd3913511e8e30cd2ffe5812f7cad3c0ccee04237fc706f482df574bdf20b5ee1f07ab82a6711c65db947aa88c8cf31eb543f58ddd5b3a582468ead134e3dc744bbd47a86b5b82f7a8466dbb9f8f0dfb42459ba8b9885db8071e32cdd0f56dd5927412b65be3fdbd0cdc2145c0a05c24f8593f3304ef00c9cd7131eb6f19a03dcf017207d685b0a20afcc91663763ea274f47fc8d64092ab568188229a919b992cefbc541ea3ad8cf51", 0xad, 0xfffffffffffffffb) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r3 = getegid() keyctl$chown(0x4, r1, r2, r3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 419.612277] input: syz0 as /devices/virtual/input/input1643 [ 419.615876] input: syz0 as /devices/virtual/input/input1644 [ 419.640298] binder: binder_mmap: 24352 20ffc000-20ffd000 bad vm_flags failed -1 12:46:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) [ 419.714576] binder: binder_mmap: 24370 20ffc000-20ffd000 bad vm_flags failed -1 12:46:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="60188fc3174ebb6550ce403edd8a6bf7ffaafa2099b946b0f2dfdae0cad706be07be2466e3e9c214404912155db3b65dc20b815ce5efb3f0c5bf2ebe6593726ea71bcd0fa5c336007899b771ed6579d21503f5cbc7d8dc2b32daaa961c861a864e198f5b73a98b15832312a58ec7b264f1913d1b4fd78c91220eafdabd649fd7b6041360f3cb3a2ac2a636ad7a7c0d50cf7f307a750395fdc63c7a5bd41d59600174368d74c1f4a3af846a22dcefb8c9250f9f2c2648d00b75592263e79b8502131915ac546e952e6a344295d86bf1787cf57ccf61b1de85233a8168a8c2e5f1b71c6ba79c98e1a4c280b885068dc17185e56e404b91926df7681888c2099333") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in6, @in=@loopback}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) 12:46:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000, 0x9, 0x100000000, 0x4, 0xfffffffffffeffff, 0x715], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = getpid() sched_setparam(r1, &(0x7f0000000000)=0x2) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000100)={'HL\x00'}, &(0x7f00000000c0)=0xfffffffffffffefb) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0}, &(0x7f00000007c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000900)=0xe8) getresgid(&(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000a00)=0x0) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)=0x0) r8 = gettid() fstat(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getpgrp(0x0) getresuid(&(0x7f0000000d00)=0x0, &(0x7f0000000d40), &(0x7f0000000d80)) r13 = getegid() sendmsg$unix(r1, &(0x7f0000000f00)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000700)=[{&(0x7f00000001c0)="9e843408436cb20da3f3458480a7fe36baf65c4ed5893fc50ad3cb6e239cc123435bc04df0d935fc2760104f29e3d26ccb5df387da23c76a5af83b2805b710ad2b8b9f4472fd0249f5cdcbf7d02e49e253d4fd8d648f2a6076caa32a2387253c311767d107fa3fb4edc3423fb12f6cdc7ad9f03658d471b5fcab8a8802a71a464c59d405d743fce0cfba0052a159eb89e44880c2c7a0d126b1d3a7bdd8255990b83e25f26d9c676047f0b6b0f07a15f028fe06a05385bd9f83b92e72e2cda7095fb4f9b6f514d9335ca38f99db90627cf1c619c980a9248f4db39de14360f573b5", 0xe1}, {&(0x7f00000002c0)="f6d77777bfb5f261b09572d30852be675e58d8c92638aebc6887c6b6698972271ab4a64be0cfa81f7b47f9e077a694f6e16121023ac70c0277d0dcb33601fc7597ea84be7ace6f0ff83672f0b1f8a9f6066f43753227d8e5a7f6ae3d88", 0x5d}, {&(0x7f0000000340)="35ce24209ecd596ebf4f160d0b82a3eedd420e5783b527d38ae009368d61e43b563976ec8992fe3e2efac183a2c15dee68fb831697446c270e576ea252f4559f5f8666a3d3b4f6259d2d323f4cda085acee6633632f7cf833ecdd88ce390f96029889fad82b5300bdedea4388bf75f5f7564a4963f49282e2a647a4c7d0fdbb9c72c21f08273b7338e8621c2fa68", 0x8e}, {&(0x7f0000000400)="7c51a792e734e82c9eb20b5e10f3abc24f303bdad826de0a7994ae2f3aade85edceaff5a3507b80b4dd59e5c8192706c848f12726f9bb0cc2aef980b9b6f497c05b49c1ee2ee9319665cae7db7cf8604ab2fd73b45872b756861dd6e6649e57e91ab2d1970358705e6740a513f0aec0d1dbbe610c82a6a4de7f4297f4290e485199d99045d546645a031b5913f8be65a8f4fb14bc939a77a8916c32deab0bac596ff80c0540121dbf0", 0xa9}, {&(0x7f00000004c0)="620e4dc89df8aa76a793960ae1c33aff457c30c326f0c09c0eddfcdcaddb5ecbeb1f7b58d0305903fdee9fb287af2c61e01d5def54e8157826e05492041ad550f3c96759b419925a8188d95d9640f5256d46348e39e11d9c0cfbbadaa9cc6d1bce6ebed2a65d2062933ad64217279654dfd3ba4b9376e10e8196ff0363094dec542c1b85c63c32ef10e6f732203dfd9d6222e5f62a2413cba1e17d7e73334e4c0452645e5539103fad7cca247ce34e7496805030293a7d8bd927cb8b6adb168027c340bcf6096be20cd1e51c77ba7c5d0fa66945e5e6e21ebf8592f2139d", 0xde}, {&(0x7f00000005c0)="6aab992b647e69ac7dd0ad3f81a85b26356c477c928a7858cbb177573d4cc5295f48a44954794f2f64f9584de0d0fd875915bd0b122bd24f8c3b8cb81f4c1d89d4b1fee8478f8df57d9c4bf3bbe7e06edafcbe6628b30e2bd1797fbcbe3d8d451c7496664071a876640e4f5487bc97aee13163ddcbb0d6c6a89730cc3993ea7b0da6bbf5ddb4d2933299e80ce8184823293ca535dd8f17321778a31aa40b264d3ffd43ea41f8963e8c74dda79c95444cb4a27f2a5d7c7b183e105cad6dba0d781ce911171aa68683d46f039f352eb73394fce1affdccf87396a868d687425e684243a060641555b1b7314420180a512e10", 0xf1}, {&(0x7f00000006c0)}], 0x7, &(0x7f0000000dc0)=[@rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x138, 0x4000000}, 0x4000000) [ 419.781234] input: syz0 as /devices/virtual/input/input1645 [ 419.803068] binder: 24311:24314 IncRefs 0 refcount change on invalid ref 0 ret -22 12:46:09 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 419.854962] binder: binder_mmap: 24392 20ffc000-20ffd000 bad vm_flags failed -1 [ 419.890939] input: syz0 as /devices/virtual/input/input1646 12:46:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2000000000000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x4, 0x4) 12:46:09 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x101000, 0x0) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) [ 419.900872] binder: 24397:24404 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 419.908930] input: syz0 as /devices/virtual/input/input1647 12:46:09 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0xa8) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x1f, 0x6, 0x570, 0x110, 0x220, 0x0, 0x2e0, 0x3f0, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, &(0x7f0000000100), {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x3}}}, {{@ip={@broadcast, @loopback, 0xff, 0xff000000, 'bcsh0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x16, 0x2, 0x4}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3f}}}, {{@ip={@broadcast, @rand_addr=0x101, 0x0, 0xffffffff, 'vcan0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x21, 0x2, 0x1}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@remote, @broadcast, 0x0, 0xffffffff, 'syz_tun\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x67, 0x2, 0x2}, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xf}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x3}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xfff}}}, {{@ip={@empty, @broadcast, 0xffffffff, 0xffffff00, 'hwsim0\x00', 'teql0\x00', {}, {}, 0x7f, 0x1}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xb}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) fcntl$setown(r0, 0x8, r1) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080), 0x4) 12:46:09 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000, 0x9, 0x100000000, 0x4, 0xfffffffffffeffff], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:09 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000080)) [ 419.952482] binder: 24397:24404 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 419.962250] binder: binder_mmap: 24412 20ffc000-20ffd000 bad vm_flags failed -1 12:46:09 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:10 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x32, @loopback, 0x4e22, 0x1, 'dh\x00', 0x0, 0x6, 0x37}, {@local, 0x4e21, 0x2, 0xffffffffffffffff, 0x4, 0xa89}}, 0x44) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) 12:46:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 420.065384] input: syz0 as /devices/virtual/input/input1648 [ 420.091337] binder: 24429:24436 IncRefs 0 refcount change on invalid ref 0 ret -22 12:46:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000, 0x9, 0x100000000, 0x4], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 420.116580] input: syz0 as /devices/virtual/input/input1649 [ 420.124224] binder: 24429:24436 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 420.134920] binder: binder_mmap: 24433 20ffc000-20ffd000 bad vm_flags failed -1 12:46:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x200000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x2, @remote}, {0xa, 0x4e21, 0x98, @local, 0x8001}, 0x9, [0x2, 0xbb, 0x9, 0x0, 0x401, 0xfffffffffffffffa, 0x7fffffff, 0x7]}, 0x5c) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) 12:46:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000100)=[@reply_sg={0x40486312, {{0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000000), &(0x7f0000000040)=[0x48, 0x48, 0x20]}, 0x9}}], 0xbf, 0x0, &(0x7f0000000180)="974769b0b16eaef3b5923bd1d91d40df671592e573459116cc83bbc563049fb87957c31851b6be3ce0f7503f94082cec8fbdc6cca886dad477a8982054e325280e974a08bea924feb017b847f36b4f0c5cfb2374b47ab640f9ee94f6f9751e1de6b6981ac06ec138615ff5f8204b10ea2c8adfd6190ce537ad68e2438f2876be82a90798684d6a4ff335589a37ff083580a379c16a69942c374ce8200a22bce552dd9842e375efe379916ba3e44783833d80ee613e2d987b6dcbb72e432e52"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:10 executing program 3: r0 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="6296e07bdc6352f3dfa8f7cb0fabf5f0b5d37650ccd4e3bb5a7abb69d3e19a48b541b571ba4d195b10e3798facedc0de958ff85907852e1aebf96bb20902bf2504735dd79cb11f9891cb48f94ba340e345158886a42b5f0f", 0x58, 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) [ 420.178716] input: syz0 as /devices/virtual/input/input1650 12:46:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000, 0x9, 0x100000000], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 420.261353] binder: binder_mmap: 24461 20ffc000-20ffd000 bad vm_flags failed -1 [ 420.263235] input: syz0 as /devices/virtual/input/input1651 [ 420.274538] binder: 24462:24470 got reply transaction with no transaction stack 12:46:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:10 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x2) getresuid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev={0xfe, 0x80, [], 0x21}, @in=@empty, 0x4e23, 0x1, 0x4e22, 0x8, 0x2, 0x20, 0x20, 0x3c, 0x0, r2}, {0x89da, 0x1ff, 0x3, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffffffffff29, 0x7}, {0x9, 0x681b1e19, 0xff6e, 0x8}, 0x9eb, 0x0, 0x3, 0x1, 0x2, 0x1}, {{@in6=@mcast2, 0x4d2, 0x2b}, 0xa, @in6=@remote, 0x3507, 0x1, 0x0, 0xc19, 0x7, 0xff}}, 0xe8) r3 = socket$unix(0x1, 0x2, 0x0) getgroups(0x4, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00]) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8, 0x9, 0x29}]]}}}]}, 0x38}}, 0x0) getgid() getgid() lsetxattr$system_posix_acl(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {}, [{0x2, 0x2, r2}, {0x2, 0x1, r1}, {0x2, 0x0, r2}], {0x4, 0x1}, [], {0x10, 0x196068420b549a01}, {0x20, 0x2}}, 0x3c, 0x1) ioctl$GIO_FONT(r3, 0x4b60, &(0x7f0000000300)=""/13) [ 420.303855] binder: 24461:24467 ioctl 6685 0 returned -22 [ 420.309975] binder: 24462:24470 transaction failed 29201/-71, size 0-24 line 2920 [ 420.322665] binder: binder_mmap: 24461 20ffc000-20ffd000 bad vm_flags failed -1 [ 420.325446] binder: 24462:24479 IncRefs 0 refcount change on invalid ref 0 ret -22 12:46:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 420.366729] binder: 24462:24479 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 420.366898] binder: 24462:24470 got reply transaction with no transaction stack [ 420.389928] input: syz0 as /devices/virtual/input/input1652 [ 420.408850] binder: 24462:24470 transaction failed 29201/-71, size 0-24 line 2920 12:46:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_GET_KEEPCAPS(0x7) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000100)={0x6, 0x7f, 0x2e97, 0x7, 0x2, 0x7ff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) gettid() r2 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='/dev/binder#\x00', r2}, 0xffffffffffffff81) [ 420.417879] binder: 24461:24489 ioctl 6685 0 returned -22 [ 420.431899] input: syz0 as /devices/virtual/input/input1653 12:46:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000, 0x9], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:10 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) write$selinux_access(r0, &(0x7f0000000080)={'system_u:object_r:memory_device_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x4}, 0x51) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r1, 0x0) 12:46:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 420.500979] binder: binder_mmap: 24498 20ffc000-20ffd000 bad vm_flags failed -1 [ 420.526363] binder: 24502:24509 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 420.536895] input: syz0 as /devices/virtual/input/input1654 12:46:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000040)={0x7, 0x3, 0xff, 0x2, 0x1000, 0x2, 0x2}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) 12:46:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 420.567305] binder: 24502:24509 IncRefs 0 refcount change on invalid ref 0 ret -22 12:46:10 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 12:46:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='[[}selinux/!&\x00', &(0x7f0000000080)='HL\x00', &(0x7f00000000c0)=',\xf4\x00', &(0x7f0000000100)='$\x00', &(0x7f0000000140)=':+\\+\x00', &(0x7f0000000180)='HL\x00', &(0x7f00000001c0)='HL\x00', &(0x7f0000000200)='HL\x00'], &(0x7f00000002c0)=[&(0x7f0000000280)='HL\x00']) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) 12:46:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 420.646808] binder: binder_mmap: 24525 20ffc000-20ffd000 bad vm_flags failed -1 [ 420.649628] input: syz0 as /devices/virtual/input/input1655 [ 420.670808] input: syz0 as /devices/virtual/input/input1656 12:46:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) gettid() 12:46:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0407004000000000"], 0x0, 0x0, 0x0}) [ 420.727629] binder: binder_mmap: 24543 20ffc000-20ffd000 bad vm_flags failed -1 12:46:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x20) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000000c0)=""/20) clone(0x804100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) [ 420.824313] binder: binder_mmap: 24554 20ffc000-20ffd000 bad vm_flags failed -1 [ 420.842836] input: syz0 as /devices/virtual/input/input1657 [ 420.848855] binder: 24560:24570 unknown command 1073743620 [ 420.849857] input: syz0 as /devices/virtual/input/input1658 12:46:10 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:10 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x549100, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000340)=""/67, &(0x7f00000003c0)=0x43) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'hwsim0\x00', @ifru_settings={0xf6d, 0xf4a, @fr_pvc_info=&(0x7f0000000180)={0x401, 'team_slave_1\x00'}}}}) r2 = open(&(0x7f0000000500)='./file0\x00', 0x109002, 0x40) ioctl$sock_ifreq(r0, 0x8949, &(0x7f00000002c0)={'veth0_to_bond\x00', @ifru_hwaddr=@remote}) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000240)={@local, @dev, @broadcast}, &(0x7f0000000280)=0xc) uname(&(0x7f0000000580)=""/77) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000300)) write$P9_RAUTH(r2, &(0x7f00000004c0)={0x14, 0x67, 0x2, {0x9, 0x2, 0x4}}, 0x14) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000400)={&(0x7f0000000440), 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="12002dbd7000f7dbdf2504000000140009000800020028283614810000000800010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 12:46:10 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20001, 0x2) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f00000000c0)={0xe, 0x0, {0x57, 0x3, 0x7f, {0x8, 0x1}, {0x1ea, 0x5}, @period={0x0, 0x1, 0x400, 0x4158, 0x8, {0x7ff, 0xfffffffffffffffc, 0x0, 0x9}, 0x4, &(0x7f0000000080)=[0x3, 0x7, 0x5, 0x7]}}, {0x55, 0x200000000000000, 0xa9, {0x101, 0x9}, {0xa42, 0x800000000006}, @ramp={0x7, 0x0, {0x800, 0x9e67, 0x80000000, 0x80000000}}}}) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000001c0)=0x1) setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000140)=0x3f, 0x4) 12:46:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0}) [ 420.884656] binder: 24560:24570 ioctl c0306201 20000080 returned -22 12:46:10 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:10 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fgetxattr(r0, &(0x7f0000000140)=@known='trusted.overlay.impure\x00', &(0x7f00000000c0)=""/62, 0x17) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x8) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) [ 421.030734] binder: 24597:24602 unknown command 3 [ 421.033128] input: syz0 as /devices/virtual/input/input1659 [ 421.035999] binder: binder_mmap: 24595 20ffc000-20ffd000 bad vm_flags failed -1 [ 421.052694] input: syz0 as /devices/virtual/input/input1660 [ 421.057186] binder: 24597:24602 ioctl c0306201 20012000 returned -22 12:46:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}, {0x2, 0x2, r2}], {0x4, 0x1}, [{0x8, 0x6, r3}], {0x10, 0x6}}, 0x3c, 0x2) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e20, @rand_addr=0x2}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="93440c1ee566e0e8c9e7ce1cda13db0800b85ecb9bc8a53426aea25e21894cd920cfd572276401aad30be1339cd39b52e134e70c"], 0x0, 0x0, 0x0}) 12:46:11 executing program 5: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x80002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x8) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78) 12:46:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) r1 = dup(r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) [ 421.121767] binder: 24616:24618 ioctl 40086602 20000080 returned -22 12:46:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 421.183142] binder: 24627:24631 unknown command 504120467 [ 421.220698] input: syz0 as /devices/virtual/input/input1661 [ 421.225260] binder: 24627:24631 ioctl c0306201 20012000 returned -22 12:46:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200141, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0xffffffff) 12:46:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14, 0x800) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x7, 0x1, 0x5, 0x1}]}, 0x10) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='cpuacct.usage\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000240)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000200)='./file0\x00', r3, r4) geteuid() fcntl$getownex(r2, 0x10, &(0x7f0000000440)={0x0, 0x0}) ptrace$setopts(0x4200, r5, 0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000001c0)={'ip6_vti0\x00', {0x2, 0x4e22, @broadcast}}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463244000000000"], 0x0, 0x0, 0x0}) [ 421.266703] input: syz0 as /devices/virtual/input/input1662 12:46:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 421.356287] binder: 24659:24662 unknown command 1076126468 [ 421.365883] binder: 24655:24663 ioctl 4c06 3 returned -22 [ 421.369249] input: syz0 as /devices/virtual/input/input1663 [ 421.393802] binder: 24659:24662 ioctl c0306201 20012000 returned -22 12:46:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'hL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, &(0x7f0000000100)=0xfffffffffffffe9e) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'syz_tun\x00', 0x2}) [ 421.406961] binder: binder_mmap: 24655 20ffc000-20ffd000 bad vm_flags failed -1 [ 421.425929] binder: 24673:24673 ioctl 4c06 5 returned -22 12:46:11 executing program 5: getrlimit(0x6, &(0x7f0000000000)) r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="8f79a459b9a20bdca2dc40154968ec305fa9ef67850ad0ebfbefeb107d3c032b55602084e1d6cf664849479f0023a35b5ca9647852dd525de7284b2acd5ec8b1ac1d8f61f04c76b9794109767caaf499c1ed767baa0952894ec3663c28d30211776bb7461b3c6a7835f7afca24107c5265c789972b4f5e5c8209ad9e7b69d8db26b30e23a08cdea9b5ad5a5c0f0c5d9ce3c54346a8fc3782140d978165541aab9c5581aff6f76e36b1747c9d0d52dd67b9f32fb09a2ab8d023be5422e3bbf0293b7505d727b8e286636f6a4d8bbdb18e46113f21514f79ac515f500e8fd0bcd758f67ffa7b96648848a24aa5dd8b1b4e5448cf317b35e1ad", 0xf8, 0x0) keyctl$search(0xa, r1, &(0x7f0000000080)='cifs.idmap\x00', &(0x7f0000000100)={'syz', 0x3}, r2) [ 421.456422] input: syz0 as /devices/virtual/input/input1664 12:46:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000340)='/dev/binder#\x00', 0x0, 0x2) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x4800) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000280)=""/75, &(0x7f0000000300)=0x4b) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0x3c) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x100000001, 0x401}, {0x8, 0x80000000}], r2}, 0x18, 0x0) clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) dup(r1) 12:46:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, r2, 0x8, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x76}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4c001}, 0x8000) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) [ 421.537492] binder: binder_mmap: 24682 20ffc000-20ffd000 bad vm_flags failed -1 [ 421.542343] input: syz0 as /devices/virtual/input/input1665 12:46:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00dc273706545ca9"], 0x0, 0x0, 0x0}) [ 421.615419] input: syz0 as /devices/virtual/input/input1666 [ 421.645347] binder: binder_mmap: 24703 20ffc000-20ffd000 bad vm_flags failed -1 12:46:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x1030, r0, 0x0) r2 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x68, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x4}, @exit_looper, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x30, 0x8, &(0x7f0000000000)=[@flat={0x73682a85, 0xa, r1, 0x2}, @flat={0x77682a85, 0x1, r2, 0x2}], &(0x7f0000000080)=[0x38]}, 0x8001}}, @clear_death={0x400c630f, 0x4}], 0x23, 0x0, &(0x7f0000000140)="97e14f4e80367fd006562896e11953a94d84725187e17b0456708c99cf564b0bf8ff78"}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 421.664988] binder: 24716:24718 unknown command 925359104 [ 421.679337] binder: 24716:24718 ioctl c0306201 20012000 returned -22 12:46:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="fb790a162dfcd5955a3756299579d49abc0f760bb4990c4e90ef7e64d73cdac27b0f826036781242a8"], 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) [ 421.739866] input: syz0 as /devices/virtual/input/input1667 [ 421.764698] input: syz0 as /devices/virtual/input/input1668 [ 421.776168] binder: 24726:24733 Release 1 refcount change on invalid ref 4 ret -22 12:46:11 executing program 3: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) fcntl$setflags(r0, 0x2, 0x1) [ 421.785112] binder: 24726:24733 got reply transaction with no transaction stack [ 421.793048] binder: 24726:24733 transaction failed 29201/-71, size 48-8 line 2920 [ 421.806325] binder: binder_mmap: 24726 20ffc000-20ffd000 bad vm_flags failed -1 12:46:11 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:11 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 421.861208] binder: 24735:24733 Release 1 refcount change on invalid ref 4 ret -22 [ 421.870949] binder: undelivered TRANSACTION_ERROR: 29201 [ 421.886579] binder: 24738:24746 unknown command 369785339 [ 421.888710] binder: 24735:24733 got reply transaction with no transaction stack 12:46:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x1, @empty, 0x4e22, 0x4, 'rr\x00', 0x4, 0x401, 0x40}, {@multicast2, 0x4e21, 0x1, 0xd2, 0xfa54, 0x8}}, 0x44) [ 421.913464] binder: 24738:24746 ioctl c0306201 20012000 returned -22 [ 421.920827] binder: 24735:24733 transaction failed 29201/-71, size 48-8 line 2920 [ 421.933572] input: syz0 as /devices/virtual/input/input1669 [ 421.946464] binder: 24738:24746 unknown command 369785339 [ 421.957264] input: syz0 as /devices/virtual/input/input1670 12:46:11 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:11 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000140)={0x6, 0x400, 0x7ff, 0x4}) openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x8000, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000080)=0x80000000) 12:46:11 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400), 0x34d, 0x0, 0x0}) [ 421.970135] binder: 24738:24746 ioctl c0306201 20012000 returned -22 [ 421.973723] binder: undelivered TRANSACTION_ERROR: 29201 12:46:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000080)={0xe, 0x7, 0x4, 0x2, 0xb0, "0600bb2413145a3de7caa1f9c1e551e90966cb16dbaa8280cde94dae182743be35e39c953c97c8d526c1eb882aa55b73b0d8902d5e5f35866c224b4987217ac7da66cabebc77b6d7496ab4c21848df01012fdf284f878b252af2ff7a32171b4dae9ca822208bbdd9412c1e90454c0bf7dc8b96f99885e5230bcf15e385f250e26a5f54fecb49ff783956adeab99ad1cc978d9d051f7220d027ef58d399bdfdd89f0d60b9d89869461774aed0f92c561e"}, 0xbc) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 12:46:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = dup(r0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) [ 422.078054] binder: binder_mmap: 24770 20ffc000-20ffd000 bad vm_flags failed -1 [ 422.096282] input: syz0 as /devices/virtual/input/input1671 [ 422.108525] binder: 24774:24782 unknown command 0 12:46:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000340)={@local, @multicast1, 0x0}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000580)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @initdev}, &(0x7f0000000640)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000680)={0x11, 0x0, 0x0}, &(0x7f00000006c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0}, &(0x7f0000000840)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000980)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f0000000a40)={0x11, 0x0, 0x0}, &(0x7f0000000a80)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000ac0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000bc0)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f0000005480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000054c0)=0x14, 0x800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000005500)={@dev, 0x0}, &(0x7f0000005540)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005580)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000005680)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000005b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f0000005b40)={&(0x7f00000056c0)={0x464, r2, 0x302, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x168, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xf150}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r7}, {0x19c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0xa57f, 0x1, 0xa6, 0x3}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r11}, {0x134, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3b9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}]}}]}, 0x464}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TIOCCBRK(r1, 0x5428) [ 422.132124] binder: 24774:24782 ioctl c0306201 20012000 returned -22 [ 422.157402] input: syz0 as /devices/virtual/input/input1672 [ 422.176571] binder: binder_mmap: 24791 20ffc000-20ffd000 bad vm_flags failed -1 [ 422.186189] binder: 24791:24794 ioctl 7704 0 returned -22 12:46:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r1, 0x50, &(0x7f0000000200)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffff9c, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x0, 0x326, &(0x7f0000000380)='\x00', r2}, 0x30) r4 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x70, 0x880, 0x2, 0x9, 0xfffffffffffffffc, 0x0, 0xffff, 0x0, 0xb, 0xfffffffffffffffb, 0xaf0, 0x4, 0xfffffffffffffffa, 0x3, 0x6, 0x3, 0x800, 0x53b, 0x6, 0x80000001, 0x9, 0xffffffffffffff7f, 0x97, 0x6, 0x4685c291, 0xffffffff, 0x7, 0x9, 0x4, 0x4, 0x0, 0x10000, 0x6, 0x2, 0x0, 0x668, 0x9b, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000100), 0x9}, 0x4, 0xcdaf, 0x606, 0x2, 0x5, 0x1}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x9, 0xda56, 0x4, 0x86, 0x0, 0xf60, 0xc10, 0x8, 0x4, 0x2, 0x7, 0x8, 0x5, 0xffffffff, 0x1ff, 0x1, 0x3, 0x7fffffff, 0x824, 0x0, 0x3f, 0x800, 0xc445, 0x8dd, 0x3, 0xffffffff, 0x8, 0x0, 0x6, 0xf101, 0x1, 0x9, 0x7ff, 0x400, 0x5, 0x5, 0x0, 0x7ff, 0x4, @perf_config_ext={0x1c70, 0xea}, 0x44, 0xdf7, 0x1, 0x9, 0x3, 0x5, 0x5c}, r3, 0x5, r4, 0x8) [ 422.235328] binder: binder_mmap: 24791 20ffc000-20ffd000 bad vm_flags failed -1 [ 422.241487] input: syz0 as /devices/virtual/input/input1673 [ 422.279771] binder: 24802:24811 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 422.293881] binder: 24791:24812 ioctl 7704 0 returned -22 [ 422.306351] input: syz0 as /devices/virtual/input/input1674 12:46:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x400, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x1a5) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x40000000) 12:46:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:12 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='io\x00') getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'HL\x00'}, &(0x7f0000000000)=0x400) pipe2(&(0x7f0000000280), 0x4000) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2101000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}}, 0x40805) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) [ 422.335850] binder: 24802:24811 IncRefs 0 refcount change on invalid ref 0 ret -22 12:46:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000000e84b83df9ae9ef26432b4a8b1b36736b532cdc6e4dcffe686286143425b506fe9cb488a94ce97ca4da776cbf38f41cecfaa35b9dcbcaf1b3dd3a31e2bbb5ba4f1c1984b7178ee6d141cc7bbfbf0ed665f7f00f46990b1cb350999947ca85405d10f52fbfe5670d5ec7f9a6dd214e8c36ec5c8fceff455bdd6eaa402e38afaa16fd3034910378239c3372771f0fa419f4468cbb7b254ba443da564a802c65034fc7ae06844a092384041716cbd856bb4f29e378c570eeac77e19d4a9b5e9be96c0c77a6ea8e77ad67054707ae1f99203aaab960117ecc6f080a031d"], 0x0, 0x0, 0x0}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd4, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffb}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd02c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44081}, 0x14) 12:46:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x1000000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_GET_KEEPCAPS(0x7) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000010, 0x1f, r0, 0x1) pwrite64(r0, &(0x7f0000000280)="cf7e2d3593592ee5e701d5149c211fff07923bd42047f8af57c02c5c2b222a70c223cb4e603d5a132386a68131e88f1d70724415ea1dee3768a2aa176dbfed0f60baf3de72268714ae0b878c8ea9454c331802001512cac2b10990b53f12c85cd9e73138499c5355a3ea1050", 0xffffff10, 0x0) [ 422.403793] binder: binder_mmap: 24828 20ffc000-20ffd000 bad vm_flags failed -1 12:46:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0xfffffc59) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x3b, @dev={0xac, 0x14, 0x14, 0x1b}, 0x4e23, 0x1, 'ovf\x00', 0x1a, 0x0, 0x67}, {@remote, 0x4e22, 0x0, 0xfff, 0x7fffffff, 0x4}}, 0x44) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgrp(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x118, 0x26, 0x200, 0x70bd29, 0x25dfdbfc, {0x1f}, [@nested={0xd4, 0x28, [@typed={0x8, 0x3, @fd=r0}, @generic="c94bea4de164679c34be3292cf1156ad6a171e02794d6655b458fc95752261706d78247f6a1410892da2bba499d0224ec73e1de0d4b366794605068db1056ef32834af1d50dd8569031f24033b6f06067d34a82687bf219017e0c3b49b674ea622cdc45d1f782311ded7d30bdfb5314ff3eb2df8be745bd59d2e2d9dd1a4dbd3b9cdc7618a9fd92fdb05fdda598bcf6fed1ff268e4af05e37370d06dc5f48adb9750ae124713f2896754388eae8f2204d87355e7ae943845263e1814f7af7dd1780c4efbc4dbea7d"]}, @nested={0x14, 0xe, [@typed={0x8, 0x96, @pid=r2}, @typed={0x8, 0x5a, @str='ovf\x00'}]}, @typed={0x8, 0x3e, @str='\x00'}, @generic="cd3f63de83befb5a706afa2c5b94ece1fe"]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) 12:46:12 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="32f76ddba6a3924f8e097c852b3d2829", 0x10) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000240), 0xfffffffffffffe23) r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r2, 0x0) [ 422.489322] binder: 24843:24848 unknown command 0 [ 422.489464] input: syz0 as /devices/virtual/input/input1675 [ 422.495686] binder: 24843:24848 ioctl c0306201 20012000 returned -22 [ 422.514367] input: syz0 as /devices/virtual/input/input1676 12:46:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 422.551337] binder: 24843:24848 unknown command 0 [ 422.556499] binder: 24843:24848 ioctl c0306201 20012000 returned -22 12:46:12 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="f762054000000000"], 0x0, 0x0, 0x0}) 12:46:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000080)={0x7, 0x4d, 0x2}, 0x7) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) [ 422.633900] binder: binder_mmap: 24864 20ffc000-20ffd000 bad vm_flags failed -1 [ 422.645259] input: syz0 as /devices/virtual/input/input1677 [ 422.672244] input: syz0 as /devices/virtual/input/input1678 12:46:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) syz_open_procfs(r1, &(0x7f0000000040)='net/rpc\x00') 12:46:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 422.707676] binder: 24878:24888 unknown command 1074094839 12:46:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$apparmor_exec(r1, &(0x7f0000000140)={'s9\xb7c\f!\bB/\xa0\xe8\xd1\b.\xb9\x84\xa8', '/selinux/\xfb\xff\xff\xff\xff\xff\xff\xffts\x00\x00\x00\x00\x00\x00'}, 0x3c) 12:46:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04c70900000000000000"], 0x0, 0x0, 0x0}) getxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@random={'btrfs.', '/dev/binder#\x00'}, &(0x7f0000000400)=""/156, 0x9c) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@dev, @dev, 0x0}, &(0x7f0000000140)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000180)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@empty}}, &(0x7f0000000280)=0xe8) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@newneigh={0x40, 0x1c, 0x10, 0x70bd28, 0x25dfdbfe, {0x1c, 0x0, 0x0, r3, 0xc, 0x22, 0xf}, [@NDA_SRC_VNI={0x8, 0xb, 0x31a0c3d0}, @NDA_DST_MAC={0xc, 0x1, @remote}, @NDA_SRC_VNI={0x8, 0xb, 0x1}, @NDA_IFINDEX={0x8, 0x8, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) 12:46:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) [ 422.748434] binder: binder_mmap: 24884 20ffc000-20ffd000 bad vm_flags failed -1 [ 422.749957] binder: 24878:24888 ioctl c0306201 20012000 returned -22 [ 422.786891] input: syz0 as /devices/virtual/input/input1679 12:46:12 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 422.860292] input: syz0 as /devices/virtual/input/input1680 [ 422.885401] binder: binder_mmap: 24908 20ffc000-20ffd000 bad vm_flags failed -1 12:46:12 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept4$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e, 0x80000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x20011, r0, 0xffffffffffffffff) [ 422.901757] audit: type=1400 audit(1549889172.837:40): avc: denied { map } for pid=24907 comm="syz-executor.4" path="pipe:[76051]" dev="pipefs" ino=76051 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 [ 422.916043] EXT4-fs: 30 callbacks suppressed [ 422.918399] EXT4-fs (sda1): Ignoring removed oldalloc option [ 422.929856] binder: 24907:24919 unknown command 640772 [ 422.943955] input: syz0 as /devices/virtual/input/input1681 [ 422.959130] binder: 24907:24919 ioctl c0306201 20012000 returned -22 [ 422.976348] binder: 24907:24919 unknown command 640772 [ 422.999542] binder: 24907:24919 ioctl c0306201 20012000 returned -22 [ 423.021975] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 423.049365] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 423.068845] EXT4-fs (sda1): re-mounted. Opts: init_itable,jqfmt=vfsv1,oldalloc,grpjquota=,i_version,journal_async_commit,data=writeback, 12:46:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:13 executing program 3: epoll_create(0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000000c0)={'HL\x00\x00\x00\t\x00'}, &(0x7f0000000080)=0x21) 12:46:13 executing program 4: r0 = accept4$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x800) setsockopt$inet6_tcp_buf(r0, 0x6, 0x3d, &(0x7f0000000100)="7e37bcad5a9ccd7b8abf5f8c4b48f36f8c", 0x11) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="9f634e8639b4170000000023"], 0x0, 0x0, 0x0}) 12:46:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64IPOUT\x00', &(0x7f00000000c0)='eql\x00', 0x4, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) shutdown(r1, 0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='eql\x00') readv(r0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000002c0)=""/73, 0x49}, {&(0x7f0000000340)=""/175, 0xaf}], 0x5) 12:46:13 executing program 3: r0 = eventfd(0x40) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) getgroups(0x3, &(0x7f0000000040)=[0xee00, 0xee01, 0xffffffffffffffff]) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() r7 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) r9 = gettid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000007c0)=0x0) r11 = fcntl$getown(r1, 0x9) r12 = gettid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000003480)=0x0) r14 = getpgid(0x0) r15 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000004840)=0x0) sendmsg$netlink(r7, &(0x7f0000004900)={0x0, 0x0, &(0x7f0000004780)=[{&(0x7f0000000180)={0x480, 0x3a, 0x110, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x280, 0x14, [@generic="3d69cbfff701c371f6faacd2ff24aaa3b3cf64ffe55a", @typed={0x3c, 0x76, @binary="2c64da72bdd34c6e05155323895ff9462b174570b150834791fd4152a6873893e828b0bda9eeb51e932ff240c5daaf238bf365edab"}, @generic="e7541b06078872b04ae6f5145269f574c472627ed0edf2086449cea83fac6e57eea5b63e107d4ec6cc6405da93917989f94d27a5a9266508ec5a7d2f941ec3a4c090c0ab32b934e512d35063e41607ca0f12ed3dff3a79", @generic="3b8e3744", @typed={0x8, 0xd, @ipv4=@rand_addr=0x7}, @generic="a45b7efcbd39550ab93479dd3549276695b915d9956c2f9a19afd6943ca438a27770319f7856816e4ef84a3af811b9b9d1392171050ce0d966a2ac51765da5ae953b09f8523d3a6fe7c89473116e175a597091bbfe36aa627fba81d5498bd08e88ce4352b0e62fb56aa098d692b4029ad531bd4c947a56d38d7697b42d99bfe4b86073ef5667c763296fc19f01d3d23f33ebe9f8a7032483e9019eced32eb8891d740b84b577761a54671d447f4af5ab5e819a46401ede46f6bb8696dd3e57d3d6f1523b44afc49ef8834e555dd53fd39f3f7819efff1a5dab52f0a55c3d832ce4", @generic="d495837cb574b759615b39dfb8694eb50fce50536c72c98516ef3d1bd8d48954731ead8b46c0d8eaed02c7ba01c2a71ea80945d228a4c5897feb281c214206513be1db20211268e9ca4065f0bffff51b672421df154e5c641c556895c61c5113c34644be39b7fc78d35c3d2542143e43c951b1dc0180a40cc4a9855bd95eb3d8b1b7ecca8792c959a4e625bbe764f70bd46f5b95e3e221238fff69c0754c2cb8602e7d1bfc20f19ae97134cd911dc6d02ce47d04ccf46fb9a0c545c939dfbde91c52a6d8534e008429d3f9fdb4bb63737b12695b5081cbf7b73d1e421a6396ee6aca7ed78d21"]}, @generic="8f8fdb1b68ef93", @typed={0x4, 0x32}, @nested={0x164, 0x31, [@typed={0xc, 0x7f, @u64=0x2}, @typed={0xe4, 0x5f, @binary="bb425bd1bb982d569bac73c6793f92849cfc521324ddc480944044fa0fcec35230aada14fe42b91409ecc0e1d3c7fd6d9b0f0534e6b84cae566cbace11e259665e9acede5297f3539a6d050bac8f432d9b754b16d9cf50a43de280c110fb7d1e5c6b117b5dda56eb0f1a14ef384945e15106795d2705fddd899c2b1904706255ddaa8d2d1c193448b93bfa96be31c44108e3bea97168f78e1fc9099b15180e675364cd61678127b7209e39ca9bbb1fc7b42592d4244a10f96281ccf70d1459aac7d4fbe8585eacbad8f473d8b02a68c09d0c4d24d50064c673473b8e5845fa55"}, @generic="f380aed2e646f7dfdb2b176e7e38c3cb200519834c9042d28f50923c63f6725d4a44dbf7635f23afefc41cd01226b1fee16799d6852a729ec502beef57239580a16982b303543380bd14feceddb0dbfdcab95b803c40ee7469c8a75d80e95084bd8d4714868e0fd6098321b1aa"]}, @generic="97646987306f72418e5f1faef0", @nested={0x48, 0xa, [@typed={0x18, 0x6f, @str='./cgroup.net/syz0\x00'}, @typed={0x24, 0xf, @binary="027218e146f14563cd489b21346b958335f3f8ea92386f9cdd7f574ba9827709"}, @typed={0x8, 0x12, @pid=r8}]}, @typed={0x14, 0x70, @ipv6=@dev={0xfe, 0x80, [], 0x1c}}, @typed={0x8, 0x7f, @u32=0x6}, @typed={0xc, 0xc, @u64=0x81}, @nested={0x4, 0x7d}]}, 0x480}, {&(0x7f0000000600)={0x20, 0x2e, 0x0, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x2b, @u32=0xffffffffffffffff}, @typed={0x8, 0x2b, @ipv4=@multicast1}]}, 0x20}, {&(0x7f0000000640)={0x114, 0x40, 0x0, 0x70bd26, 0x25dfdbfd, "", [@generic="204c62a59ac5b9512db5837b77164fdf6afafad9b5e28cb2bbb7016ded159cc83092c022dde239bbcef2a44aec0cf65b02c4486559a439b3f6a20c356dcb980f19bf", @generic="c81230e33ee0c63007a6fe9a93a09bd08717ad048dd2f41e03d24b82858c0909e38a03daecb0137f4b57748a72e902173423ef425cfec62b55d1424cc4183ac828e93537e82ec4110b99e0612ca6bad1e163ea346536615fcdd8d2374030175075e4ffd1545161c99a449d", @generic="91629da07a1a6deb7ddc277dbc5ed4d893b6e94a7259e40f1f3bea603616b4274efe153c0a4a5d766b7aba304b87eeb5f1091951377046ef845b37d8a8d111349cad9bd432d253e5f886c248f7da", @typed={0x8, 0x75, @uid=r4}]}, 0x114}, {&(0x7f0000000880)={0xc0, 0x28, 0x302, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x8, 0x80, @str='-l+\x00'}, @nested={0xa8, 0x88, [@generic="9afb32bee031dad840bfca16b4c53446ae192eaaa6919bceb6378cbf2b9b37b509b6fb7b4b72ea2289dd6af6b570583c5b8a4941bb5c02a8471fef4a3c2bd6201343206b254329a8620930362aede0d2a68f74036d039855c9e86b5558b86b0ba6dd0e96a7c08d82495e", @typed={0x1c, 0x4d, @str='#systemnodevmime_type\x00'}, @typed={0x8, 0x8, @str='\x00'}, @typed={0x14, 0x9, @ipv6=@loopback}, @generic]}]}, 0xc0}, {&(0x7f0000000940)={0x384, 0x1a, 0x122, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x238, 0x34, [@typed={0x14, 0x2, @ipv6=@loopback}, @generic="10d7c1e2fea38fd37803d483abaf7eb6dab3dcf1bca4728b6d782f6f0800cb23e49f1c56994ddb672fbfe4ffc98abc666d27ee23adb79ecd3f96f877315f905bbc36e06693302f4188ce1137584c53d02324a15bf4cbca762c93deb50641ddc7d4ca76ec10721c85c0e3ed7b6f53a4b57d8dbbe34b449511e3aee87d56266888283938dd29877372", @generic="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", @typed={0x8, 0x35, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x8, 0x2, @pid=r9}, @typed={0x1c, 0x4c, @binary="3a6316b0bf9419d96efb479595b07a23f9f3212e6f57"}, @generic="de1ec72b99d4a74e49190529c19323d78d8e85ca3c590fb55a7194fc66b0cdd495ebce59bbc9088b39b9c94e4bc2e73dced24c69007c80864adc6ff3d287799abc8aeddc7465b49e954a2f03d0b5dbbdc8020aba6a2e616c957502cdd60702e621395bbc614b03d16070c92db23759d7"]}, @nested={0x128, 0x55, [@typed={0x4, 0x56}, @typed={0x8, 0x90, @u32}, @generic="09e58a210a906f07de9206deb2d0d533cd3dd1e13f5b902f1787bca3e4c7aa0ad071275658a4075987da8689864c5fb2a509d4821e273c19c07ae889235e34a6812e41b0be5cb2255ed909bae08255d926d629cf703a72e139a5e994f822133fa3806f9bfb46032c2fe7be8eec890378e0f51034dca209abc57e0819981856a55521481991a8162045c9b94b", @typed={0x8, 0x11, @uid=r4}, @typed={0x4, 0x63}, @generic="719e40892757f06ce62c814995f0e6dcdf5d672bbd36e2b01c2059a051082bd1de5afeed3a86f8be7aabc46aea1b2517613e9c12169ebfe27f98b9a76dd70cbb6bd8fc51c858c1defd2156a58a4b22a1dbbc55d6b81ca00c31e1ede79d116efb975ca291641387ba8f76cfe58dad95c2fb887419e7bb89ce5bf378095a70"]}, @typed={0x14, 0x4, @str='eth0ppp1self\x00'}]}, 0x384}, {&(0x7f0000000780)={0x40, 0x22, 0x820, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x1c, 0x1, @str='em0vboxnet1vboxnet0em0\x00'}, @typed={0x8, 0x72, @u32=0x1ff}, @nested={0xc, 0x29, [@typed={0x8, 0x39, @uid=r4}]}]}, 0x40}, {&(0x7f0000000d00)={0x23e4, 0x24, 0x800, 0x70bd29, 0x25dfdbfd, "", [@nested={0x1064, 0x39, [@generic="e9d0b7586b6a73a57bcabff5b6e78c7204c252cd300636ffe681d5e436d488e0705989eb0ad27370bb22cea3a9a7cf9d31593d5f836c32157d1da91a7678dfc3949106c0cf763817a0e223d65424a59b1f7db61bfb0c45e75a849dc5e1a9ad75a41dd5d12d54e9d38822cc2bc9fc5fee972967bd077bb516df49ff569dcc1ea4b7c2d56dffe2253c50d330f2741e12f45b735b2bf0cb5fba4a6e28b36463f78956602c0a5ee867c16060808d5d89d8ceb729a9b2e702f8c6ae8c2d7dda8730602c275e8219f2c9b598f29eed7d0a8ea17f8683f87416316da40c7ddfe9679a54ecedde34972b2caf73af6eab091ea5afc5a91589e4d14beed72b6db8e7cd238b989efc7bc5bdc2ac23cac68f86e854dc973ef2ff71fc1389c6c09379404b7c8a1f73399d7596499ab58d8200e4684711a8a3f42bc0050f64513a946de332ce268e9d406ae1cd0123fb59fd0781a13616a545ad271a70c8404272c07dd5425f2b94ddf862e065f7600d72e5dc62f3c04c34869d6d8bd4c1c0df438ea5281bc4b7af75278914ad0501388124bbab73843a45c4f3b75ae67f37aa4c6a8c940682257c1602d2fbd6580d500d69b0287e4ab21225bb20826743d75632535cfb1cd901dd106edb1775fa34d599e52aadb5e717ff19d5c38d5d37f43e33c8e27edbd8f817205643c7c059c10351922e059d8a2d4324698740c85b76a8446913bc2ccbfee7503bbfdda3265042ce7c6d9ce747a4e04634d01c3e3bf3d028beadbff4c15a314e034bd52d7cc12d9cef1a913f5e43932a3bf48eb228be627801a88381ee4ea6c3edc930abb00be94b9374076b528c2df92d20898345066b82c74d4407941fe75c9d19918e16440b0168766562b463eee7ab28681764dde2e3571bb0ead330a6bd72a83fff457de2aee7384cf7b9f511edd5abf646c2831fe29c9b348b3719cb4b85c32d93fe2019cd23beb139a1a1a33332fede40beb291edd24b5ad6f3eecfe8f7e8746b3bccfa225e1c595a0b702a44ce7657cd8bda7dd5f082f6cb5a9ed9d586d4a5b39988c76e253c0091d0346b724c470f267aa4302b05f791fc26e18e6f2ec86fa789bcd629d1c79d94fb8328900222c1d569d5dc6f4b57f5cc4774cb3fc84ec2e5f3d4e56e153cb74e9540e1b4477761079a20ceaa7bd9822b944b30725fd31fbb619b6ed0230ac72930b3f7bc4cd29b7c9a873656047a412bf6ea2a2a74f2dd4c2f68d132124e3698e32c5eda5c0f16a418dc059e7ba8c2e2ecd4d7288421beb2b11a6a64e43b84f8fc7cd49ae932ad4e6396b8761cca6a1b1e47935157b678f869bedd1de91e3d6aa1dc5e79729f33f6d34092d94bf8011065367f9b951264d5a1cb2476c9353e1b2228756c5682bd362b1a1088c887381d11bbe652cee2235ccfc45ba2909bf67b069f63cd8ce1bb24ea44d432fbba4283b64d4b6e44481d6734cbb29adc2d75dcaf3907498fb130b37edfef2a86cde47795d894976c1a98bc0a3f6ec199f80ddce4478ea10256abfad93107ad5194189046ac6137f80e37bbc89d7160d880770c59d76f9af99f9b7b3109dfd8e4e03793271804337c2a75c1ccdc55b3c4a16289cfd7305ffb9030193f009190dfd242f8f3147b6125323c92664578f5b80ce8212580fe121d13d3e67113926b0d68bc7246a33fc16419dd5d5a4ce24ceb2435bda84c41c171e13abdffd441a46b2e25d18a8939fc93042e493bdf42fa50b05ab573541d2bc3fe29c9b383ae7b927920124cc8e6e714958102b40dc9f7c0157ef11323a9bcfec428e6e0eea6f83dc5262d94d2ebe990ba74b9440412f7f1acf4e42559807d6d2388db1ac5b885e5370469cb7f21fe32041d6b7f78024d47df27f0e8c01c620dc3e7249688145e4490c3677bbd1d1476a80a4582a1a02dea5225e8c4b11eae7f0735b260f8c977586a7d9deee7469e63694725370832b19f827432174fa907563d00df96a94ba00ab96daafe9b16f9adbe7624ee246fa6cc9620d738d4c9c2d98739d7b234eff3ce3a387c6c56f25ee63dce3481dfe4b676d491ed263e5f8c93ff9677e590a3e7c62c4f2ba7d276b5b44f2d6a26d00754f2a1c609fde963960ca9a84625407dbda31392478a4b7ca24c81b0dbe31de892b716721c8f2063cf1ac2e4e5996d84e6c12b319d39a774017376bd92a4be0c90167b2fc80af34c5d88c4b148fad7de5df0f2bc5a1ba4f51690d1f92aa73e3c81ba2452269241ec7780f03a49868f01cad47ffc39abcf13eb443120b7e9f22aa5fa3b0bca07de8ba9f631ccf48957d39be82dd5db360f2062f69d6e697d1292a6a5ce462dd7f531d650931cc5042732b87e84f90a0babe71521eefa0a1e056be599189552f18c3c184f59b85055f6d2c03ae42667839a0cc1d1104201752495c87445479153dcf1ebfe82b8003e60b7c996ae68b8052a71dcb609c162543b44688828b61e02d8317146e5696d6ab761e6263599ba1e784a88c8483c0f8b9d3536c98c34b8c7885e9ab5206821ef7689f5fb7489b8bfcfe2c7e9f71f3f327cb96f0af6e9d9e97a68e6e3ad34bc67e66277be3c4cb95244f0df62b70eec273cd22e0d4aa830ae39d0b814ba9aacad56bacffbda379eef7829010d02f3ef575086c2e053700f5c558b11b06d1800a68fea686a2169a09cf2c71c646beb11f99c4fc448dc12fa35b78d8d867e79892f369878dea93812adf9f363db6dfe9c3e07747997a674e2cb270df4d9091391933264b0755d8010100fa1b2c0599f3bf1f623bd125fcdeb19a2488cc807c3a3fa3f9bed33f2e335799a7a545545a7f0097112574b0be17f08ae31c71ab6e8580ca0dc4f21f6d2b4ba18d1df30bc095792d95e2d7c470cd28fe73b240f0120ee437b9104710108a00eb9e744d78455e900d32c00ca8c61aff61f5b76c77f6f04cfd563809c592290ab602f1d3511175b8d6e3a551885454aa2b5dafc890afd332ca5fa7641a091327b2bdb1d3ac4957eca95e972e56df7c6bf534743c3f2e78c5cdb3647ee11f0aab7d056fe876d00bdbeb22001e399ea7394e85050e015b4e5e9d7f93fb704362d9f2acd1d5f7fa920c76cb7529c30d0ca539970745415b7852c3fd149f994df20b1de135226f9c0fc84bed75eeb802787ef9bb897e48d4e2993c5920bebe83b04fb39043e29377141b58de540bc791fba2baa71cbe7720aac173b2991dc4515ec2aefc453b514c1065d77857567b748c440f7312138e80c5f4d659a9912a3ae8f6c9ba90d3552039513d9430649b8935c7c00a5e5c78f84934ab89dc2af324567d967fb127f88e1c440133deba852782569ddd275029e7e8213ee55608ab23f63c3ed3ea345c51988d162dcc402765858bbd9c5903da2e584f4538be4e66e25b695a21b313be3311908164a403ed7ebda241fb639acbc2a67a32129de3d30533cb785c8b207ee01dc22bc0607895f34e46770e2e1d8f92b5676823bb32dd3cfc0427c9a7e7647050ed5b202b29d6aa43b753defc3bf3efa668c6f2641805421c47ab6b71d03cf9f47c5e28adae8fde370bb88c78bbda2c0a0774d05c3eaf48ccdb31e0e4c38e60e49b48cb5c1375027e11437e49d5cc9a55439c227fad2e7c858d3e1aaf27bd824fe557022acf8df8fc731b5287114f8f5fdd4afc777f82dee0cf7f754fa2a6e808d045c10e8ce90b24d160b2e15c968e0ee641c635fe17b07323e3bbc02320cf5115c711bd2a89785ce4bff114ea465b45d0463664dc60b176712a21d9c14928be65821545670481e1cd6f018e2b0aae701ef6c96e69a6067963a543dec4bc417b7d6dd774264827bf6f2928151bd05222e821c3248a71a91af10428d1da66d78f6ec5ff4212124998f138ac05e715ed461e90bfaf0c38e145b0ccb3c7730c0fbb919ac700adb6ac8b5acca079832b8b5891fbe2141de1e2b829a89a6260a66c2880c2fa0a1f4babedf6624936262ef6b3a8985d6ae561670d9bf278a0b961dc529121021137bfa6fb7f38c798e7fca01b7c4e87c0d9434e38a0136f451a98539ab8abaf083f018e81ab768c23c6c351b98c92eeeec2ee47ddc3dda5ee42a8b6e3e65e992ca162a4047296f5cf5ea3f6c4376f60a2d755626f26af40c47a1a8fbc7364869b00659679367b787e42c9926d69ff6e40389b5aff783d103986b926f28152d573e381286d0730cca3f8ac9472ba52b3e02f4a4e63ee43035c716d78df4915ee035be00734c89d5d2cabf8cf26d4a7743db9046db2f312ebbfb41a277dd78334c39c7ae68397bc305e9345a279fdb428bad3b2ea77f3a757c0f873494d74525c6aba0130392f37d6b7e1f36bd390b48e2ce74c47a015c01a309a967fe41ed8b387418fa52e617afeb4a4a918452983952a1679cbee96eaba97d5e1f12c7994fc2640b77a49f13c8c1b2f36a25b0f9907dda777de59b39c5b5fb237b7ecf247ff0253d56c591142278bbadd0dfa8008de364b2df821329d461d7cd0f3dc1b398a2030d041e58a79266203f96a6cf76fdbf62ddf5665e8bbcb2b253ac262a33afdfb2943b03c502b2e7cc004c80d344788c39ba4045c40c300efc4c80daa39cc1fde6997973313df67fda2dca349257f7aba640d56786eea771e75d4b724b8e9ecdb423ae63b11f4a116ca629a467490e1ae69a2f45a38db8af50ad4b12fe7c5284ef30b6259911bcc63914aa6316f3786d6dc632c313d4809a11ec982ca998006903f20e538e8c1d5f14687ec9e74ce77bfb022d565eb153261b0a454a9dfe09442e0c2f526bb47544dc3514a83186bb90a18336fa3f29b9eecc19b6f232df99317294365d4bc0cc2817eb8fb50755fb2d463cae3085b99e2d0fd973faf2b921a05e5f229676a0a363e1a2cfc602aa30a63737f18f1f8f9ce40fa57942308a6681b07ac50f1dc74ef91fe86f45f058219c0d96121740a0619612576f8ae6bcd643a364fa886f336825f93cb8c35099a7ef733dc06bdd264a3d208228926bdac1a8b100a869cf3e768c9d808321114173a2566ad2a6e68323e27dfe1551ba94a14d53f82000b9af58f83a1af477b829bb54799317f509c94784dd10a29ef474d4ad2b6e3a7e4ce8a74b599dde057621dcdbf94ace3d84bd4818a0b7e05b411b992142aa6b66d121b73d5b7632e525e089b7805db3af8ce03085cb10c9ebee564c6731b486c9edbc94380e02d6effd7bc267a6360f38b94d63d5d27fe9d0a2938d6f46418e944734a4e877a05dc5932c0bc308fa1d0b04224920c101b4965f516c94b2afdc91a2e7514fd779cb2a3bc10740f92d5f6148e37c4a1c9a663f696f4846d9635ba42b63181c43e237178b739f3bf682e60eb1439540f208797a77e93caafd785b1813708c6a7cb728f808689a2386a66606f48cf028e04aa7ae54c1202537926d98a9986befe3c97ee8963221da07933de40ce9bd5544bbf498137927a2edf3064833ff4921b1a74534f6ec1f7aee01d5c06df35a8fa8a510299415ef91fea8ad805dcfceb4bfc95b47a44f357fbb71ef0ef389d108eaa6893061776579e736824cc149a66a997673e0df66c4ba2d64779a9e6e57a624a62f8088fde4c65ab48a9dc5d7ac783d5049d11d8a0e89717397ed469b5bc0f2bdebfbc39c713ad0384c88c07a662555d5a9e51c1be10d17e8aa1cba5bd61e688e6cfe0ad5f27ad5308aab22140b9435ab506e95649d8f838794e05dca9027f6b7dd2ad0ad14fd9a18195dae54a677e2c2ce7b24a89074e2ee077ba8b0549c10f5f959826fea4a9d4cb684ce438510104f8f9706755d2dbc49a9ae380a2f", @generic="5464a46d76c43e021bac18740eb791fd7f4532bb699adfad5fe46f7d3c69a3da3ab00fb894d17a966aa5fee480f80f2cc6226b07b746fbd04e940380b14cb2d41b15db469d8877dc71a9bd4b820b22df1e415a", @typed={0xc, 0x4e, @u64=0x3}]}, @nested={0x14, 0x71, [@typed={0x10, 0x44, @str='wlan0GPL-\x00'}]}, @nested={0x11d8, 0x46, [@generic="690ffdd8b63724a210db4d53f19783e7d968f0ff32361fc1973c698213c29eb298d84e93e4203f7e6a7acc3c99b1e46844f986eade131f7cf20123d4e3d0111cdb1502b208c8537c7057dc711cf8b7241d7ff875687897582ecc913c4223bf7fa963faff2c15dc20351a8ab0e377fdadfe674a8da1aa778ff9064fbc379118edd511512773607e6bdfd844a86c472510ccefaeb501bf0a78f62f6f6666133bc67355fbe7b821ccd34219a9db1a78e19d5f31ee0d6043b6da1be48b2deed86969f72d6f70951531bdb148fc21a41bb5c07d927ba1c7c6177831", @typed={0x1004, 0x69, @binary="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"}, @generic="526550a258ecd210334083719223f2baf0a774d165b76deea111e89041c4583ac3a5f0c839a879efd76467eb68d06636fa18de99af3981dccffffa7a51aa70f5d31605cf35d4b5c2ffc8e0ea29c4216a952f398cc5b3309369393588d3088dbc458e2f4ce9c5c75215d21aa164f8630880ecf030237274835451ca9b2dcba39432b9d458ecb7b3958802189133d764b50a4e4b227c4b0c0c0276b0175b84b23a266a8ed00a452f222aacf9467af89ae24497e0cfc47186dc8a81f789be13c9398b737f3ae27516b351b1370238c19fc3de79a22698018aded482fb8e5ed54c2942702b8521522a", @typed={0x8, 0x11, @fd=r1}, @typed={0x8, 0x73, @pid=r10}]}, @generic="7b5877f2c7b6292e700ec86c1d3ef7a72683a2c3f55db72d101c5014369cf50655f47bad8802842a07c6c7600e1dad849136affa2d865b10b851c9803823b4d1c7b0cd7b02a013e423682c5296b23b80b5afcc02fea8482f2d2adb4220513accd86e67aec1bd1a2ab0b4508914986d7fc8855531245f893469d0e5869164c941cb32a5c47e876514cab642ebcf096b67eff97f3d85c1f9d55b488732f3ec0aba06109dffc39593d7ffcad0c294303fc8befe1872", @generic="e6fc8d0160886a5895dbb2e0e2067414ade6ae252a445eaea877c2034f12079c58445e55693a74a75cbe4c49a5beb8c27ffdb1112291d1cac49f", @nested={0x40, 0x5d, [@typed={0x8, 0x88, @pid}, @typed={0xc, 0x5c, @u64=0x8000}, @typed={0x10, 0x47, @str='wlan1nodev\x00'}, @typed={0x18, 0x5d, @str='./cgroup.net/syz0\x00'}]}, @generic="f392253165c8058695d65f686b6eb9be243ed6ed4f42ae0232cba4f900b6349b6dd607445e72709f7477cf", @typed={0x8, 0x3b, @u32=0x2e1a}, @nested={0xc, 0x2f, [@typed={0x8, 0x4, @fd=r1}]}, @typed={0x14, 0x3, @ipv6=@loopback}]}, 0x23e4}, {&(0x7f0000003100)={0x318, 0x42, 0x400, 0x70bd29, 0x25dfdbfc, "", [@nested={0x7c, 0x4f, [@generic="62c5f4ad5b", @generic="2a249723386fe59ab75e61cc607b372743d592860d2ccd519b3584e7655161cb1a52d02c0ff973b4348fc307ae1fdcbd1bd84cc25e82630865a1ebe1f16c349861cf339b056ae5b2e431eb9eea67c2446d5666", @typed={0x8, 0x52, @uid=r4}, @typed={0x8, 0x14, @fd=r1}, @typed={0x4, 0x70}, @typed={0xc, 0x91, @u64=0x7}]}, @typed={0x8, 0x84, @u32=0x1ff}, @typed={0x8, 0x1b, @ipv4=@remote}, @typed={0x8, 0x72, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @generic="891f", @nested={0x270, 0x8b, [@typed={0xc, 0x39, @u64=0x2}, @generic="7ec6d70735dd7d247e3c085bde32e1a2f6df4cbc", @generic="df555c8d57bf41b4d7e130d212a2499781af7117e9493a300defdcf43b4ab55dbd80f8a365ecf95d7d400673b8f3656256de3464221d722c82a2670631ae3c817f8c6a5313940ae030ec8355b7240cd63cacf8374ac767c3d17fe270ee5aa00bc177f4f8d8a087e86ff2ccbc03b9640e4ee64ceb27f8ded24d109107a31cfedd40abe962739c8514d5caf0b8a1c5ec6e736fec681da8a79900b1a7aba3794604a92d693fdb3e9a3f9e2f185a2bcd9fe9457ba4bc7cd65653b738cfddf9e45f61da9917a7005dde7c12b9a0a10cfda7cbd2d6d0d710cfa37e62fc978f79cf12d68b2c2aa224fc0b97", @typed={0x14, 0x18, @ipv6=@dev={0xfe, 0x80, [], 0x1b}}, @generic="202c27b107ad54dee9153e63b5530167ac597ec9d35d65c0ded0a4ce5b83a6a26eaab2bc10a2e10bddd09aa4ccf43c889b5c3dee086174afafa31c25877f6e6817235b99ffb3e0573cb938ad33c064dfc4da0e3ce1659a4110cee2adecd17637549892d92747c9200615b122bfa68292cbd1417d57becc4de2695245f6e19bdd9d7e348003", @generic="3f4d8437d4dc35a20b0a0efd8597f884eb6536950a0a71f1fb67e72420f8e1b055b9dc6ec383f03ca4860c36cfe1c7208babd2c87a2a5f68a5532b2d88ed677540ba7a7d3c33606207fc2a0517d4d0d4530390e6be31bc24cc127b3bb6ffac1e43037bcd4611df5acfbaf9e1f8d2d3f12446916ba3f779ef3f8c5d6dd952ada27cd60b9ecc5b385e2cdacdf099fb81beee68b6f81083016d49c18d139b025a83dccc00a7587a3a90950e6a6ccb3358e09448d134766a79d0fd3156ebe274303bc42e6af4", @typed={0x4, 0x7f}]}]}, 0x318}, {&(0x7f0000004940)=ANY=[@ANYBLOB="e0d9ba2284dde6048811f1b9fb63890e6c18000000", @ANYRES32=r11], 0x18}, {&(0x7f00000034c0)={0x1290, 0x25, 0x304, 0x70bd29, 0x25dfdbfc, "", [@generic="e85fa482d49b4d5c1d23fbfd1c7b040e7069af907e778fcb348f6db78b9f175481cc3ac3504b812058323da2b3e68d79b45ae4aa1ef34987831e2b983cffe4595ea7461ef4ab2770bf58e303fd2438bd376c128f545fec9771976235ba3019e9afa80059b4a5e897b1ba9a39c6f2", @typed={0x8, 0x66, @pid=r12}, @nested={0x10e8, 0x55, [@generic="90c83ff05d49a865f57a6dc668", @typed={0x8, 0x1c, @fd=r0}, @generic="17b34767114abbcfd739974ed76ca3a6a63de30af9f9618620bdc15a38663188b86bc01a4da47c5fcac89abe9a9a91f73d8d3bd24656f467cde748f7456c535e218f15b24b8278fa6e8090e94bcd62dd9130d456c6ab5ab3a79785d55ec3666ce0c0818765380965ba33f65af3dfb0efcd3f99d3c2dbbe4c18e2c36e7166112ceceb0ca361dd460b884788205d56fa3e48b0b06b247139454ae1b3fe54f87419937f601fdc3a0efcfffb636eaa61fbfd6a0f33f31a8458f8be621dd917f6d93db660e7b8075125e9bad432e21cf713c29664cc0a49c2cc2e00618dc889c133f7dfba5b4864d089e9dc61a6a9a200815dcb14a332df64b96436efb54b5d6e6aac52c6653678a5e0c744c6359ecadb816f57e5a4e1639208a9388e31a7d1d9d9ec6833507f0c537c3e52206519d572f6c79723d78c4ea58410a89cfd1129136a8f2893781d467792b89538dc75b4a257dff481f30a8f3144722d0604fa25451a21f7c7cc68f76dfb74a5a64d446378d11f70ea6b44f7e732375bacd954634fbf003c97247b177a05896f88a8c159b76444a79f83aec31f928ded3dd2f1a3760d1cd7bc11c184c649ee1d336dff2d6b3fa3c2f49dcf083bdf90d19b49c08cce5cf919e61442648333e97635f2e80da66490c856773c39d38be8390655523a4f35b6757cf145bfa3a7764cf4aa154ba8edcb33df9eb4a60b16a8de87881768fae4855aef4d606a4c7649b995dc4cbdf4d19f6682df4fe620a53a7ceaafcd4f8575bb364a5996d83e90d95142e635b5fca6180cfa9874ebb32c6117b5b0864062831289d03068548e95e25a5001f38c96d9d28786ba705c91e54d5066a67f98f61f6f933ce904554b011babc554dc67c8ecc05edbd2c56259f41b31660085ab95018a8a3004b9e87347fd00f66b73eef546fd8e776a6bd20ce1d371b780ee2dac1686d3bd52cf313c19000d7e261ebf06539e4cab12d86ddf79f186a208cbc393d72064437b030811a19ac4c8f53c9f3cbe2938b2b9d61d22cf4ccb3aa4634f1fd2507bd5f9d9197fdf1330c227b3a9358d7d6625e815b6f8e8f15700f2fe0dc0c2814b94fe7aefb50816a441f6337864f74e948ee367e5c24435abd66ff343963188004e3be7a10c0a600eaeccccc563470c1f0254a259a56d903bdf0a70f7e9f386d36742fc44749d09c2be5f5287c2c04e272d0310cc0df2ccd10f9c5f62f6432b98ecbd32163c5929148504715a19657654381e4c975ef53aa9dd6c26b641b455f4af5bdf19de97463c977fd5f7a15c99ae62bd525f6d84ef99fe07948658846f910794b1e264c4770b4d2d3490858b0b08c7c8e20175ae470712784b64da274a6618140a4669531f97d3e76c4495b3470acf8773eb3a49fc469d1d598c5f3dfac05c2ed15123ab3ed474fcfd1bb4647af0ff84bdf8ac0dcd5103b4cb2ab651643a78e76cdc00e70524c4001f6a4d638475e96307b6ce46d9b1ed018201d45d1034a9d047eb18abba6a9ebf7d9aa827fade778a74ba2df543676401071cfb19bd8910481446001bb984e5f45618e4b42765721ce9075a1d7b914bd5c84d6b471a3e758d6d5d4356ab62ae5c59533396a9ae783ca353bb77d513c45354f6cfd59bc0aecff78a2738477c901322235c59c1508c2346924540affcec1dc0387ab4e56adfca11e1f54fdf409af1932b5f2b0bf64b78f143c7b214ddb2cdc62baff41f47f2cb1d2d02915a0c5befe013519a852538dd77633a84858598599201451f3d780e8870e7323849f2b2110b4fd35ccc722ac700dd33f61df654622aa9313b383742cfb5f912ad1a4b772173d17d559e104c51544c56f16ea72c90c3b3426dc7c8f1ed6c1857680ba2a72aa1bfc0fd96c3ee7fee69ba6477f50f010f9d6df9a3d0d751a4f49a4025068e18aa3caa7880e37126ff0c2ef272b976e40217da6500bc64ed0b9f0f71c1bd877e4e2c44b9dca821dc7230a1780282d2a2a0f085bb96f7e95fddb05d1c8683e09118b83edbf49e1550289cf7b7732687000a0b17e32d28928968ba2f4f036d5b3fa483f9c9db126def971fd3c121eeddfa538a6e8bc3f8b37e8e2e9cf1c79ae22327e091254858663e627c233d3b377982a521c8a68f358117f756fb81c01c056e51345ddfce9f3561e7dd6c22d148fa469764d443eed306dbaa64a2aa026a2489f2af353d44ffff25d02ba859b42dc4c3854df8c8bbb7255798bda07689428e99d458668a78975064d8a76154afa9bf01b701fcbabef2f1c0d11115f939ebf10c1dc301e7e9a35495495101679228ba5942618d0fb3f9cade03fff4341737b9954e507a5fdae9206ba3dae5e922afbf0980238a55ee857969c88bdc5ce3a141503c4817809a0e825e1a0ba5a183eb84e7ad14d2fb6405e6299729b7b13c591bdd18eec03e499f457b90c3d8abe04e43248c10cb130750a0da4cda767f24cf4b364d872118393c3557d24aa571048bee371af7b52de6f6275dc989b46bb9cb4a9ca5017b89f61c58c7aa3c96aa7dad3ac5a7cce84349ad6a4742dc2c4b626c398d71f68fe039394bf81e7117b788b538eab5a1a4558536cb1d53d3bd0266101ca4d6d6e87eeef4959dbad24225fb219b219a1a78a4028720c04c0adfab4761bacb508a5ec92ce9baf29e040832ef8e4e1bb54fff391f2c72098e5bfe1cb2094a2e2ac0b62c20004b1f2a5af162db44c77d4991be4227cbd68c84fb42f08ccad960c840202018dc0567d382f05351f2a250eda941bb50715f2652b44bcba712032f24588c53ded62ce536c51c2a6bb23d1ef4f354c1fbad8c501aa0349a6867cc9150d0c9a7bc292d130aee537801f671eb27d342b810229c120730662cf5e51d07ef59d2aacbfc4750f9c141279140cc55a8bce5a8b289a5c182da8c9918d9edde48a095c456b69d0166169e4d3a3f668c18e08253d9ecb8da26bb62de526bd95fca46c7ecadeb742e997610f93adf92c1c59f7c78b36f0c8cf3b6540341018fec55f8f9464338e8089db92cb0f341a7512f25ce4c9c33c5645640af0b9d141840cbeb8c43391f51433537b4b24976cccf7c238972e34657e3ddcad07aa46add9bd6af1b36da7730af33e64ff1994bcb9061c5fbdf130a9dd779e87b293f43ffc014ee912b5ea407a977531cdef3626b4691b167404ca9b430e52af9336125488c6e6f522faa1b192f2a0089574928704db4db26b82d3692f59fe74a36194346ad343e53dcc69281b71eacd1ea1779cdcb1bc15437afb225de7ab0727d80ad1ee54469fb2e47f70536845a866ce75cfd79ee13b39c14f691e9dbdc96c21d8676b41339f8bb8f0e438a24cb2c676a40a2f3567f74aee3d5483eb74ee1cac4857c38c3402873940c36b7c98961d1b17cc736b83d3b43f3ae7f2be5ca058f1c2dcf1948be050785e82be3d66df838c0d5fecde26f401279043ca517f3391bc2651ba3a565a1776778e311b520f0cc9c408b77b54e531dbdfa377db91291965353171c1bbf8e27c8cdfc3bdc821b6bb78d5eb4101328b058d1ae9604766fcee73e91960647de874097c8de8ad68dd57828a2911d2cb279fb81a79d2b6df115212388398dd5fb3f95339d65788f3a9c29bc93345775faa44e26b9d36b6a7779fc1ba9f123a814330ddb975ca497dade30becb13d8982af6dcd34820d7b9f4efd3b4ed4e4ab8bb70c5420a9cd82f5598b98f729d8756f108de2c214bba8bf7224d8748924d29293faa2b2641fff975730b91da24f5a8e9dbfd3acdb991552379ab9e5a10d64d0291f991afe64283183fcf82b9e7f9ca12def43ec2519f384c4aa39934c914aa5ceefdee32d61b28ec74fa5527e04222dd54e77404d6c8092332cd2c2ce170af959756a603d536e6c385d8fba54641e90b2a5b8d32537c8b8db87fd0ce2aa09c5661d0aa15e4cdb928b945b40d0db98fbac1ce977aa5a95b51324055c4784138638cf12b30db837a5f8b61ecb3eafe89b50e49320a174df3b87adf287da823e8a1584856cf312688486bdc67613aa38be861dcc20b7c879eca3c03784b3a822bc7d512f503732060103e174402a2297071e9a65838a98323656fdb003da6dcdb33b89a5fe33ff78c750f9b1a536354a261d9f1d009a0f27276f62129761e8df0d730d30271511317c10bd5a81749238aea16888b7b8bc3d84635c64536cd21f286a2ed38c8e71dcca0b68b468d8b4988583fc3462cea24fdf2b1f9778dea216b9672601e2bcd6029dbd5ae9463e51fabf28945d6d2e8a03b76dfb2a714ed0547f09113867108c174c34e8e7e9db199e1aecf660d4f2cd707d4eb1f6058b2725a07223ab1a930c59927ee72cbcd7ac79556218729a9eaee1511b2df7809cea98cb07ddc466de699695f70083edd8dbb4b98f92af7ecd4a796572fa96dfd6882811328f9a5a0965314734364a60a686735a4c257b9932ee0127631619f7e8f7824b0061c44bdb038bec08f2c6f34941cd67f82de54334fa96f05712a450b770b69d56fb5892dae37cd50a7b4ed3c4eb7b8e7b3041b22480a080695bfc3f66202dffbb059922853ba187100c438e2be2412fa65ce0e83827215eeed3ed3d9dab472c8036ae9872be39a71fe42d49b82930a4793ac2dd7bc2283a3867309a43a33213dec1af5bc156cb87b45626c8f0eb81726e5cfd6d810410dbf67e7c348b25bf5cfacbd98e36b55c37bcf4046419bd550afee963f88713ae9cbf51a9fac3d295c2dacc78affdfd0b19ae9ad84bf4bb8b5b70c0b0e99e9722721df41d7687d2a12ad69a33fdbb98ed0509ce4b77bb7f83d43e1c0744b4af1a546b398291f4ca1cac296ee879516a93f9ed81e15897c192d33f938275c0ba4f139a0b8a917577cbd2fc8d8ae8559d7f1dbe2d98b7fae02f4cbb231c106b44c02095420ff27bf797f8df9a8088e43a81b471ddac1661fd273c9a108913cab7620874c0002debf9958ca95c5b24d7b0fe7248a0791372d7c154cbad4748a7a9e5a909227b8f329736a3b1a961d7fead4e48f792f8b52c8c51d37c67795807feeb3ee418a993ab0003eba131d98bdf6dce1c34aad754e913bb43592f2ea82086848747546ce3063076cc20f0cc10ce89b16be798a7e84cce91ce673839a739f1b47914d91c272c592a947ca937d165a5e3675af5dde88025ed9e11376f36cb2c062bb6ffd3c6aee11ff5f7e9269a411e31993b97f66a3e7e2f7ec49bf9772832cbbf27d5128e33308c9ab0f3fa60ef574036241de9536d3a315b75abfc5832df02e21854fd7f30230151dc457d25759c8c0456efb2a688ef51e41e4b33b376f561f4da8bd5851de448379e6e6c641746a37afb3bc3496fa9519dba9e9f801f6eb15594ecf13084297528501430123c247ee0145806407aae25a1d4035b8658af3db7a4f3c26ed55a8c0ce91599fe93a985fb3b3796d575fc2fba48822a11b2f0bcacf021e864f030403b8a07c7a1566a3da46b74ae251c46e4eff6e3de37e2f6c3e9d32822fb8b7ed270800683fafdf57968cf4ba20d02addb98e17a06b8e58681d9d5d73a691e4f72e859fab595ec1763c32fcb53fd73f3ec0eef6bd1bdbdffaae0eae582ca4cd440fa4b4d4be774334c7a5a00211739ce9c0d6b71dd990801d96e2a318471360e5507e5b999b7e11fd40cb053ccb8eec3f73f7dd38a31c49ff0f73de971a770959b7b4306c4852e1aff4f86bbd47d46b0c777cb20d42d1e566a3d7675dd48c12b8c5e1b4586f52d9e8c6f732da4fc20b376205b6c349b56fc550432145a72481296f54c649c4fc0ea53af85411a246c0c97162d722", @typed={0x8, 0x36, @u32=0x8}, @typed={0x8, 0xc, @uid=r4}, @generic="8d1507f4b4c1346d6e6f3d0cc42ea968958cbdce5314fbb7cdbed5f87dd525ed8096e8bf9e9245d7178df4d1d16997cdacaf5d616b392c684ad2c137cc992cc178892e62c709ebb279cae6a2dfab00d0fab8ca0376f5b928982ddcf88dea2a82274e475d928ac614366274d60545308a69343434eeb692464082a149723ac763f44e054e3f74b8b0c942a6b9a0eb9ef18947ddb4ff6292c8f3453b025901450074c8dfcb7e9ca1714994a17add34b787bc591c3846e8c8e4b5fd93a72f28"]}, @generic="79db9c4208094c4709ce51f22054265d881ba37e300bbf3e4cae36199f6b5407018033522df2e3b6ad62818a434358489d6309b59609d368e84b52c30a93377a613c66083f707d24ea9c984b1f9e52018e38c93ca2c379edd377e7ee1f4bea9e4ef147c12e8f4bf4f3ab2aa03da4b646207f2257fd45f95184e55394cc0d1fef4ecb8d6c36092e86d122c43bd051cd3df29f9505a150a2fc5c1caa102dab6f0ede", @generic="b593ecaac8e593e5b5f32beb67fe26b52816bace57339fb3bfd3482bd4c28c9c0c54efb9e6138541a0bf670f4eacc7c47ca7b466081ae6f761d995aea523bcafae7141201fe9094669a6fad432402200454142745a073d639d0b6fa596e99d55dccb6cfdfd10f48d7fa6cbb93cf8ed99", @typed={0x8, 0x21, @pid=r13}, @typed={0x8, 0x7, @fd=r0}]}, 0x1290}], 0xa, &(0x7f0000004880)=[@cred={0x20, 0x1, 0x2, r14, r4, r3}, @cred={0x20, 0x1, 0x2, r15, r4, r6}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r16, r4, r5}], 0x70, 0x4040810}, 0x4004000) setresgid(r2, r5, r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 423.157727] input: syz0 as /devices/virtual/input/input1683 [ 423.164243] input: syz0 as /devices/virtual/input/input1682 [ 423.166250] binder: binder_mmap: 24949 20ffc000-20ffd000 bad vm_flags failed -1 [ 423.196484] binder: binder_mmap: 24949 20ffc000-20ffd000 bad vm_flags failed -1 12:46:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) io_setup(0xdb6, &(0x7f0000000000)=0x0) r2 = eventfd(0x4) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000080)="ef611fe3f56b664bd8204b8439d2f1c2c9019a55d975e1ab5ebc328dea7cfd260c0dd3651ae595d03f6d611f1a45d2519af5cb9745f7ce20f737e06626384185b4efb3ea5ae725", 0x47, 0x8e, 0x0, 0x2, r2}, &(0x7f0000000140)) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 423.229105] binder: 24946:24953 unknown command -2041683041 [ 423.241317] binder: 24946:24953 ioctl c0306201 20012000 returned -22 [ 423.248628] binder: 24946:24966 unknown command -2041683041 [ 423.267911] binder: 24946:24966 ioctl c0306201 20012000 returned -22 12:46:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:13 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x1d}}, 0xc) r3 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x14010, r2, 0x1a) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={r3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x94, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="08631040", @ANYRES64=r4, @ANYBLOB="0400000000000000076304400200000011634840030000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="000000000000000001000000000000001700000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a747001000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00'], @ANYRESDEC=r4, @ANYRES64=r4, @ANYBLOB="05630440020000000c630000106308400000000000000000"], 0x0, 0x0, 0x0}) 12:46:13 executing program 5: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7ff, 0x1000, 0x3, 0xa1b, 0x0, 0x3f, 0x3, 0x3dd, 0x38, 0x1eb, 0x7fff, 0x103c, 0x20, 0x1, 0x0, 0x3, 0x81}, [{0x1, 0x2, 0x1, 0x9, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x8, 0x7}, {0x7, 0x101, 0x7, 0x10000, 0x2, 0x1, 0x101, 0x6}], "0947144f020603b69efe6b79e7ec38abb6f221f51c42fd3cdd14fde5622946908f826e745b2dda70994ec9a770d9d4aa9e4ca5f2a75de76c052cdef347b7bae99092e5dbbd8ee49cc0ea034da88916a19250259f6c32e11b5a32420dd369ddf52afd0c6e3854c1892ce5fda96ed984c3c25c0380fd3caa4af972f561fdae815d11fdb79b2fe3857d08f181214b61b326f5b96171acffbab0c9ee18727f400bcd898f48687c687b63c9c0918cdb2cd456e423bc0a28741a84e83d3fa8d5eb037946d138af3f72f1af0f96b7f463", [[], [], [], [], [], [], [], [], []]}, 0xa45) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x22088000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r1, 0x0) [ 423.288804] binder: binder_mmap: 24968 20ffc000-20ffd000 bad vm_flags failed -1 [ 423.305207] input: syz0 as /devices/virtual/input/input1684 [ 423.347258] EXT4-fs (sda1): Ignoring removed oldalloc option [ 423.402296] input: syz0 as /devices/virtual/input/input1685 [ 423.415087] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 423.421318] binder: binder_mmap: 24986 20ffc000-20ffd000 bad vm_flags failed -1 [ 423.438922] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 423.448681] binder: binder_mmap: 24986 20ffc000-20ffd000 bad vm_flags failed -1 [ 423.473772] EXT4-fs (sda1): re-mounted. Opts: init_itable,jqfmt=vfsv1,oldalloc,grpjquota=,i_version,journal_async_commit,data=writeback, 12:46:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x1000000000081) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x80000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000280)={0x13, 0x7a, &(0x7f00000003c0)="28507e103380e971fe470aa1f2184fe8f78bfb11cbab29c07e86a93568227afa71c66df67e92cba8ff735698a4240dd0dd1a84cd02b84cdf95e9ae794448be68b3e21e2069e2855b4b6a89059ff78ef6bb8a819e4ec33db0b1b714ca8dcc2d3eaa3d8e6ad8b9055c0af723a12a85c2d8dc6a8ecb7fcf85d58f3d"}) time(&(0x7f0000000380)) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.capability\x00', &(0x7f00000001c0)=@v3={0x3000000, [{0x7fffffff, 0x3ff}, {0x8, 0x5}], r2}, 0x18, 0x1) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) ioctl$void(r1, 0x544e) 12:46:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000100)=@v3={0x3000000, [{0x6, 0x100000001}, {0x0, 0x8a}], r1}, 0x18, 0x3) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) 12:46:13 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x380, 0x9) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r1, 0x0) 12:46:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0xa4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463044000000000"], 0xffffffffffffff51, 0x0, 0x0}) [ 423.569039] input: syz0 as /devices/virtual/input/input1686 [ 423.586312] binder: binder_mmap: 25007 20ffc000-20ffd000 bad vm_flags failed -1 [ 423.605112] input: syz0 as /devices/virtual/input/input1687 12:46:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r2 = getpid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) 12:46:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x8) 12:46:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 423.629744] EXT4-fs (sda1): Ignoring removed oldalloc option [ 423.666178] binder: 25022:25028 IncRefs 0 refcount change on invalid ref 0 ret -22 12:46:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x812, r1, 0x0) [ 423.680254] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 423.699945] binder: 25022:25028 ioctl c0306201 20000080 returned -14 [ 423.708425] binder: binder_mmap: 25030 20ffc000-20ffd000 bad vm_flags failed -1 12:46:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 423.726048] input: syz0 as /devices/virtual/input/input1688 12:46:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:13 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000040)=0x1fec51df, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'ah\x00'}, &(0x7f0000000840)=0x1e) [ 423.856431] binder: binder_mmap: 25049 20ffc000-20ffd000 bad vm_flags failed -1 [ 423.884849] input: syz0 as /devices/virtual/input/input1689 [ 423.896175] input: syz0 as /devices/virtual/input/input1690 12:46:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044000000000cc38b8c2c503fb89fff0adbba13bcd5593a7b7311a1eec59af8bf84670f4920a35d814d199cb7f4c3c65e5244c4a68b9ce0057de6f08991cb1acf4f417e84a545685382c9c6046cbeaffaca97f05e38e81d68c860851f43015cd93e5aa54ec9e0e4d17558494d8b4d72cd4ab53d673e345ff70f330dd7c99c8a401d406602f16adcdea6d674b74e7b30d2d2e2b73ff805625658e3a"], 0x0, 0x0, 0x0}) getcwd(&(0x7f0000000100)=""/159, 0x9f) 12:46:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000840)=0x1e) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) write$selinux_attr(r1, &(0x7f0000000740)='system_u:object_r:usb_device_t:s0\x00', 0x22) r2 = fcntl$getown(r1, 0x9) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000780)={0x0, @initdev, @local}, &(0x7f00000007c0)=0xc) accept$packet(r1, &(0x7f0000004a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x2) sendmmsg(r0, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="97c57334151aafcb5e74d10e7bde906d1b0f23f619b3fc918a22570024a4348fed136fb89db7605356ab61a10dc0e99540f67d9afff451b22d17bdd1176a7bcec216a363d0f7fa70e43f59b1703b9f2a91d3b61521532c7d9bf8bb263d673fb38373194f455582d25490fd2ce69cd735474246fbc38129d0d889e4cb56db5349666667e4a8d7dbf203248823eebcf3e9c68650b408079aa56b16c3997fc406469cf86353387776b7189ba2865fd0a6fba5c21d1840c72cc9f980dbfe0db42e13381f1991fda53b217fb972242c4661cbba59207af367a490", 0xd8}, {&(0x7f00000001c0)="05e0553381829491507c84a27ff5255de2ec1975cc67167ae4533e80da148ca6c6712dd1748985557be4f87b50565806fdcee7e8c28bae15426bb872237805437f32cff3dcb2c39eb0ddfe7391898233b67436d898da", 0x56}, {&(0x7f0000000240)="df8113f78dc39f74418899c5012073f444f8a3fa640323de2e8ec5da39b8bc40eeb0b9d6f6d21ce4404f1ee411e52af024e06666e57cd175bc7e630b600d8186bca6000292b8f908cf5b5dab5be3fc41fcf0c9ecf9dd922f58d6d3dd80932d2f5847995610e343f68527ad", 0x6b}, {&(0x7f00000002c0)="5700e32987e75064a9bbca54127fef36abcc2a42e673cf908e13722d19c28c786fe473b86b15fb06026f26825808de117300b40994da6802e8c7", 0x3a}, {&(0x7f0000000300)="2056f2bb73ae90b8d45c7c85865d82ce6f36265bc6a613b434db12df33b3b57e15e93a14ff9dc331c352748feb50ee7c53373eb88fb907674035fade81a55ca9544982cd6d5ee96498e817cd6753b4ad24cb759c39fd0230e15e9a1ab069f049", 0x60}, {&(0x7f0000000380)="1be04bbc13d2105173d6df2aa2d6aa2396fa3f56da9df5d9e5c23706675da0acecd15a9e7c174ac8e198c2d1bd39f335dc43a42071f0893d7df61af10e511ecfc51f3e1cf956adf35906c9b8f09ea1d97efb364da3f603b6aeaa9ad3a496f423f7fe2753b87d956995b43224513f05515078530fa622e00b", 0x78}, {&(0x7f0000000400)="0a0795f20985f122ac143a04cdbc75af49636004d27332659c88449fdfd2594b7acbbe", 0x23}, {&(0x7f0000000440)="1bd88ffc97fff026d783fbb127a6a6a6c47a493624eb1f15054b63c96a689a7a943d1dcbccd07d993f045ab123d8065254c6ca8d2a432d729da07e02b57250d0b534f528e6faa71e0ac7062763ad6afcc1d50379a8783e1daebd87362fb85cc518be9f822607bb7c07c9debdb1a2a95d6f1ecc97275fb618e403b09e2b5c009e7af3bba731f5fcd7b3aa20c9f30cb5ef588accc1f41d8d471368b6ad6ffd92e6b94218b2fa72bdf3f22cf389e93e1e3ba5a15214871a4c679b8f637df1be14cec2f4d94808fa2694dd3960addd4fb063e6aee029ae50b14ed5045009632430427459b9768c9fb1814866861567a37490419722afa6", 0xf5}, {&(0x7f0000000540)="8cd10cf4bf4400146f232e888221310f2a2f1e584b529d754e6271e50c7b43e6abfe312d4c62fda78aed0131868894dbe0595de3b8a11467a5d623919a5d5f900b6c1d1c3e9b47eac50d32e08831469d9920f887e1c6e55184bfc9cf90e9e26f26d228267e5568ddab528ed7d525fec47a308bf76c5514226c2c72d45d38e6ee30bd48f4a6ebb7a8fb32508fea9cefa268d37f03d66a148f58825afcdc2cd37d7c1054741275da234d41ee64aa0cebf59ac715da78e499cbe3bc73f910958d6e5ce3767fb9615afe8662b52424d88d2347c531392815", 0xd6}], 0x9, &(0x7f0000000880)=[{0xd0, 0x118, 0xfff, "4e8a3c81be842bf87376314911a7c189fd990074e794caaaffca1da79c3974d734376994ce5e91795c9a4c05a044c1ab9698c2fc4bbdc7248c38cfdca9fdd4b54c6f4a9b9ca11bee7a7510f719d05070339db276fa9a94241192137bfeea60f3d6c227058952ea5e96681ad54055d07e21110f7a506196767f68049fe814ebb7f726bc012914bb60cf810fbaf322834fcd24fc2c57f488b2c3f53a030fdef9f66007d0a8608af73ea4dbd225f38b6f6bccad3d0b6fc5c07ad2180f8d43"}, {0x60, 0x103, 0x2, "aa41f6844add458338b7227c719bf850bb97dce92999b222fe4493d4aab189833e9900cb1295383ba0272162bfc91d52f9dc84dbf17226f7645d9528b4cf02c9c0006b3ab89394ecad93c90379"}, {0x48, 0x0, 0x404a, "86907fb9b6ff46c51cbcbd0fd48fc35d1652720e3520731893a902e79503c2b36aab6784f02405cf1fb3cdad1609abb205"}, {0x110, 0x103, 0xffffffffffffffe0, "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"}, {0x1010, 0x116, 0x0, "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"}, {0x20, 0x11, 0xa81c, "1711c1b2229b1c33fb951893116d5e10"}], 0x12b8}, 0x4}, {{&(0x7f0000001b40)=@can={0x1d, r3}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000800)="586881bdc5054678794c6fe27c669468b312351ebbc932fc7d49545b97", 0x1d}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="814f7c82494ed76d5f73097c6b9f7360a8e8931f352ad7363f16aa3f40fcef13050bf9e28af33ca30cb0472055897c49810c5e1c8cbfc47f21d4c8da41f27841c08c9e85320302b3b93a1303867e1094dbfe1e352b4b872727fcf01bb2a051c1952942f5216c68aedd8cf8eda27ac5fd08babc582eb35174b0604b626aac9e10a76fcd55e3417e24d65f4be1a0bd3f72ffeaeda201171f4a0025a6283325e69fd2c606c54aa6ef340e812136e9bdf976e75e70bde8d0132a9f6a001861387a6a3769cc3946460c1fb763832df0e9748c126e80ba4a28e8ed89645ca3a7114b3433dbbe1f1579c62a057dfbe3220b9336a591eeb6fdbd82002c", 0xf9}, {&(0x7f0000002cc0)="d1025eaa60ffc2f03ad3bb1f02acc060353d78d82af20cc305823ecaad812ed1a3426979e9e5e092e01c00fd3c0ff85be8d02c960a8db47e32922b0baa78924acd18a7892fcaf5dd7655e003df30cfd6f4c6fe31e1e462e40be9cebc2bee25efa863578bae01c2e62e21e817929db9bd18fbfe048716d8fcb2c43c50d0f0b1c858b0d66af523a86e3ed348ea151cb3486401d9a3bf623de5d14ff20531cc2ece5b68637d", 0xa4}, {&(0x7f0000002d80)="340903020d29331d33928ea4", 0xc}, {&(0x7f0000002dc0)="b79345984270d26ed48bd018dd3b6aeee248ab8e6c0c026d6665d0343e7eee42ad9e3a75926f3b21fd158e096b75b26c2d30b9a5933be11f810640f6", 0x3c}, {&(0x7f0000002e00)="5e501dc60faab552e4900de15c4505f5fedb54d6256906667fc969c12e80c8d785fb60183069af40871bd9807b44ee958d92a9af4a3d8c7ab487488f16829473d514a1cc253251cc0b78b6838d476665f3acc051bb3a88c2613653316f780208601899395b6576198d484fde3ebf80805e67ac33e2562e2f346a918f1bc400734120f8110657272d3cdcf9ba080f040f81f862f0ee68480017", 0x99}, {&(0x7f0000002ec0)="d4fa5877543f342d035369bfddf6f53bdd4399305ee86fe8d303ac4044cfb44c6cfc3f7bc82d387f912b290a194ed0d3e34f397c3631d9ffad461ffdca5c77059615e6f5264610fbfd021d6d4ecfd1126f", 0x51}], 0x8}, 0x7fff}, {{&(0x7f0000002fc0)=@ax25={{0x3, @bcast}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003040)="b543b936731b79cbdad22d6365bbc325e950097167982ba23b98b731a4be41a7244f2013c4b40cc3f408565c1647dcd19837c7f0d7582e5ada4bb67032f5291a934f38cfc7ef9bc117c3ecf754aaaa7ed3bc665c9b0607558f1ad802ca50526cf57b6723daee7d8d5716ea728d226d2e72ad04af5e060ed3f895ade554d40014110394372697c5c9e79e1991c3ff2af41bf912c19262de1ff85e2a226c31b68a0d06329a8eb3ebbb3a0e257e9343f358b7902e9a66347718a4f7ab403dae5c5968a9bd", 0xc3}, {&(0x7f0000003140)="67cbd1e7d74f5433e49d3bfe1710af93b428dc000a099d9485e444e81739209633d2ec1305482ba168e0d3becb35fd555e06364b25626dd318324ae719c77fbbda42d078891ae2326933062616280bfeeb91a9153d1b46ae675191f65376d8cd685fe1ba87f9df43f8b63a948b4210da43162e6abac38946018265d419e771de9825663fe414c04fbc39c548a21d5fd5d0f7071cb8ead2a880cfe7da23e62605c735d658f15dfd2a6983d6a4bbef3fb36ef9d245ac770436d2b76cfe28b836a79525568d0983faf5a0264763d0a0afdc1b52104d040c3e", 0xd7}, {&(0x7f0000003240)="2ea3bb74f7e6944d97fb668a3b066b12f0841fbfe2de92297bba8e83e63f77d6afe5bf6305f7c393dca46aed6136c062b08fd6faa4bc916fdad5f75848b724d20684ff2e20b6e5892234785f49d1c28937aea7f43016d11015854363319b8a3be37fff0f05b2a2ca0276c6ee90a553aa5d74f133154f8fbe9209f5c04cbb3217792524e084820482a78f0b636257aa6454af63a145a9e0d7a4c6a942907023b150a3641245adad119298ca59d2b88fda72f835a130260abeba456983395b13727d7e7e1538d8a0abca34801ea695cd6920f04c8b7e51a803ce8d89961c3ed18ed3f7b77fa44b", 0xe6}, {&(0x7f0000003340)=')', 0x1}], 0x4, &(0x7f00000033c0)=[{0x78, 0x10c, 0x2, "0170700cfd3b79231034767f32978f4a9e3315fd4558b7e80224a29500577afe3b23676ffd30db8d73608d58a7f9ad606ce940652d1ba6536de984b3951e6914cbbc28898abfc2624bd16645c6fd916986780ef367bb5872ab3fcc18459291fed6dde74d57"}], 0x78}}, {{&(0x7f0000003440)=@pppoe={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'vxcan1\x00'}}, 0x80, &(0x7f0000003700)=[{&(0x7f00000034c0)="ca46c1aeb6049cecfebb531b3bb40a7d1a60a56a5949f330596d169136d37438aae082b299a8f8e83bee4c6be98437797bcceaaa0fd5e4f951f6701bd96267a4b3e45cb7fb372debebd9c18bbfb45d0a68da3743604bb6a38e199993a78a14246a4ac0074fc6cc0de75f5f73672459e7b089be558769d915f50c225e", 0x7c}, {&(0x7f0000003540)="e761a5cdbbec2b09c0636d3f081b60dea98a67af5420be8a355cd57c189c916c5f41a650cee7170037b7eaffc67b265d4234117b59cdfb5b441149054847e7ad1c593e2eeddd3252780adae7ac6cccc5ff392149310d84b563", 0x59}, {&(0x7f00000035c0)="36e576d9adbb96c61200a540a959dae3888d3c78254c6dd94ed792ebfc134c54af292b153a464ec6adbeeb161dfca3278c75205c07", 0x35}, {&(0x7f0000003600)="2c9b173a5d4faf4b2a15df719cecf5359dc2a10017035ff216c0568a59c2cd14fa11e37aba71739df460199a098991512e0d40706e3535766f2bde15096fb65a22a58cdd8195494eb2bfd503ecc9fbe42d03ac06e8ba073fbd742b0c18a612dacc6ab21d77723b0ec214accd39be5550679818dafdc746af87707f7607f9f43e9815bfe3989bd56674a94b86e86844ad18d859199ea7d954fb2ed46a0d0b0cdad0ed8eadcea0d8db4c51f9770545029f05f0ea3a2dd3e440bdc8ec33247f5b68d0af9d145be3fa0dd6ab7d31c670a92d476d86a7c597fe1167ce75c078e1d1940b6ab78d43cefc6fe3e0", 0xea}], 0x4, &(0x7f0000003740)=[{0xa0, 0x19f, 0x100000000, "812386b3f3c9653e84078056bdaadf3428c3383075ec5d7a852fb5f41227a749f715fbe99d581b14ac57cf7837a851556037a91a6cdfa2e4d68a00dde52b09356d14a8cc5605b46564b1014790d56f5bdf4f316411264278db3de9648a67c9521e4c6f653d76f7dd6056d1997591e864b7f928c47474629a5965bfa7f8474c254905a9ff603d7c122cf337"}, {0xe0, 0x10d, 0x4, "42aace725d6126280756efc3a0880d638efca7b7406cfb8542f8d557cc132a96ba9b942dff4c4270aae0278f0457266fcaff3039f5427a8522d395c94c1654fbb85d77c8220228378926bc2e1ffd4e05f8bb049b1316adf93ad4021e319f7b236bee452dcdc2ea0a3d496fc5c50eabd3dbf731a861e9ece356f4e5c0527491261cdd495eee2cc38970df6d490c6a3ef9a1c0021764ebd9880154048edb0de94298c46d873a5805742177a2ce10f8f2feca9ef723deb0061040447bbbdb568b411bd26107d98dbdb132766b863a5d00"}], 0x180}, 0x7}, {{&(0x7f00000038c0)=@nfc={0x27, 0x1, 0x1, 0x7}, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000003940)="ef1d0ccc02b40811e255afda57d80da0adeb476169a78d68fee193e0467851c5adc43f18c11020fc2cf31feaa8cd8bba6a77b7aff7fee127915b9ee731987eddb4310ed03cc261ee3de49f7ddf6bf03f49c7c676e97db3", 0x57}, {&(0x7f00000039c0)="cd8907e52b14de51f94d2f96ab74bd728f01db38d6a81e9663ddf00e44826348df0ef9018d09d0398f", 0x29}, {&(0x7f0000003a00)="14e481428f7264cafe950d08cb16e81eb2d8167b7340292323", 0x19}, {&(0x7f0000003a40)="c1436cc5d840bb364f167754d8c4a167570129cbba4e497a36d522e778a1cfdb9269f61e380dafd5c057abe877a51f29fb97c8da59de9cc267026fce1ff0809fd9e25e96379de55a39a4b7af4a5da3e6cf7d7f9b3b20b3d07b3bfc1f6543f22466b0388090ab227c79d09f7a03783bc6a70da9e8df1147", 0x77}], 0x4, &(0x7f0000003b00)=[{0x110, 0x84, 0xfffffffffffffff8, "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"}, {0xe8, 0x19d, 0x4a, "67abae7230656b224580003406138a3df6b650508e5fc39a78c4bb92788b1671a139ab0bb1ce63eb81fdfcfe83d999827f46ec02c46140218ae0565899d725a565db656cb1055b9b87076132fec68466d051eca6e998defc15a307dc5d7545a12b1225e31a20d144a0014c78b435a452cb39c8a36426b1febacb84905bb32c3e0d5d9ffe79354da58292fd2d85ff6f7af109bad4f67941a8ea6d7866e483f3795c59283d035b926802a8da1d2032127a40c5aab8e592fe5064ecc85b6867ba7b338dd42b46c1acdd9a2f2fb38f0d698ee662dadecb69"}, {0x38, 0x109, 0x8001, "a86db7ab8e823ec18831d99ac9a2bf424ba387e21cf672403799f711cab260168e96e2"}, {0x20, 0x10d, 0x9c, "0d049108acd41c1b6ca324"}], 0x250}, 0x3f}, {{&(0x7f0000003d80)=@nfc={0x27, 0x0, 0x2, 0x2}, 0x80, &(0x7f0000004080)=[{&(0x7f0000003e00)="a590828261908e3c6d1c09eefe4ce768f4e1811f21619f449d754bb33b1b46ea342742d0debba037e677e8c340993bd2aae6bdb131f59e6f38e2cc77518178590f81acd95c784e4f8cada3f1a7271cfa4b598b9fa5987bc4139d6a8e5af150abf1dcafc53aa4d3680a25032a444f133fb488cedf0de4d562ddaf7db600494e3f85af9c5d04ff8a538a785c898a2d81069e29c11d1f0839807007182afc76bbe1f37353fe8b48c952443b7ee1f5b83bf157e0bfffc418ccb95012032048a51946e3fa", 0xc2}, {&(0x7f0000003f00)="b7a1c22167824d2e93d4eac86e4c661ec6611766783c7b0909f2399537589a2bb580e4acf3e412c558c0cae537eeec49b58c228123124244fdc3178c9a33018bb36f20720e4aff57bd106cac2b4d327c81e65147b2ca3cddf7e04f826ab7e9cbd0d4cfa9099890343b504cfdbe6439862f0c2f96a9126188fc2bb35dc1575febdc01503d9ccd4e754d80fc32a8032b20487b13b1cccf2ed2fe7fb6d271fff07a0a052cca6e38f196bc244e7175437f17264abc00e82219cd4c2c70b4f92afaf233c8ef82aef41eb84cc202752a016797cca2ee7a3c7717540fbedcb9ca67ce7abf06b3b5bdac9bbc", 0xe8}, {&(0x7f0000004000)="e163ed4407461cc0cc85e3684f6e1f1f744b591c59ed55d014e27b06c923c33978f575364a927087551fb8e739f7ef3d5282ea7ff4f3f2a8d91255d6ab38bd8147", 0x41}], 0x3, &(0x7f00000040c0)=[{0xe0, 0x115, 0x4, "10ac36710d371194b66d38b00362d4cb76d75ee12f5a754d2e3a513d68818b37f0b422365e8c64c11264a416c2c699604d8f4f99fb76c5ed5cd881a4c6250433582254d190e4dd50f051d8f9f28c121d3fdd24dd215859ac460486d2ab7abd47ae0f268db52b65bcae84e82fbabace7ab9677497549021521a4ea3a21522740ddca75876b446223ab85e3134e9ac63b2091ed65672ab5bef90a201d24f2645a031a5d18421035de0e61c2e9c1e2e1f3f71090a3645690c66f6831a501f4c078c0da4951e912928e9daae27e6"}, {0x58, 0x1, 0x9, "2a67012e4f327f92997b50176348e815527936d4e6fb00b2a94315bafd8e6613a009882d7362aff23d514d671ab0f49afd5087c659d887cca9838407010316310cfc2a"}, {0xe8, 0x109, 0x1000, "b3422deff15cb9bfb5af1f0cdb7d9082c5aa2b2329ca1c523ecfa252872486f296a27b6e41857488d8ea5df423088cbf7c2d93dd13d2fc0b35d110e0566abe1122e30d1b6776951dabd17a581abb52dbe7a7e7a300cb9bfaf798c55b09eadf4f3d5cf127e9f8ac3aa656af5d29a517dbedcc5146e8f5da464a3560ddbd7b98aed29638f1e1e09d9f9d9b92202dd87a884d24a65cf9cdfb6b4c011ebf27db7b3636e4176c234e898911e2c3b05b160b6210404e3397af1008e97d74e4d261cdd13d1d9bc91ed2e174b151c81219d872ea7de946d8c36037"}, {0xe0, 0x118, 0x4, "e21bc98fe029205b8dfa4bf1a9fc14e2df0497a486255e6b34f8f1a327764e704d65ea7f3085a0c7baedce3c1d35afce0efed59d76467b71a7efa60f492d007a02b99d1dcb03dd7129e9085fd3ce234b3192a810ba8e4d0355a5fb092a9515c4d111e40015c3d55ee00047e73f379918867011486da4de16a9e3c22f7a511ade40a9b94b47168e619357e654aaa3e656152ab9caa88ebed23fd9aed2b2fa35fbb83dbda21fe1e8675967743e029a9df0087edd3c77b38c175de54aa246bb8da5ed0ad32a442888b639c6ba8534bf"}, {0x110, 0x10e, 0x9, "1ebf6a09d1ca51844bf9ad64cb98bd6c9b8693bb29d3792d2dae3dcaf02208b951836de39efa76485dcf63075f7e6598096f5bdecefcc2db49114da930496c621907f086c78d3d0ac8df46cb6cf50e93ec5a9f77cfb979d84e933ab2b01839420b053285054a024844d2bb9877f825b4bca9a39db041a0848be611807af51bc376502210c869209cb85901e9425bf687d9adfd0d41c621c0fb7154be6178fa0959e403a2980e4d5bb35f03a4266494c6c8ef9dad0bd4df896bcce3166369cc3136a96e7830957cf89198fa4f1d1796bd9cced1da3ebab2294c1ad1751bed1d386948caa8c1abbfd3159a44b30cd037e9d73e645d9896744cd4add3f6e0"}, {0xc0, 0x139, 0x0, "e85ebc000a01ad7ce80f20acb81ed692e1a23f12e2f2cd79430f53d7a610661e8f1e6890c0a34c71b1455d26479beeb9c83003cacb66b6c89737590432a6f2b5349b32ba5a4f26ca630692299d7e59fb77f5dc75de8b08d12c0045a1f7967318b20d9324c98b0b1d1f0af8f0c7eb8e1d951bd0efc2230690415bf57e23bb4d1ac73aa0d683160e67f91f24ab4825335cdf2747ad8fef797dd4735cb21387aa7ba1da5e2832e7d896013851661c4b3051"}, {0xc0, 0x0, 0x4000000000, "85d798268998e6f4d593b639967d3d9c7bc70fa1a153899d216c3bb8a6f967ef028cc30e4d30944a7acd1e7f51870241d93230e55d07e992237a1aab07b8b67876d61e0620f5ea8441b7d63553cb67566a2497221359761c8e40e4b07f2ee3451c65f5db79b2c28aa76c49660b7cdeac43e024eda39643aa80eda5eeeeb76cd20314516e18fef1b8b90391213cfc5667655cbba458c4faffdeb7780e91d335d1e3aee9770660428d99e17a129b"}, {0xf8, 0x112, 0x4, "a22f9cdd1a0e7801bd056e3825bbf124f59a3687cb92626e1057b7596dcd9bc3f8830d389c1dffeec1ac62b6100579284c1c55417c4918f5a32dd58a621ae42e52f2976b3eed0a1c078353ae611eebe94d43444cc92d1075e80c4e0a627f380912dc0f9809065ca746a6bc178068a38a95e494a946e8b5b43b2d11c38834630b920c4483270283f31f108f35e58fe8012e4e27e9420a49b4c38a57ff42ebe93658545172ee7fa4cbfcfdd262b6301c62768db34cddb2825a6d9ef846b210adeecdb0a8dfd59231b33d8a6c17f5bf3256a214e269c5e3534c4f02474fe8ff410fde1537"}], 0x688}, 0x5}, {{0x0, 0x0, &(0x7f0000004900)=[{&(0x7f0000004780)="6c8cb681fb0adf64f4f7a1f3e18901847c59a9a055708baff456aae02e7acf3443d4cf4b32ef402a8bbfbe5fe44c0926de842228bf659d3e942a99c8158a5d4b220136f6b2dd5d5f67810581eb4ae00f0c7c6f04c1fbe1494e76193b44246cfe7acdf1c276bb23765b0d1514f84a3f3d7eb407ba3c056853596f6b6b663009587d4673aae85f25a771007bccf1eee24bdd48cad243748322c4bd2910ed41986e04d63d6abb", 0xa5}, {&(0x7f0000004840)="be04bc44862ddb6537663321c65aab561a4214624961f026cb83d02b2de707ac84fde16777c4e1045783a50098faee0484ace949702abb5400414139487dc65f271933f517bc9cfc53c71ce9c58efd15cc9c09c4c6d9665609f42c93", 0x5c}, {&(0x7f00000048c0)="3e557f4d037a8a6cf0b8c503d210", 0xe}], 0x3}, 0xda}, {{&(0x7f0000004a80)=@ll={0x11, 0xc, r4, 0x1, 0x90a, 0x6, @dev={[], 0x1c}}, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004b00)="d469566cf13ab6d7649a3358166cbffd9ea376f4e4dbccedfa1349b1af5d6f215e54d532ef5dca1a83306ffb2fa3a9a1f0c4d1fbb5c8", 0x36}, {&(0x7f0000004b40)="c09dd6f3413ff6b821fc43a760c2282ea8ffe7c50594e72784f0cc3bb96056e578a3", 0x22}, {&(0x7f0000004b80)="292f02267d1a66da0c3f98358ef95121b376661324d8678f2b20b054c46f5ed495ad3bc6f10e092b4388248f454aa7e2198a", 0x32}, {&(0x7f0000004bc0)="d7ba38e7165b33b2f0b80cd34e7ecca5c9e31a3944844ca22ce555f56a10aed1075f8160941bc61b513f404d80e493bb8de3217b4bd6dc419c0c1b3c91855c1a", 0x40}, {&(0x7f0000004c00)="9079df56fa908aecfcccdb27974c236eaebfc23c045fef2e7c2b5d35e5798164932fd9b2e19eb94ebc8c12eac5aba427a0e7d5fc17b28e5a68f840b4ce4a", 0x3e}, {&(0x7f0000004c40)="9861661fb0b2bf0d146d2a526b4a8fbcfb68c9488c857fa9a2119e7e60f2aebcaf668d574e7f52cb69078d0265", 0x2d}, {&(0x7f0000004c80)="944e800bbfd82a37f1d4158063c4ade1ae720fb70b64340a56e309cd3f4354f4a57b51761d8045f5a0ea259dd9277bef0589d8720dad59dbf07cce667d48d2fa9150baac41b6d27f7d0c616e630f85f7357707db229272b45cfe17630594e448d557f3a1b6c7f5768e8eab2863ce9f5fc0725fb2da921877bcc5bb04eb4a73e3a9f50bece7d4106b7b67ec40408bc489f3", 0x91}, {&(0x7f0000004d40)="9820b21bd48b74619e4dfb8800a39aabfad1cc26444aa286be655763c67c5f3857260b1841b95b4bb1158a2959083f08ea93e6e2dd5920291b2bf22a1a7141eccf78922d79352f44b26d3e793edfe0441ddecef254d6271c0ddc7fe5e009088620669dfa74c2a6cc97a31e3f1fa70505972cf52dad2cff4c7df6a650bf069483afa7d5610c5b2b81729d7b844648a667cd782331a9f95afdb11a1042eeb8c402257bef6653f5c0588c37f2957235f9d3a2b057fbcbb54ec91c46c8961d52ed90a082f5c8379f09a515c3d1ad26dd76efa0282759dce0efe49ebff53a2d4dfba7", 0xe0}, {&(0x7f0000004e40)="2578b50cc58e3edbdef8f5015904fb458fdecfe9946b7b759494fdba7b4bbb69bda74259fa496cce4cae835502887b3a3cb015cc4c1cd63511e333558b6307a51ba410ef6b69d89f9ce8131f8b1ead1c7628f08a62aa33751f441f2490482be066c77014ae0c3ca73d01f7b2def9ebb423b3d54fd056f1feb75994da70cf0ada9bce7c6d74407b8b3fa81c0d67754fe2c857aaa7204efb364d18d189a4bfe5e9814098f2aaf0a4968d25bb1d47120a10cea1c02976e504cb13e5ad67561a8d85389fd34cc54741d60baab8015188a5249277f274214a3bf3a1fc008d4752f47cc00259b7b4ef6cd85ce49e5dad69caba", 0xf0}], 0x9, &(0x7f0000005000)=[{0x38, 0x1ff, 0x6, "f3b49bb57fc3192739de91109e53e6ec0a2de068d0680e075dd6360bac3667dc3e7607e54eaafc"}, {0x10, 0x199, 0x8}, {0x30, 0x13e, 0x95b, "0a69d7d50c52587d34aa4f38533909385f0e48c5f91d3624d83ce3f576ad1e"}, {0xa8, 0x102, 0x3, "5bceb3b05439d1c69a4db9d84bffac0789ae2736ed1e5179fe5bf33fd4429c301ee570022bda97df51bc0855658d81672382b2f65835d924905658d97337a5c8c6db60c10ed6e3cfb1ff67a8edc0a4378903d105dce4247e09f3c6f28434e880da0ec6ef59a1c726b714b33e21b7259f99541ebe0bc4697a124802052474482129ed02a534aa95bc976279210d543e2cc742c9ce920ae5"}, {0x18, 0x105, 0x2, "dc7797e35f49"}], 0x138}, 0x5}], 0x8, 0x20000880) syz_open_procfs(r2, &(0x7f0000000080)='attr\x00') ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000004940)) 12:46:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 423.909610] binder: binder_mmap: 25049 20ffc000-20ffd000 bad vm_flags failed -1 12:46:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:13 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x0, 0x0, 0x0}) 12:46:13 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:13 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x20000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x8, 0x4) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) [ 424.029681] input: syz0 as /devices/virtual/input/input1691 [ 424.066964] binder: 25094:25103 unknown command 0 12:46:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'NETMAP\x00'}, &(0x7f0000000840)=0x1e) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = syz_genetlink_get_family_id$team(&(0x7f0000001180)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000001100)={0x0, @speck128, 0x1, "9a76822f2d52fd36"}) unshare(0x20000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000440)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000000540)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000740)={@local, 0x0}, &(0x7f0000000780)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000007c0)=0xe8) fsetxattr$security_smack_entry(r0, &(0x7f00000006c0)='security.SMACK64MMAP\x00', &(0x7f0000000700)='lb_stats_refresh_interval\x00', 0x1a, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000980)={@rand_addr, @loopback, 0x0}, &(0x7f00000009c0)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000a00)={@broadcast, @broadcast, 0x0}, &(0x7f0000000a40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a80)={{{@in=@multicast1, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000b80)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="2c040000", @ANYRES16=r2, @ANYBLOB="22072dbd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="cc00020044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000014000400ff0706010008000000000006010100003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r5, @ANYBLOB="2801020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004007affffff08000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0c02020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000400000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400300000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000000c00040068617368000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000104000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004005ed56061400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12], 0x42c}, 0x1, 0x0, 0x0, 0x10}, 0x1) [ 424.090880] binder: 25094:25103 ioctl c0306201 20012000 returned -22 [ 424.105226] input: syz0 as /devices/virtual/input/input1692 [ 424.119588] binder: binder_mmap: 25100 20ffc000-20ffd000 bad vm_flags failed -1 12:46:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:14 executing program 4: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@pppol2tp, &(0x7f0000000200)=0x80, 0x80000) accept4(r0, &(0x7f0000000240)=@nfc, &(0x7f00000002c0)=0x80, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x2, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/160, 0xa0, 0x2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r2 = getgid() ioctl$TUNSETGROUP(r1, 0x400454ce, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000300)=[@release={0x40046306, 0x1}, @enter_looper, @acquire={0x40046305, 0x4}], 0xaa, 0x0, &(0x7f0000000340)="e86b7a362206ef7b3b3f9dfb8fcc0b91ed42baf7b0cd4cbdbe51722564af4d231de9b36441d4add2f9ce9acdf695504265ec54e13105ca6f6c9320cd1b7cc3db75cf6491d0955b0b00689c1a44942ed1661eafe5d9085ece9684708532cbabb15ffb5c4c1e9d343ebb49b36a6f26a1a370babfd19b81c8e3df740d07ac048226ef38cf6c57011093f89911f1759c9d2aeede0b3ee6e3cbf3cd1d943421e34c8f577e14543d8b20b3bd3c"}) 12:46:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x9, 0x3, 0x0, 0x80000001, 0x3, 0x0, 0x4, 0x3cf, 0x40, 0x194, 0x1202, 0xb79f, 0x38, 0xfff, 0x4, 0x7, 0x3ff}, [{0x7, 0x3, 0x3, 0xdb, 0x3, 0x766f, 0xfffffffffffffeff, 0x100}], "46a7330fa19a125a5d7d39fee2a1de16107775d27a9c3ae5188e0c24a48f13383275537c1fa266692d3ba7f89209274661a4d1b4885a11754849336464fc91ea6fcaf8bc5fffc8d27643c935785e94f4c1aa10d46b9fd90eb4572319c66446d81d295fbe13dba7286a875e19ab79a948252e18e0c17c205eb6db31bda1cceee1adc2bd546e34f934cefa300db3d23e9fd3865f94536e434b29e1025dd69bd69afa45d23f4edd07627b875b319a004567034574", [[], [], [], [], [], [], [], [], []]}, 0xa2b) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 424.129806] audit: type=1400 audit(1549889174.067:41): avc: denied { create } for pid=25107 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_scsitransport_socket permissive=1 [ 424.153379] binder: binder_mmap: 25100 20ffc000-20ffd000 bad vm_flags failed -1 12:46:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) listen(r1, 0x5) 12:46:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000840)=0x1e) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0x8) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x3f, @multicast2, 0x4e23, 0x4, 'wrr\x00', 0x4, 0x9, 0x2c}, 0x2c) 12:46:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x8000f, 0x1ff) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) setns(r1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) [ 424.244068] binder: binder_mmap: 25123 20ffc000-20ffd000 bad vm_flags failed -1 [ 424.264232] input: syz0 as /devices/virtual/input/input1693 [ 424.267253] input: syz0 as /devices/virtual/input/input1694 12:46:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:14 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) 12:46:14 executing program 2: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) rt_sigqueueinfo(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000180)=0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a}) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r3, &(0x7f0000000340)=""/39, 0x27, 0x0) renameat2(r1, 0x0, r1, 0x0, 0x3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2a5e9fafb12c973d2800000010005fba000000000000000000000000ae42eb09e9410adf0e0949b0a8838b50d470ba", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) dup2(r2, r3) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000840)=0x1e) [ 424.381267] binder: binder_mmap: 25143 20ffc000-20ffd000 bad vm_flags failed -1 [ 424.409868] input: syz0 as /devices/virtual/input/input1695 12:46:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='/dev/binder#\x00', 0xfffffffffffffffa) r2 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="224d2d8e8fc70c4ad7e48e2209f6c77ce07f6e1c4a570f8e704caa698f53118fd48402047b28c3c70a42148bee081c2b876af8d3b7cbd8ced280569647b61607502708c43824d4e9a4ce8296686850b0db9340d68819d7bf369132e619c83a50ef33282d36797126076ade1b80ce49f3bfab214393b1cd15bcbf7558863164f0280532fb3cc5fc5bd121fc8961a4df8fd48c5b918ea1376b31df0b1b8af0859d91d19173467551dbdc3e14084364152c36eee6dd77c9bb558cdfd5ea2419430ec358888ae170301382358593806e3f6a8f2ace21983e53423c2749e71587e2ab5d9bebc901bb09742eb4cd39", 0xec, 0xfffffffffffffffd) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) 12:46:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:14 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x2) openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="e839e01d8a00c7630cf05163aa024727454181e007cf6d6d8e70666951a0645764b500930ffef9b23cbdcbb416abedaea246b16776097451021ab3b791bd56ae38cd8d870268b47d6cd417ddf93e5f2713ec528e2d7d5ff40518a4d80917863fd349a5e10f39"], 0x0, 0x0, 0x0}) 12:46:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:14 executing program 2: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 424.515372] input: syz0 as /devices/virtual/input/input1696 [ 424.537003] input: syz0 as /devices/virtual/input/input1697 [ 424.543656] binder: binder_mmap: 25175 20ffc000-20ffd000 bad vm_flags failed -1 [ 424.556700] binder: binder_mmap: 25175 20ffc000-20ffd000 bad vm_flags failed -1 12:46:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 424.580921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11441 sclass=netlink_route_socket pig=25191 comm=syz-executor.3 12:46:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 424.637175] binder: 25190:25199 unknown command 501234152 [ 424.669387] binder: 25190:25199 ioctl c0306201 20012000 returned -22 [ 424.670091] binder: binder_mmap: 25197 20ffc000-20ffd000 bad vm_flags failed -1 12:46:14 executing program 2: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:14 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000080)=""/170, 0xaa) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)=0x3, 0xaedb38f0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = dup(r0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r2, 0x300, 0x70bd29, 0x25dfdbfd, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x5, 0x800, @l2={'eth', 0x3a, 'veth1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0xc0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000e, 0x10010, r0, 0x0) [ 424.686047] input: syz0 as /devices/virtual/input/input1698 [ 424.703193] input: syz0 as /devices/virtual/input/input1699 12:46:14 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) keyctl$describe(0x6, r0, &(0x7f0000000100)=""/207, 0xcf) keyctl$link(0x8, r0, r0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 424.782774] input: syz0 as /devices/virtual/input/input1700 [ 425.305472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11441 sclass=netlink_route_socket pig=25191 comm=syz-executor.3 12:46:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) 12:46:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:15 executing program 5: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000200)={0x4, 0x3ff, 0xfffffffffffffff9, 0xe4d, 0x0, 0x3, 0x6e09b965}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r1, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000140)=""/155) 12:46:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) write$binfmt_misc(r0, &(0x7f0000000000)={'syz0', "e1e8835e48ab307688bc17bae586f9bb9e7b08a137d56a9592067caf754f44af43ffc4af37c30d958b7bd88cab58a19d51e1e623d65875312c9ffd3e275f56404c0957143b1789d5536bf9e351880537eab1f14163a5dfd50c3abfa102bec7c3b4a17fe12e690ebc41"}, 0x6d) 12:46:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, r2, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x889}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3e}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffc}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) [ 425.421706] input: syz0 as /devices/virtual/input/input1701 [ 425.423464] binder: 25245:25254 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 425.432878] binder: binder_mmap: 25246 20ffc000-20ffd000 bad vm_flags failed -1 [ 425.443925] input: syz0 as /devices/virtual/input/input1702 12:46:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x160) openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000080)={0x9, 0x8000000000f4, 0x9, 0x1000, 0x4, 0x10000}) sendfile(r0, r0, &(0x7f00000000c0), 0x1) 12:46:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0xffffffffffffff14) accept$inet6(r1, 0x0, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0463044000000000a04e9c4a72b6ee173e60f5fba5dbdb70b1ff8cbff08bed33a853c052ae191479c920367a2e1b70c757c1b4cf20d0aec4ea3f59d2fa65b3e05152e6575792602928d8cac5"], 0x0, 0x0, 0x0}) 12:46:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 425.486675] binder: 25245:25254 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 425.511775] binder: binder_mmap: 25264 20ffc000-20ffd000 bad vm_flags failed -1 12:46:15 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000040)) write$P9_RXATTRWALK(r0, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x7}, 0xf) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x1, 0x4, 0x5}) 12:46:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x2d0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000080)=0x4) 12:46:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 425.592972] input: syz0 as /devices/virtual/input/input1703 [ 425.609123] binder: binder_mmap: 25276 20ffc000-20ffd000 bad vm_flags failed -1 [ 425.623679] input: syz0 as /devices/virtual/input/input1704 12:46:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) accept4(r0, &(0x7f0000000000)=@ax25={{0x3, @null}, [@null, @default, @netrom, @default, @null, @netrom, @bcast]}, &(0x7f0000000080)=0x80, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00 \x00\x84\x00\x00\x00\x00\x80\x00'}, &(0x7f0000000840)=0xfffffd7c) 12:46:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:15 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffff9c, 0x0) r2 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10010, 0xffffffffffffff9c, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x30, 0xffffffffffffffff, 0x0) r4 = dup(0xffffffffffffff9c) r5 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000000180)='cpu.weight.nice\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xcc, 0x0, &(0x7f0000000280)=[@release={0x40046306, 0x2}, @transaction={0x40406300, {0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000100)=[@flat={0x73622a85, 0xa, r1, 0x4}], &(0x7f0000000140)=[0x58, 0x20]}}, @register_looper, @exit_looper, @acquire_done={0x40106309, r2, 0x4}, @acquire_done={0x40106309, r3}, @register_looper, @transaction_sg={0x40486311, {{0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x50, 0x10, &(0x7f00000001c0)=[@fda={0x66646185, 0x5, 0x3, 0x27}, @fd={0x66642a85, 0x0, r4, 0x0, 0x4}, @fd={0x66642a85, 0x0, r5, 0x0, 0x4}], &(0x7f0000000240)=[0x30, 0x20]}, 0x38000000000}}], 0x7a, 0x0, &(0x7f0000000380)="69a734fc42a3d57dd79e9fe6d5a612deaf6b2928b1925f71364150f68a5b3a2693929b4094164310416b6a1db6a3f4959193ac9c58f09014e39ed08434294fc73c3591d752277716e47758dd723ca1ac41ba0038e7656c8c00bfac895e1b1c9beae6ddc41a00c3e0ca185ed1f200217596e1c458fab6141a7296"}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000012000)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r6], 0x0, 0x0, 0x0}) 12:46:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) read(r0, &(0x7f0000000080)=""/9, 0x9) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x800, 0x0) sendto$inet(r0, &(0x7f00000000c0)="f1f222dd9957968f3e003d31b70fffbfc84578660bd2d4c9d50e5c40ea8f7b529427e06eadcf4d1a4aff985426bc9008d5c9a713a502f8d404dfdb02c596e8cc1bd08d4b91248b5cdb709fa8b428ab0b8bab2d09b6ce7af8e9a5c51a4d07fb4519fa138d49d38716380c976c01697407effd20b5d0d4819a1a884a2bd8f9421794cb84b0ee864421622c78d5a4e6b45e67fd67", 0x93, 0x8000, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0xffffffdd) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000200)=0x1e) 12:46:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000d, 0x12, r0, 0x0) [ 425.794225] binder: 25301:25317 ioctl 40045565 2d0 returned -22 [ 425.796932] input: syz0 as /devices/virtual/input/input1705 [ 425.817605] input: syz0 as /devices/virtual/input/input1706 [ 425.824896] binder: binder_mmap: 25301 20ffc000-20ffd000 bad vm_flags failed -1 12:46:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05facaba07d783c3e0e4dc2a000000"], 0x0, 0x0, 0x0}) 12:46:15 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 425.896541] input: syz0 as /devices/virtual/input/input1707 12:46:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:15 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) epoll_wait(r1, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0xef) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={r0, 0x0, 0xffffffff, 0x2, 0x20}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) [ 425.984354] binder: 25341:25351 unknown command -1161102843 [ 425.986784] input: syz0 as /devices/virtual/input/input1708 [ 425.990936] binder: 25341:25351 ioctl c0306201 20012000 returned -22 12:46:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=[@increfs], 0x0, 0x0, 0x0}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000000)={0xc000000000000000, 0x8, 0x1, 0x0, 0x0, [{r0, 0x0, 0x1ff}]}) pwrite64(r0, &(0x7f0000000040)="c49eefe0781eb6600b519c51613d77fda5a24b1da4842be8f16d77733a226b19ec2fa0883c3668d19d02c912a033853447f5f49563693aa97783ab8afcc786e21f4cb2035211e89f03e4af0f6eb4470b043636f452", 0x55, 0x0) 12:46:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 426.047948] input: syz0 as /devices/virtual/input/input1709 [ 426.074563] binder: binder_mmap: 25363 20ffc000-20ffd000 bad vm_flags failed -1 [ 426.152757] input: syz0 as /devices/virtual/input/input1710 [ 426.162459] input: syz0 as /devices/virtual/input/input1711 12:46:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x256) 12:46:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x0, 0x0, 0x0}) 12:46:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x1010, r0, 0x0) 12:46:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:16 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463844000000000"], 0x0, 0x0, 0x0}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x18200, 0x0) set_tid_address(&(0x7f0000000000)) 12:46:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000840)=0x1d) [ 426.867790] binder: 25394:25401 ERROR: BC_REGISTER_LOOPER called without request [ 426.879081] input: syz0 as /devices/virtual/input/input1712 [ 426.893045] input: syz0 as /devices/virtual/input/input1713 12:46:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 426.933793] binder: 25413:25416 ioctl 6609 0 returned -22 [ 426.940012] binder: binder_mmap: 25413 20ffc000-20ffd000 bad vm_flags failed -1 12:46:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 426.986989] binder: 25413:25416 ioctl 6609 0 returned -22 [ 426.997247] binder: 25418:25426 unknown command 1082417924 12:46:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) r2 = dup3(r1, r0, 0x80000) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000140)) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101800, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000000080)=""/74, &(0x7f0000000100)=0x4a) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x4) 12:46:16 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfff, 0x8c81, 0x80000001, 0x81, 0xd5}) 12:46:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) setpgid(r1, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="78736bbae7305db12fc100068dbb500ac814a437e75e5a78f8c98b48b2b0e0b36cb5f8c8156f137897982d1f62aa393f1e6e59ad5bd69b7e03f044ec1d2a231e973bc47f01e029875043eecbfb529a332cfdd3e2f16b3986d313cff4fc36a20e37d068bb20b6e907ea884435940601559a0efe29806d638502e34ccaedeae9a032d5fd6e5fc99ff7664683c9981fa8f7de4a7662040171d4b34bf09e43c861c332ecee92037bfb2bcfa046ff316ae2"], 0x0, 0x0, 0x0}) [ 427.027757] binder: 25418:25426 ioctl c0306201 20012000 returned -22 [ 427.030943] input: syz0 as /devices/virtual/input/input1714 12:46:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 427.071420] input: syz0 as /devices/virtual/input/input1715 12:46:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 427.126159] binder: 25443:25446 unknown command -1167363208 [ 427.143878] binder: binder_mmap: 25441 20ffc000-20ffd000 bad vm_flags failed -1 [ 427.148646] binder: 25443:25446 ioctl c0306201 20012000 returned -22 12:46:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) clone(0x2102041ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x1600) [ 427.184123] binder: 25443:25459 unknown command -1167363208 [ 427.213505] binder: 25443:25459 ioctl c0306201 20012000 returned -22 [ 427.221958] input: syz0 as /devices/virtual/input/input1716 12:46:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = getgid() setfsgid(r1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/106) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x200, 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x450200, 0x0) 12:46:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044022f532dfb16b6a45b7325f0000"], 0x0, 0x0, 0x0}) [ 427.239860] input: syz0 as /devices/virtual/input/input1717 [ 427.248545] binder: binder_mmap: 25464 20ffc000-20ffd000 bad vm_flags failed -1 12:46:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) accept4$inet(r0, 0x0, &(0x7f0000000000), 0x80000) socket$inet_udp(0x2, 0x2, 0x0) 12:46:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x5) [ 427.348283] binder: 25481:25488 IncRefs 0 refcount change on invalid ref -550308574 ret -22 [ 427.358959] input: syz0 as /devices/virtual/input/input1718 [ 427.378524] binder: binder_mmap: 25483 20ffc000-20ffd000 bad vm_flags failed -1 12:46:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0xde, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) 12:46:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000880)=""/4096) io_setup(0x3, &(0x7f0000000000)) 12:46:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 427.414485] input: syz0 as /devices/virtual/input/input1719 12:46:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 427.511766] input: syz0 as /devices/virtual/input/input1720 [ 427.525443] binder: 25514:25522 unknown command 0 [ 427.540584] binder: binder_mmap: 25508 20ffc000-20ffd000 bad vm_flags failed -1 [ 427.549621] binder: 25514:25522 ioctl c0306201 20012000 returned -22 12:46:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000000c0)=0x80000000) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) sched_setscheduler(r2, 0x2000007, &(0x7f0000000180)=0x100000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x12, r0, 0x0) 12:46:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) [ 427.558394] input: syz0 as /devices/virtual/input/input1721 12:46:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000180)='/dev/keychord\x00', 0x400400, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) fcntl$getownex(r0, 0x10, &(0x7f0000001640)={0x0, 0x0}) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001740), &(0x7f0000001780), &(0x7f00000017c0)=0x0) sendmsg$unix(r1, &(0x7f0000001840)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000240)="3984b375f9711fd819a0865c22482a0febdbe0ec57b83f5eb4a423fce33bc14f8928aa031cd921e0405361773fc3acdaf833987adc4a646bfb58b94996560b04a12eb4523166102c43254019d7cb1f2438", 0x51}, {&(0x7f00000002c0)="2fc9588fb8df628db1a565748872ab9c8a803399d7b55ea395bc6a673490f9736e8c0d3d62a4c68ff3df59ed15d66f355b90ba29e0dcf3aaa71f66634e2f0707b5f975021b7029423840139b6fbe95", 0x4f}, {&(0x7f0000000340)="3f20f688aca98307f7a7ed023759615d3f14dc5584138dead9e3299c75bcb5af72cbc31ae947d886739581ecd735595c0b493aadc0872ec9847832a3664b041fc9f12dced135727597b1e1cbbb8be0ce1c1207706df731aa891cd7de68de37c4ed10de824c28438d54b99b48e3234982b0318fd588bf0eb06b3d134ac10e391a", 0x80}, {&(0x7f00000003c0)="ccadcb70451c58ec5551268098087b4bdee10a0280987558f7d5bda86b880d6482d6fe268981bd587e33e14cef54f549eb7f6a96edb7137aad21dc15a28dcc1132214cd8ef099bcdab7e70b8c21edaacccbc20605ac883c8935dae4b54ca6c0cd7f534a7", 0x64}, {&(0x7f0000000440)}, {&(0x7f0000000480)="af2eacd91b60efd1d7602d3996b5ed321d8c8e2d5b3d465459f875a67f7c6bca93180c14924a85f8f73be6b8b579d1ac2ed68432", 0x34}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="5c0a449fb7dd74772c6b9767ef75ecc50c0de39b56ec2bbbb260668cde9f4d36ce24ff502b4048f40dfb4fb015354c2d7e580b8b1cb23a14a7ad92b3e0834800a20f764558fbe0e0fda203bc41ea96abd189cbbe0c89846e6333afe9f1548d65bd6b94c7b29c87f1e51e352f4ad8607abb258c1703b7a4489140df8829b9429afdba9fa60b1d70f6e5fb5a74e30410fb28423655be626de5959093779ca6582281e6a57e7bf605d85b3121045ce568dd716311a10b9b5b7d23e3e14db3db0ea38fae47636566dcb5812b1d1f66f46e50976fd99dea40f5b248c6539a496d27782e07adec1b025da62335dd3ab49fa2", 0xef}], 0x8, &(0x7f0000001800)=[@rights={0x18, 0x1, 0x1, [r2, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x38, 0x4}, 0x8091) r6 = geteuid() ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) fchown(r0, r6, r7) 12:46:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:17 executing program 3: getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) getpeername$packet(0xffffffffffffff9c, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@local, @dev={0xac, 0x14, 0x14, 0x18}, r0}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @rand_addr=0x7f8000000000000, r0}, 0xc) 12:46:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 427.609737] binder: binder_mmap: 25538 20ffc000-20ffd000 bad vm_flags failed -1 12:46:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="515150cf5958470407000000000000"], 0x0, 0x0, 0x0}) [ 427.675868] input: syz0 as /devices/virtual/input/input1722 [ 427.693377] binder: binder_mmap: 25547 20ffc000-20ffd000 bad vm_flags failed -1 12:46:17 executing program 5: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1e0000000701610f00000000000000000000000000000000000000000000b4446d31bbb176"], 0x1e) r2 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, 0x2, [@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x18) 12:46:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 427.732245] input: syz0 as /devices/virtual/input/input1723 [ 427.755838] binder: 25560:25568 unknown command -816819887 12:46:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r0, &(0x7f0000000ac0)=@hci, &(0x7f0000000080)=0x209) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x28800, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80840}, 0xc, &(0x7f0000000500)={&(0x7f0000000180)={0x30c, r2, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x3c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0xf0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc61}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5fe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffff, @mcast2, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @local, 0xffffffffffffff81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_NET={0x54, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xcd49}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffde391b1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d94c844}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @ipv4={[], [], @remote}, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_LINK={0x40, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x93c5c00000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x54}, 0x41) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x868020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000880)={0x23c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf9c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}]}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NODE={0x24, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0xac, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x46}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x100000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2a9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x62}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xda}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x48005}, 0x1) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000680)={0xf0, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x9c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9a2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x800) [ 427.777479] binder: 25560:25568 ioctl c0306201 20012000 returned -22 12:46:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x10000, 0x0) accept4$inet(r1, &(0x7f0000000140)={0x2, 0x0, @empty}, &(0x7f0000000180)=0x10, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'self'}, {0x20, 'posix_acl_access['}, {0x20, '\x00'}, {}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, 'cpuset\x84-@'}, {0x20, '/dev/binder#\x00'}], 0xa, "7d7ae98dbbec719d9eb8d8b129bbd45ee2acc0f67ee9e02cd62b4a6e383a592380fca81e0d797d89fa96b90448a8a10318ee81ca692eea399decf344be9c724379af651b8d8fcdce569d49e03be4c1789c4814"}, 0xba) 12:46:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:17 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(r0, 0x0, r0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x10000, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x9, 0x320, 0x9, 0x0, 0xfffffffffffffffd, 0x561e}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1100004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) [ 427.817889] binder: binder_mmap: 25571 20ffc000-20ffd000 bad vm_flags failed -1 [ 427.828524] input: syz0 as /devices/virtual/input/input1724 12:46:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:17 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fchmod(r0, 0x28) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400002, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x6) 12:46:17 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x800, 0xabf3) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) [ 427.929239] input: syz0 as /devices/virtual/input/input1725 [ 427.936423] binder: binder_mmap: 25592 20ffc000-20ffd000 bad vm_flags failed -1 12:46:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:17 executing program 5: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000000800) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 427.980808] input: syz0 as /devices/virtual/input/input1726 12:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000440)={0x0, r0, 0xffffffff, 0x1000, 0x1, 0x80000000}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400120}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x2b0, r1, 0x324, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x66f0602b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xd2f0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x128, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffc00}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x56}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ea0d00a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9bd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="f062044000000000"], 0x0, 0x0, 0x0}) 12:46:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 428.078374] input: syz0 as /devices/virtual/input/input1727 12:46:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400040, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000140)=0x3) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0xfffffffffffffff7, 0xff}) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) [ 428.154124] binder: 25634:25642 ioctl c028660f 20000440 returned -22 [ 428.165663] input: syz0 as /devices/virtual/input/input1728 12:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace(0x8, r1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffffffffffffffd) [ 428.195271] binder: 25640:25651 unknown command 1074029296 [ 428.218784] binder: 25640:25651 ioctl c0306201 20012000 returned -22 [ 428.236018] input: syz0 as /devices/virtual/input/input1729 12:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)=""/4096) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000000), 0x4000) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) [ 428.251776] binder: 25640:25651 unknown command 1074029296 [ 428.258831] binder: 25640:25651 ioctl c0306201 20012000 returned -22 12:46:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000100), &(0x7f0000000180)=0x68) 12:46:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 428.312045] input: syz0 as /devices/virtual/input/input1730 [ 428.337979] binder: 25673:25680 ioctl 80184560 20000080 returned -22 12:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2000010c0000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) [ 428.369487] binder: binder_mmap: 25673 20ffc000-20ffd000 bad vm_flags failed -1 [ 428.404893] input: syz0 as /devices/virtual/input/input1731 12:46:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'icmp6\x00'}, &(0x7f0000000100)=0x1e) setsockopt$inet_buf(r0, 0x0, 0x2f, &(0x7f0000000040)="57ca29940bea76a8c7fce92fb5171d59f8f1c5d24c0d38dfaf91528ee3f719fd2bd7cc105df8fdeacac8d24c4d27999a9b920dbe08d86f6dae70c0dc6bbefc6c206ecfeb0d953ff125c11209bc8113055a51b5d5567f056d3b63", 0x5a) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={r1, @rand_addr=0x5, @rand_addr=0x80000001}, 0xc) 12:46:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0xfffffffffffffe8c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0463b63c7c1b1434b70c6d76afb9b909f2044000000000075165ce96eccf4a5592175a7a8a9533838c7d6bc9462cc688a47e5e4e99de709dfd2a230ae0b4c95dee961ba720dcb808aa755a20b81f068f9353c133beaf5f67427411f0ea1bdd4e13fa15b556ae4058268021db34c4d8978b33a8bf66dacdd62f91b4e5ee4578d9"], 0x0, 0x0, 0x0}) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [{0x20, '/dev/binder#\x00'}, {0x20, ':'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}], 0xa, "86590d583428b8c3c07d9bcbc9f353e688e26802839b1cc32c50fbfe705be3f503bb899b800c3d807f250aecaab3eaf63a051e82dbe9240293afee02c53ef8c267f0f33b4f59b1452632f02597d4d5a0cf9ca1b41ad74d9ef43308774932b4d0faf7f23fa7b8287d5ed7f4f67a08c1c2d576bab1b7f8e498604c8101e88aeaf502af12f16ea601d6b99e945d54de7e4758c322b6381df9641a50259a89cec3d357f41c73478e540b2b1d739d609a34674eb715599dea"}, 0xed) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r2 = socket(0xf, 0x80000, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@rand_addr="900c2623de10dcace004f1ff9ccc96a5", 0x0, 0x1, 0x3, 0x1, 0x4bda}, 0x20) getsockname$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x1c) ptrace$cont(0x18, r1, 0xff, 0x3) [ 428.507010] input: syz0 as /devices/virtual/input/input1732 [ 428.525138] binder: binder_mmap: 25691 20ffc000-20ffd000 bad vm_flags failed -1 [ 428.541169] input: syz0 as /devices/virtual/input/input1733 12:46:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000040), 0x4) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x2c010, r0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) fcntl$getflags(r0, 0x3) 12:46:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x803, 0xc2) getsockopt(r1, 0x100, 0xfff, &(0x7f0000000000), &(0x7f0000000080)) 12:46:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 428.568838] binder: binder_mmap: 25691 20ffc000-20ffd000 bad vm_flags failed -1 12:46:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x22c, r2, 0xc00, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER={0x124, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @rand_addr="91b6af73e50a0789f35af5323718a750", 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe7}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'team0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @rand_addr="e9c5ff849380fb929fd511e0d51aa5a3", 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x0, @loopback, 0x400}}}}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcfc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x641cd030}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff86ad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7db}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x100200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000080)) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 428.638080] audit: type=1400 audit(1549889178.567:42): avc: denied { map } for pid=25732 comm="syz-executor.3" path="socket:[77630]" dev="sockfs" ino=77630 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=udp_socket permissive=1 [ 428.639593] binder: binder_mmap: 25731 20ffc000-20ffd000 bad vm_flags failed -1 [ 428.678542] input: syz0 as /devices/virtual/input/input1734 12:46:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00e.\xd7\xe1ra\x00\x00\x1fu\xe1\xe7\x00'}, &(0x7f0000000840)=0x1e) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x18900, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x2) 12:46:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 428.745449] EXT4-fs: 22 callbacks suppressed [ 428.745457] EXT4-fs (sda1): re-mounted. Opts: [ 428.748072] input: syz0 as /devices/virtual/input/input1735 [ 428.759356] binder: binder_mmap: 25751 20ffc000-20ffd000 bad vm_flags failed -1 12:46:18 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x16, 0x35, 0x9, 0x1d, 0x2, 0x142, 0x2, 0x11c, 0x1}}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) 12:46:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a4, r2, 0x521, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x757}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000000}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x32}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x50}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1fffc0000000000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x29c2}]}]}, 0x1a4}}, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 428.824111] binder: binder_mmap: 25751 20ffc000-20ffd000 bad vm_flags failed -1 12:46:18 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r1, 0x400000000000001) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f00000000c0)={0x200, {{0x2, 0x4e23, @rand_addr=0x5}}, {{0x2, 0x4e24, @empty}}}, 0x108) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0xa5) write$selinux_create(r1, &(0x7f0000000040)=@access={'/usr/sbin/cups-browsed', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x2}, 0x51) [ 428.873055] input: syz0 as /devices/virtual/input/input1736 [ 428.886707] binder: 25781:25792 ioctl 660c 0 returned -22 [ 428.902737] input: syz0 as /devices/virtual/input/input1737 [ 428.909022] EXT4-fs (sda1): re-mounted. Opts: 12:46:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:18 executing program 4: openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 428.948957] binder: 25781:25792 ioctl 660c 0 returned -22 12:46:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 429.093276] EXT4-fs (sda1): re-mounted. Opts: [ 429.098358] input: syz0 as /devices/virtual/input/input1739 [ 429.104492] input: syz0 as /devices/virtual/input/input1738 12:46:19 executing program 3: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7ff, 0x1000, 0x3, 0xa1b, 0x0, 0x3f, 0x3, 0x3dd, 0x38, 0x1eb, 0x7fff, 0x103c, 0x20, 0x1, 0x0, 0x3, 0x81}, [{0x1, 0x2, 0x1, 0x9, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x8, 0x7}, {0x7, 0x101, 0x7, 0x10000, 0x2, 0x1, 0x101, 0x6}], "0947144f020603b69efe6b79e7ec38abb6f221f51c42fd3cdd14fde5622946908f826e745b2dda70994ec9a770d9d4aa9e4ca5f2a75de76c052cdef347b7bae99092e5dbbd8ee49cc0ea034da88916a19250259f6c32e11b5a32420dd369ddf52afd0c6e3854c1892ce5fda96ed984c3c25c0380fd3caa4af972f561fdae815d11fdb79b2fe3857d08f181214b61b326f5b96171acffbab0c9ee18727f400bcd898f48687c687b63c9c0918cdb2cd456e423bc0a28741a84e83d3fa8d5eb037946d138af3f72f1af0f96b7f463", [[], [], [], [], [], [], [], [], []]}, 0xa45) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x22088000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r1, 0x0) 12:46:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04ff0000000000002aeac4796b4e2af4ba5eea12af7b5ec69a00112fbc7590d6d70a89cf33f266ea9addef02f2df56cd327976de0b8050384bb26c949c1d055a95381900a7b4f93d2f76c5ab1a182fb94e060841187bd953f5c14eb1eef394c84142c50f8a84dda98c6a0464557224411b785880203b0fb465f0d7b4f41f4fb732bed708bf6fe82d4bada52303d6f23fa83229b57c34cdcbc3f2ef780f8a0ddf0b237a6941a68bc2e6eeeb8a356270aa368ec6cc44171cf4481cf0af1ab6a1416f989f9e5b23bd6b8f79df01f46ceb553fdf6c21b28e9a36"], 0x0, 0x0, 0x0}) 12:46:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 429.194228] binder: binder_mmap: 25817 20ffc000-20ffd000 bad vm_flags failed -1 [ 429.204889] binder: 25837:25840 unknown command 65284 [ 429.241923] binder: 25837:25840 ioctl c0306201 20000000 returned -22 [ 429.261376] input: syz0 as /devices/virtual/input/input1740 [ 429.277044] binder: binder_mmap: 25838 20ffc000-20ffd000 bad vm_flags failed -1 [ 429.282011] input: syz0 as /devices/virtual/input/input1741 12:46:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x1000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) 12:46:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 429.297931] binder: 25837:25855 unknown command 65284 [ 429.305913] EXT4-fs (sda1): Ignoring removed oldalloc option [ 429.318453] binder: 25837:25855 ioctl c0306201 20000000 returned -22 12:46:19 executing program 3: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)=0xffffffffffffffff, 0x4) write$binfmt_elf32(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x7ff, 0x1000, 0x3, 0xa1b, 0x0, 0x3f, 0x3, 0x3dd, 0x38, 0x1eb, 0x7fff, 0x103c, 0x20, 0x1, 0x0, 0x3, 0x81}, [{0x1, 0x2, 0x1, 0x9, 0xfffffffffffffff9, 0xfffffffffffffffb, 0x8, 0x7}, {0x7, 0x101, 0x7, 0x10000, 0x2, 0x1, 0x101, 0x6}], "0947144f020603b69efe6b79e7ec38abb6f221f51c42fd3cdd14fde5622946908f826e745b2dda70994ec9a770d9d4aa9e4ca5f2a75de76c052cdef347b7bae99092e5dbbd8ee49cc0ea034da88916a19250259f6c32e11b5a32420dd369ddf52afd0c6e3854c1892ce5fda96ed984c3c25c0380fd3caa4af972f561fdae815d11fdb79b2fe3857d08f181214b61b326f5b96171acffbab0c9ee18727f400bcd898f48687c687b63c9c0918cdb2cd456e423bc0a28741a84e83d3fa8d5eb037946d138af3f72f1af0f96b7f463", [[], [], [], [], [], [], [], [], []]}, 0xa45) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x22088000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r1, 0x0) 12:46:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x4, "36fc1d888d93a4"}, 0x9, 0x2) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="04c410541142b3aacbe44963044000000000"], 0x0, 0x0, 0x0}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000100)={0x8, 0x11, 0x89, 0xfff, 0x3f}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000003c0), 0x10) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/174, 0xae}], 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x804, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x40000) 12:46:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 429.370630] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 429.384862] input: syz0 as /devices/virtual/input/input1742 [ 429.407102] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring 12:46:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 429.452713] binder: binder_mmap: 25859 20ffc000-20ffd000 bad vm_flags failed -1 [ 429.464870] input: syz0 as /devices/virtual/input/input1743 [ 429.475222] binder: 25868:25873 unknown command 1410384900 [ 429.475376] binder: binder_mmap: 25863 20ffc000-20ffd000 bad vm_flags failed -1 12:46:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000806, &(0x7f0000001180)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f00000003c0), 0xed5f0dd4, 0x0, 0x0, 0x184) shutdown(r1, 0x400000000000001) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000e, 0x12, r0, 0x0) [ 429.496414] binder: binder_mmap: 25859 20ffc000-20ffd000 bad vm_flags failed -1 [ 429.500579] binder: 25868:25873 ioctl c0306201 20012000 returned -22 [ 429.509694] EXT4-fs (sda1): re-mounted. Opts: init_itable,jqfmt=vfsv1,oldalloc,grpjquota=,i_version,journal_async_commit,data=writeback, 12:46:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 429.546212] binder: 25868:25885 unknown command 1410384900 [ 429.562663] binder: 25868:25885 ioctl c0306201 20012000 returned -22 [ 429.623331] input: syz0 as /devices/virtual/input/input1745 12:46:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x60, 0x48, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0), 0x1, 0x2, 0x31}, @fda={0x66646185, 0x5, 0x0, 0x1b}], &(0x7f0000000180)=[0x30, 0x0, 0x28, 0x48, 0x38, 0x28, 0x0, 0x38, 0x38]}}}], 0xbc, 0x0, &(0x7f0000000280)="c217cc338efc7d85bd6d517c0bb129c2b59e922dbe7d0e90e2e697415e2e2cb93eea600b91915bf04fd778b9d25174b3e99534a98d2ab98dbd42649733737a91e0cfddc523ec296c437dc6bee87896a83cf1c08bdd22979b4e5c9ff9d747eb216c982a384d80880fd37fb1bd964f6938fb2edee79ebcebfa6a4354036084053fad8bef6ddbf30f81b27519eeeeb148e42931d585c5f6d4ad64a9b2ff92e0e0774dac30cc9f3ebebd95d58743799e2a68f5ea9e4340a44ec62ee45ed2"}) 12:46:19 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x4, "36fc1d888d93a4"}, 0x9, 0x2) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="04c410541142b3aacbe44963044000000000"], 0x0, 0x0, 0x0}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000100)={0x8, 0x11, 0x89, 0xfff, 0x3f}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000003c0), 0x10) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/198, 0xc6}, {&(0x7f0000000280)=""/17, 0x11}, {&(0x7f00000002c0)=""/174, 0xae}], 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r3, 0x804, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x40000) [ 429.682264] EXT4-fs (sda1): Ignoring removed oldalloc option [ 429.682500] binder: binder_mmap: 25889 20ffc000-20ffd000 bad vm_flags failed -1 [ 429.707775] binder: 25906:25907 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 12:46:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 429.727682] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 429.750435] input: syz0 as /devices/virtual/input/input1746 [ 429.757163] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 429.761530] binder: 25906:25917 got transaction to invalid handle [ 429.773984] binder: 25910:25916 unknown command 1410384900 12:46:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 429.782487] input: syz0 as /devices/virtual/input/input1747 [ 429.796786] binder: 25910:25916 ioctl c0306201 20012000 returned -22 [ 429.803580] binder: 25906:25917 transaction failed 29201/-22, size 96-72 line 3012 12:46:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 429.841021] binder: 25906:25907 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 429.847971] binder: 25906:25917 got transaction to invalid handle 12:46:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 429.912999] input: syz0 as /devices/virtual/input/input1748 [ 429.913041] binder: 25906:25917 transaction failed 29201/-22, size 96-72 line 3012 [ 429.934135] input: syz0 as /devices/virtual/input/input1749 12:46:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:19 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:19 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 430.045548] input: syz0 as /devices/virtual/input/input1750 12:46:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x30, 0x0, &(0x7f00000000c0)=[@dead_binder_done={0x40086310, 0x4}, @request_death={0x400c630e, 0x4, 0x4}, @free_buffer={0x40086303, r1}, @decrefs={0x40046307, 0x4}], 0xfffffffffffffd3a, 0x0, 0x0}) [ 430.086320] input: syz0 as /devices/virtual/input/input1751 [ 430.122249] binder: 25960:25962 BC_DEAD_BINDER_DONE 0000000000000004 not found 12:46:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 430.145813] binder: 25960:25962 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 430.153371] binder: 25960:25962 BC_FREE_BUFFER u0000000000000000 no match [ 430.171537] binder: 25960:25962 DecRefs 0 refcount change on invalid ref 4 ret -22 [ 430.189950] binder: 25960:25962 ioctl c0306201 20000040 returned -14 12:46:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 430.227046] input: syz0 as /devices/virtual/input/input1752 [ 430.241223] binder: 25960:25972 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 430.253290] binder: 25960:25972 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4 [ 430.254941] input: syz0 as /devices/virtual/input/input1753 12:46:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 430.294909] binder: 25960:25972 BC_FREE_BUFFER u0000000000000000 no match [ 430.332911] binder: 25960:25972 DecRefs 0 refcount change on invalid ref 4 ret -22 12:46:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 430.375810] binder: 25960:25972 ioctl c0306201 20000040 returned -14 [ 430.394174] input: syz0 as /devices/virtual/input/input1754 [ 430.405992] input: syz0 as /devices/virtual/input/input1755 12:46:20 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) [ 430.430976] input: syz0 as /devices/virtual/input/input1756 12:46:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463844001b9000007076c"], 0x0, 0x0, 0x0}) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080)=0xfffffffffffffffa, 0x7ff, 0x4) fremovexattr(r0, &(0x7f0000000100)=@known='trusted.syz\x00') 12:46:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 430.602396] input: syz0 as /devices/virtual/input/input1757 [ 430.611629] binder: 26009:26019 unknown command 1082417924 [ 430.620726] input: syz0 as /devices/virtual/input/input1758 [ 430.638678] binder: 26009:26019 ioctl c0306201 20012000 returned -22 12:46:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@enter_looper, @decrefs={0x40046307, 0x2}, @clear_death={0x400c630f, 0x2, 0x1}, @release={0x40046306, 0x1}, @increfs_done={0x40106308, r1, 0x2}, @register_looper], 0xfffffffffffffd7d, 0x0, 0x0}) [ 430.665851] input: syz0 as /devices/virtual/input/input1759 [ 430.689871] binder: 26009:26019 unknown command 1082417924 [ 430.699017] binder: 26009:26019 ioctl c0306201 20012000 returned -22 12:46:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:20 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:20 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 430.809133] binder: 26043:26046 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 430.826340] binder: 26043:26046 ioctl c0306201 20000080 returned -14 [ 430.835837] binder: 26043:26054 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 430.841808] input: syz0 as /devices/virtual/input/input1760 [ 430.848282] binder: 26043:26054 ioctl c0306201 20000080 returned -14 12:46:20 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x56) socket$inet(0x2, 0x0, 0x81) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="bb47941fa90463044000000000"], 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0xeaced59564ce3a52) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 12:46:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 430.892879] input: syz0 as /devices/virtual/input/input1761 12:46:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000, 0x9, 0x100000000, 0x4, 0xfffffffffffeffff], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 431.021034] input: syz0 as /devices/virtual/input/input1762 [ 431.044455] binder: 26069:26075 unknown command 529811387 12:46:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 431.074820] binder: 26069:26075 ioctl c0306201 20012000 returned -22 [ 431.124855] input: syz0 as /devices/virtual/input/input1763 [ 431.125051] input: syz0 as /devices/virtual/input/input1764 [ 431.137457] input: syz0 as /devices/virtual/input/input1765 [ 431.161255] binder: 26069:26075 unknown command 529811387 [ 431.167305] binder: 26069:26075 ioctl c0306201 20012000 returned -22 12:46:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:21 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x4000, 0x0) unlinkat(r2, &(0x7f0000000140)='./file0\x00', 0x200) 12:46:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 12:46:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000000)) [ 431.346416] input: syz0 as /devices/virtual/input/input1766 [ 431.352992] input: syz0 as /devices/virtual/input/input1767 12:46:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 12:46:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) [ 431.494918] input: syz0 as /devices/virtual/input/input1768 [ 431.519415] input: syz0 as /devices/virtual/input/input1769 12:46:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 12:46:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 431.679788] input: syz0 as /devices/virtual/input/input1770 12:46:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) [ 431.748879] input: syz0 as /devices/virtual/input/input1771 [ 431.793276] input: syz0 as /devices/virtual/input/input1772 12:46:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 431.926458] input: syz0 as /devices/virtual/input/input1773 12:46:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:21 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 432.005274] input: syz0 as /devices/virtual/input/input1774 [ 432.028572] input: syz0 as /devices/virtual/input/input1775 12:46:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12:46:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) [ 432.137863] input: syz0 as /devices/virtual/input/input1776 [ 432.168798] input: syz0 as /devices/virtual/input/input1777 12:46:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 432.286985] input: syz0 as /devices/virtual/input/input1778 [ 432.318791] input: syz0 as /devices/virtual/input/input1779 12:46:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 12:46:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 432.534480] input: syz0 as /devices/virtual/input/input1780 [ 432.535788] input: syz0 as /devices/virtual/input/input1781 12:46:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 432.661005] input: syz0 as /devices/virtual/input/input1782 [ 432.676490] input: syz0 as /devices/virtual/input/input1783 12:46:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 12:46:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 432.763989] input: syz0 as /devices/virtual/input/input1784 12:46:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) [ 432.877260] input: syz0 as /devices/virtual/input/input1785 12:46:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 432.977615] input: syz0 as /devices/virtual/input/input1786 [ 432.977823] input: syz0 as /devices/virtual/input/input1787 12:46:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 3: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) 12:46:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 433.153935] input: syz0 as /devices/virtual/input/input1789 [ 433.159475] input: syz0 as /devices/virtual/input/input1788 12:46:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:23 executing program 3: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 433.287965] input: syz0 as /devices/virtual/input/input1790 12:46:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 433.331891] input: syz0 as /devices/virtual/input/input1791 12:46:23 executing program 3: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 433.415626] input: syz0 as /devices/virtual/input/input1792 12:46:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 433.526621] input: syz0 as /devices/virtual/input/input1793 12:46:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 433.588111] input: syz0 as /devices/virtual/input/input1794 12:46:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 433.678554] input: syz0 as /devices/virtual/input/input1795 12:46:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 433.752770] input: syz0 as /devices/virtual/input/input1796 [ 433.770527] EXT4-fs: 82 callbacks suppressed [ 433.770535] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 433.836986] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 433.859491] input: syz0 as /devices/virtual/input/input1797 12:46:23 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 433.887245] input: syz0 as /devices/virtual/input/input1798 [ 433.916070] EXT4-fs (sda1): re-mounted. Opts: init_itable,jqfmt=vfsv1,oldalloc,grpjquota=,i_version,journal_async_commit,data=writeback, 12:46:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 434.008213] EXT4-fs (sda1): Ignoring removed oldalloc option [ 434.031146] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 434.040922] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 434.059121] EXT4-fs (sda1): re-mounted. Opts: init_itable,jqfmt=vfsv1,oldalloc,grpjquota=,i_version,journal_async_commit,data=writeback, [ 434.096512] input: syz0 as /devices/virtual/input/input1799 12:46:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 434.135281] input: syz0 as /devices/virtual/input/input1800 12:46:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 434.238759] input: syz0 as /devices/virtual/input/input1801 12:46:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 434.327394] input: syz0 as /devices/virtual/input/input1802 [ 434.337779] EXT4-fs (sda1): Ignoring removed oldalloc option 12:46:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 434.385521] input: syz0 as /devices/virtual/input/input1803 [ 434.420710] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option 12:46:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 434.434118] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 434.504876] input: syz0 as /devices/virtual/input/input1804 [ 434.515923] input: syz0 as /devices/virtual/input/input1805 12:46:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 434.673540] input: syz0 as /devices/virtual/input/input1806 [ 434.707653] input: syz0 as /devices/virtual/input/input1807 12:46:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 434.797184] input: syz0 as /devices/virtual/input/input1808 12:46:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 434.881583] input: syz0 as /devices/virtual/input/input1809 12:46:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 434.984019] input: syz0 as /devices/virtual/input/input1810 12:46:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 435.064977] input: syz0 as /devices/virtual/input/input1811 12:46:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 435.136943] input: syz0 as /devices/virtual/input/input1812 12:46:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 435.230597] input: syz0 as /devices/virtual/input/input1813 [ 435.256264] input: syz0 as /devices/virtual/input/input1814 12:46:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 435.403056] input: syz0 as /devices/virtual/input/input1815 [ 435.449013] input: syz0 as /devices/virtual/input/input1816 12:46:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 435.581325] input: syz0 as /devices/virtual/input/input1817 [ 435.610381] input: syz0 as /devices/virtual/input/input1818 12:46:25 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 435.670533] input: syz0 as /devices/virtual/input/input1819 [ 435.703809] input: syz0 as /devices/virtual/input/input1820 12:46:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 435.762849] input: syz0 as /devices/virtual/input/input1821 [ 435.808335] input: syz0 as /devices/virtual/input/input1822 12:46:25 executing program 2: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 435.865098] input: syz0 as /devices/virtual/input/input1823 12:46:25 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 435.947188] input: syz0 as /devices/virtual/input/input1824 [ 435.983664] input: syz0 as /devices/virtual/input/input1825 12:46:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 436.006908] input: syz0 as /devices/virtual/input/input1826 12:46:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) dup(r0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 436.052962] input: syz0 as /devices/virtual/input/input1827 12:46:26 executing program 2: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) dup(r0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 436.184262] input: syz0 as /devices/virtual/input/input1829 12:46:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 2: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 436.278613] input: syz0 as /devices/virtual/input/input1830 12:46:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) dup(r0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 436.348291] input: syz0 as /devices/virtual/input/input1832 12:46:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 436.472391] input: syz0 as /devices/virtual/input/input1835 12:46:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 436.521442] input: syz0 as /devices/virtual/input/input1837 12:46:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 436.607802] input: syz0 as /devices/virtual/input/input1839 12:46:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 4: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 436.690731] input: syz0 as /devices/virtual/input/input1841 12:46:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r0 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 436.766825] input: syz0 as /devices/virtual/input/input1843 [ 436.790622] input: syz0 as /devices/virtual/input/input1844 12:46:26 executing program 4: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 4: mkdir(0x0, 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:26 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r0 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 436.960607] input: syz0 as /devices/virtual/input/input1846 [ 436.983941] input: syz0 as /devices/virtual/input/input1847 12:46:26 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r0 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 437.116363] input: syz0 as /devices/virtual/input/input1848 12:46:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 437.216836] input: syz0 as /devices/virtual/input/input1849 12:46:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 437.279837] input: syz0 as /devices/virtual/input/input1850 12:46:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 437.402323] input: syz0 as /devices/virtual/input/input1851 12:46:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 437.478760] input: syz0 as /devices/virtual/input/input1852 12:46:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 437.523873] input: syz0 as /devices/virtual/input/input1854 12:46:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 437.651292] input: syz0 as /devices/virtual/input/input1856 12:46:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 437.723388] input: syz0 as /devices/virtual/input/input1858 12:46:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 437.764335] input: syz0 as /devices/virtual/input/input1859 12:46:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 437.879774] input: syz0 as /devices/virtual/input/input1861 [ 437.902045] input: syz0 as /devices/virtual/input/input1863 12:46:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 438.054459] input: syz0 as /devices/virtual/input/input1865 12:46:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 438.100602] input: syz0 as /devices/virtual/input/input1866 [ 438.133061] input: syz0 as /devices/virtual/input/input1868 12:46:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 438.225244] input: syz0 as /devices/virtual/input/input1870 [ 438.249299] input: syz0 as /devices/virtual/input/input1871 12:46:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 438.405235] input: syz0 as /devices/virtual/input/input1873 [ 438.424793] input: syz0 as /devices/virtual/input/input1874 12:46:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 438.461859] input: syz0 as /devices/virtual/input/input1875 12:46:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 438.548785] input: syz0 as /devices/virtual/input/input1876 [ 438.577413] input: syz0 as /devices/virtual/input/input1877 12:46:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00'}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 438.636611] input: syz0 as /devices/virtual/input/input1878 12:46:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 438.752748] input: syz0 as /devices/virtual/input/input1879 12:46:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 438.820442] input: syz0 as /devices/virtual/input/input1880 [ 438.859936] input: syz0 as /devices/virtual/input/input1881 12:46:28 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 438.976497] input: syz0 as /devices/virtual/input/input1883 12:46:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(0xffffffffffffffff) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 439.024601] EXT4-fs: 80 callbacks suppressed [ 439.024689] EXT4-fs (sda1): Ignoring removed oldalloc option 12:46:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) dup(r0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 439.077773] input: syz0 as /devices/virtual/input/input1885 [ 439.111665] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 439.153155] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 439.161873] input: syz0 as /devices/virtual/input/input1887 12:46:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) dup(r0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 439.217407] EXT4-fs (sda1): re-mounted. Opts: init_itable,jqfmt=vfsv1,oldalloc,grpjquota=,i_version,journal_async_commit,data=writeback, [ 439.228900] input: syz0 as /devices/virtual/input/input1889 [ 439.269689] input: syz0 as /devices/virtual/input/input1891 [ 439.287936] EXT4-fs (sda1): Ignoring removed oldalloc option 12:46:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) dup(r0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 439.351820] EXT4-fs (sda1): Remounting file system with no journal so ignoring journalled data option [ 439.362555] EXT4-fs (sda1): changing journal_checksum during remount not supported; ignoring [ 439.380175] EXT4-fs (sda1): re-mounted. Opts: init_itable,jqfmt=vfsv1,oldalloc,grpjquota=,i_version,journal_async_commit,data=writeback, 12:46:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 439.442342] input: syz0 as /devices/virtual/input/input1893 12:46:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 439.490949] EXT4-fs (sda1): re-mounted. Opts: 12:46:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 439.524427] input: syz0 as /devices/virtual/input/input1894 [ 439.551245] input: syz0 as /devices/virtual/input/input1895 12:46:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) keyctl$join(0x1, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x91) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) add_key(0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfffffffffffffffc) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x7fff, 0x0, 0x0, 0x100020, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') 12:46:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) [ 439.650768] input: syz0 as /devices/virtual/input/input1897 [ 439.657498] EXT4-fs (sda1): re-mounted. Opts: [ 439.689437] input: syz0 as /devices/virtual/input/input1898 12:46:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 439.743500] input: syz0 as /devices/virtual/input/input1899 12:46:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 439.834409] input: syz0 as /devices/virtual/input/input1900 [ 439.835622] input: syz0 as /devices/virtual/input/input1901 12:46:29 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@multicast2, @local, @multicast1}, 0xc) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000800)={'HL\x00'}, &(0x7f0000000840)=0x1e) 12:46:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@init_itable='init_itable'}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@oldalloc='oldalloc'}, {@grpjquota='grpjquota='}, {@i_version='i_version'}, {@journal_async_commit='journal_async_commit'}, {@data_writeback='data=writeback'}]}) 12:46:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, 0x0, 0x0) [ 439.898202] input: syz0 as /devices/virtual/input/input1902 12:46:29 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:29 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [0xaa8, 0x100000001, 0x9, 0x7, 0x6, 0x1, 0x344, 0x5, 0x80000000, 0x1, 0xdcdc, 0x3ff, 0xff, 0x1, 0x2, 0x7, 0xa5f, 0x9, 0x7f, 0x80, 0xb87a0000000, 0x9, 0x100000000, 0x4, 0xfffffffffffeffff, 0x715, 0x2, 0x1, 0x1, 0x161dcca0, 0x4, 0x6, 0x35, 0x81, 0x6c, 0x1, 0x9, 0x5, 0x1ff], [0x6, 0xc23, 0x9, 0x7, 0x0, 0x2, 0x10001, 0x9, 0x10001, 0x7, 0xffffffffffff11f3, 0x3, 0x8, 0xffffffffffffff00, 0x3, 0xff, 0x3, 0x7, 0x4, 0xba71, 0x9, 0x80, 0x2, 0x87b7, 0x8, 0x40, 0xfffffffffffffe01, 0x4d3, 0x1f, 0x1, 0x7, 0x7ff, 0x9, 0x8, 0x80000000, 0xd7d, 0x3, 0x5, 0x5, 0x4, 0x800, 0x9, 0x1, 0x10000, 0x9, 0x1, 0x55ee52e5, 0x6fd1, 0x6, 0x7f, 0x8, 0x772f, 0x0, 0x800000000000, 0x4, 0x9, 0x0, 0x1000, 0x3cd19fde, 0x5cc, 0x10000, 0x4, 0x6, 0x6], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0, 0x703e, 0x4, 0x7fffffff, 0x0, 0x1, 0xfffffffffffffffb, 0xa22b, 0x8, 0x0, 0x5, 0x5, 0x7, 0x0, 0x5, 0x5, 0x3, 0x8, 0x2, 0xfffffffffffffff8, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 440.008061] input: syz0 as /devices/virtual/input/input1903 [ 440.045946] input: syz0 as /devices/virtual/input/input1904 [ 440.057297] input: syz0 as /devices/virtual/input/input1905 12:46:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:30 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x3) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 440.082059] input: syz0 as /devices/virtual/input/input1906 [ 440.115896] input: syz0 as /devices/virtual/input/input1907 12:46:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, 0x0, 0x0) 12:46:30 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:30 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff}) utimensat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{}, {0x0, 0x7530}}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1, 0x0) write$selinux_create(r1, &(0x7f0000000100)=@objname={'system_u:object_r:clock_device_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0x6, 0x20, './file0\x00'}, 0x66) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:30 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='bpf\x00', 0x80, &(0x7f0000000100)={[{@mode={'mode', 0x3d, 0x1}}], [{@subj_type={'subj_type', 0x3d, '-,'}}]}) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000180)=0x26360ec4) r1 = getpgrp(0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r1) [ 440.314630] input: syz0 as /devices/virtual/input/input1908 [ 440.331863] input: syz0 as /devices/virtual/input/input1909 [ 440.366335] input: syz0 as /devices/virtual/input/input1910 12:46:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, 0x0, 0x0) 12:46:30 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f0000000080)}, 0x10) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 440.482690] input: syz0 as /devices/virtual/input/input1911 12:46:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 440.564770] input: syz0 as /devices/virtual/input/input1912 [ 440.578532] input: syz0 as /devices/virtual/input/input1913 [ 440.582561] input: syz0 as /devices/virtual/input/input1914 12:46:30 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 12:46:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:30 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r1, 0x409, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 440.774095] input: syz0 as /devices/virtual/input/input1915 [ 440.796025] input: syz0 as /devices/virtual/input/input1916 12:46:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x20, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) statfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/72) 12:46:30 executing program 3: mount(&(0x7f0000000140)=ANY=[@ANYBLOB="eaf89e71c3f92e7a61677a49a762dd5c2af01928690b85dd1438bb45923015848c9215ce3fd0ac5fe36fe16f40d5d088334be31d791b16864201c8088fd2113615588fc25758a1700f8f86b5375899abcd4dfd620a5e127eb587f506046525c2000677d17909d09608bb36f1e8396a755edfa57820af2d822c50a1ec576ed11c70c098c0d5b4887799c1a258bf39f936877280f53e3a5509dc0c423bdd99584949e251ea33c0d556f9b2f3cf0fc4830004345627550583664393ce09d54d468dfe0fd41a46a8295d76f6cfcb44fdcd9673ff60b6c81d9c2821a3fee4929a7a4b205a19b8b8b6376aaa4c59"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0x20000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3, 0xffffffffffffffe0], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:30 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 440.872916] input: syz0 as /devices/virtual/input/input1917 12:46:30 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 440.952730] input: syz0 as /devices/virtual/input/input1918 [ 440.969670] input: syz0 as /devices/virtual/input/input1919 12:46:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000100)="f296e8b79d64ae708ba8e904f119c88bcfcbc64dd86dc6a304dda1eb3a044f0dbb330ff90567b4cb88e60194236ee33a32df96ed49a9be0aa2d4906b84e9369518c86a2b28787c428dce06f2e1d4a53ded7280f7312075e2d2d528916d55fca9bfad1adbe033d45daca33090832308879c82ff390b86b3a9304fec67feb3443579f0363e15c0e2a073e1fa8207172199fb8dfd874a335c2fc4dd31bb76c15ed4918ede7ca7574a", &(0x7f0000000080)=""/25}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 441.074852] input: syz0 as /devices/virtual/input/input1920 12:46:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 441.131123] input: syz0 as /devices/virtual/input/input1921 12:46:31 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x101000, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x0, 0x4, 0x8, 0xc40}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr="94457e4e3667ee3410e73716fc1397e9", 0x2, 0x0, 0x1, 0xc, 0x400000000000, 0xfffffffffffffffc}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x40800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x1, "fbbd93e5a225b765"}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_names\x00') ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000000100)) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) epoll_create(0x7) 12:46:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 441.214688] input: syz0 as /devices/virtual/input/input1922 12:46:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x2) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f00000003c0)={0x4, {{0xa, 0x4e24, 0x2, @remote, 0x7}}, {{0xa, 0x4e21, 0x28000000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}}, 0x108) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x204, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000881) 12:46:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff, 0x0, 0x8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 441.259671] input: syz0 as /devices/virtual/input/input1923 [ 441.296683] input: syz0 as /devices/virtual/input/input1924 12:46:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/188) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) syncfs(r0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/mls\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000080)='./file0\x00', 0x1db, 0x800) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x6, 0x10000}) 12:46:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 441.448060] input: syz0 as /devices/virtual/input/input1925 [ 441.457274] input: syz0 as /devices/virtual/input/input1926 [ 441.478519] input: syz0 as /devices/virtual/input/input1927 12:46:31 executing program 4: mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) chroot(&(0x7f0000000140)='./file0\x00') 12:46:31 executing program 2: utimes(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0x0, 0x2710}, {0x77359400}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) prlimit64(r0, 0xa, &(0x7f0000000080)={0x9, 0xffffffffffff8001}, &(0x7f0000000100)) r1 = geteuid() quotactl(0x4, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)="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") 12:46:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff, 0x0, 0x3ff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 441.634434] input: syz0 as /devices/virtual/input/input1928 12:46:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)=0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x80) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0xd, 0x7fffffff, 0x0, 0x100000001, 0x0, 0x7fffffff, 0x8000, 0x4, 0x10001, 0x4, 0x1f, 0x6, 0x2, 0xffffffffffff2c5c, 0x7, 0x80000001, 0x8, 0xc2, 0x35a0, 0x7f, 0x3ff, 0x0, 0x0, 0x1f, 0x600, 0x7, 0xc6, 0x100000001, 0x1, 0x6, 0xa04d, 0x3, 0xc5, 0x8, 0x9, 0x7, 0x0, 0x40, 0x2, @perf_config_ext={0x3, 0x2}, 0x4248, 0x4ac2, 0x1, 0x3, 0xffff, 0x1f, 0x6}, r0, 0xffffffffffffffff, r1, 0x0) 12:46:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)={{r1, r2/1000+30000}, {0x77359400}}, 0x100) 12:46:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 441.775179] input: syz0 as /devices/virtual/input/input1929 [ 441.777451] input: syz0 as /devices/virtual/input/input1930 12:46:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4, 0xffffffff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) write$binfmt_script(r0, &(0x7f00000024c0)=ANY=[@ANYBLOB="2321202e2f66696c6530206e6f646576766d6e657431205d5c205c202028736563757269747947504c0a7a156a96e04c94a8502cd8672257318ff44ca103c7b77ac292fa42bbd1159bc4d26fe4a282cd541dd31394afa58930eef225969f93e8e8ceb656514068bd4cb0522255a43ab96c270b61c5b8a71fcb2456c08b99b8ff42f63fc87451287cd818c9704a9034621230f6a6e09507f4e61cdea138b87c9b8669f2c1194dc4b1a126224972a848675d58c480f62eaecf5c6bbab187516afab839dfd9ac66a2a042fa1d85010c3df57bbceb0a3eb7acd594abd9381d41e1b8dcafe92e36243c73ea8c1ef3bb83651387fdf3e5ee29d961faa69964ad6e94a8b69f0ad6e0de4e2bbf3489ad4ce7e2b623fda08c898df1b3c80a016db7e25405ddcff3cf8346d61d2cc96ecd86dbb4ced39ed1b60718e1d74e3a819931209704225b70b66405543289af871b858ff94c43ed1da7b6ed1f574ce12b1d48ed449312f2577c66e055444e5e28c2a7955bd5165f41386629320c1c686e9de966e511eb062562ecb1fee64304b7762ca944172538c8374ecd04c4ba905130a231c9f9b974ba4d9e67fce2ca91b615ec93bd03f94a9cec04a9b8af1fc380ade87876b676809190904cd306c8bee37245b61b8750399311d9f777fa3b07aff09589e75042bbe6594cc7e937a54e42ec20fc80faa300f6cf71311064c7f75f74da0355439c5780327871f56c5fda4b57664725d4f1246ed07af4e71206145c5009e3307c457fe0b23925158838bdb68e0ef370eff1ef64c9bc3ee6a84ad4a5e3e78d243cc29e429570f3db64bdd06d5e05ebb766fc53be3b4d6aab89530bff102183047127a9e5e650a27fa9d8026226a25ab17d2c74ea1d585836c185e85e27486a21736d5ccd29ea2d02977dd834c9b379b93b32fe7e83b91e40f232e4077f2da76bd61267f39a4dea92d6349f33d4fef64e9c0c4d235fd7cf55ee0861314afdd46173594a8b04a950590ad17468ba6755a081173b3938af5c7129c753589c7287ac5b50c58abb8db210406b8597e452a8b9def62251ed4d32e3c7d8dd06be87a76572bbbd4eba81135832ae3aa0a7db375c1ac392852e01d5ddaf1de72cb5511e8104ad9d8a1071bcef05980821994684a01b8683378d88cdd1eec156ff9847eba3591e2814a13da6cb059b05580af76e8b1722b1c81bf76b9975c86a3f0107bb8ac23ddc320c660c9f3537a0f2e2c74480a4fdb137d69919ad80168fe4b62c7f2aa54cb0bbc13a8522a48f0cc413f51b08f2297574ae0039688330aef9cccdd5d42af29704d3b642cdc70db87401cb7095897ec85512f19acbbdf37c8c776710e9a619732e79a4252e7eb1b0f68c201434a2acbf73bd11c6b8c8a7bbda4dcb535bc598789e25eaad42b42d7ec98545b69ed29318fcd9899177cbd1bdb63a151ba17352b16fef544914ae598ff3f35145aa5ec557aa526439c277f62ee8891f52edd29b5523167ad4dba66e0159716c6da6d13d40ae6408e8b72a0c48f9b7232ed5e2d66cdd83547205763c03421f94c7e5465a14f885d24d0b93fdfb79320e4db1276ea2e3408decd7f94f13c2a6492c907be6abacac004e1fa64a93f1fbc6f7c1c624de6471fcaea1e63ecd1ef3aa9c6e1b94b1797700212d6c7934efaca11958cb916c0ae5a1dc9d25549e0cb0d2513d61cc21d20dc99584d0e2bc3363aea6b57144a4bf56a32ed2198d151a049086d1dae7b36610d73ef64187a2ff79e95eea135d35a1dc858ec7858e8ec417fc57442aa0759934fdf72cb18cb03a86b24ac31b68ac6a0491b43164b8aec0761047bfaa381c0f8adaf0c7b3b903a8485c53a3be4394eb5fe94fdebfd4040ed48dd272ebfda3f9c79dcbf819c8f696c8fc3b16192922b0a42c4b5fdd0ccb05285a2bb63742c2cac7fa3aa104a9cf79982b7fb9cd9da255696a6875baf4d0e5166a9cf4e07bc913c5ca313e1871bc1d68f053b7af6b2d38806613474a5b6bed3fcd9d623d3d6565de4df68d44a952b61ecb317b7c598701513b516590949f14ba414779adb1bd395edd9704c1c5ef91c90574df6e6b3a48bf62f25b33a40ccfadfcbedac5d6c6ca0cf37f76bf2b23cc5aff34b1177428ea9752978ee49aa853639cb08126c8eab39a11f2ad2e0d36c968c13a0a798f99a4e58fd95b28f67bf9c51a0ad121efefb46ced28eacc0517fa05fc5665c21c066d1a5b86eb50c6acb4a23a856d7dacfa784ce38197eb5b0f93a186cd8ee4fbdf67df426601505f7d7517af74cae6936d4635140f7158f8f9aefb33b25ba276e7b526c2a7573c03cadd0a4bbaf1100af639ed35806c9c6f7fc7d5c5061f1a6000a82251665649e9b427dfbf5f4443d9657f5dfa2dc49350a13c2e25032a5f24c5eb044d34cc539f1d609a14ed2834a178523be8414bbd2e25595dbe877d84e197b2c1b6889acb99bdd3dc36f7614930285198b76c1c18538c3f4dc6ec3960f9abafd8c4e6b3cbc51e2159c9c63477ec2cf0995fd8a06d2e32f91928156732c5baf7a2ba9a4a7e6e6e28364e16293399b1cb254e12533025d6b175c18f54a08ffaa4440d3c8d9f55deab7bf080789128c7d554743a31c949847a043ea2202a395f1fbb79940e4825e2c2de64a2353a4fff701c10a61faf11d68dbcd75aade7f61e4837fdc7c874014155029ef2f6f08ed5d00505827b5c4bd758af7c36b8950ad19305e64f496233377b02ecde3042cb052cf4822e73224e120f5295f79922971c284a24f4686598fa70b5c75083e32cc167406eb79c410d93ee45b07f8a1d141c426600b37289d5a0e177c6aedb35334cc5eb421c9ce215f528c01c0394c4866e8eb7770463a95cfcdff56c921303d1cbea97f3f1172e481fa523aa05179a0880cc0554a120191ae0f0327706ac6bf48aaa887cc00e2aedd9a871f6b10884663ebe9bd34ad12df6fb9c7c81b50fca60bb1e709e0d703fb6c906961243180676c26f28b810eab3ef126f2d9f4f95ce584695e9233bcf19c2b57c66c3f37b9163467b69e12bb1f0d000c54229c48297b4fc35433cfa1d2d371d47c31cfa79e140558285a83f07e9daf8d1d02f31d6e3b7ce1e76877d3aa471c6d902d07bc22b2132e46e5b837fd29fc32abec760dd2c90dd523c59954d605e46f5a46822f3facbe2e82ae8c5f49f0cea9e39ffa29094134e0a78e66c4fe2089975a67ee6c93b35dc6f1651986685973dd4e81f60476e2a06cb89e43b98b44b982b05f996f137c8bcd038ccbf44b74ca8baba11d339b8135abcb4469f5e4f3f743daebaf58a8d03a64c6011178ba8e7c0b6de6857fb38adb8d67508f06324ba35496368bb1508751093e35651d8365dd723d05c47ba0433675cce01587d19e5e82c984307825a8850e950836db93d88eaebca7ced2615432e6bc97c345cd7c6827687d27d6512925840437fc999720ce3983744958ca1a815aaf7c0da09516d54fc0f73505c1043d789980b96c6ffffff7f3da49bab0000000000007a3391a82d7f01187548d44bd9155004220a4ea1b44894965e1281d09ce8edac64224077649a1a6fb7379b66a753f0c72fcf8219849f6285ae28944061d0f144c5bab498a6906adfb983de8b5250f07d4da030aebc4df2557d7a1ef830fd3eef6801514b3aee6a3a9bf14ed555c0bc68b82833ef20eb045d962abedac8918e7dadfaa19d1081d2e2fd1c82a73c6f4d7a6c9abf219a2bb5f57bbfe7d460a786d46d80215602fbced574e2c385ff6cb16f227298f9d51ba39eef7276e533d966109297a717305be17c84728d5302ca3f144d6252d262fef83ce148c5cdb1c9de51f0084f3c1379ab7b5c9b0264173e6207ab8df863dd829c5f081eb557d9c1acd3dbaf8815039a693120971957a6fc3021c76a03916e6fa8c59b0dfcd0801c524b2150416ce877658f0f3f52d65322912db44dfc384834ca4c469bef69851eda6e02d44149f28670dd47da4ac725d02b75c4975977c26457cabde513bcdd8eaa85caadff76a460b61548784501e15ae504e4080d3ce973ed0dca2f049cdfcda729b79a31d065c76aea26d15f9a49dee327e43391df72f9a1332a6c468872c554881220e5584c9f254ce7b288a4a49873461824ccc910bd0ca20f2cf51d41b4b250cd71b10c3784d699297c761d3294eb7d9c3b7f68cd0fc43978bd20452978d32f78721c881bc666b452eabed661941f302927662760e4d5f33660cf69c0e63fbb85c573e18f75c5a3e263a7054029451a8d19377301ce17565835da48c37078647d9e318508f542262aad9f5510c49c1ce4945c240520bbfa1cb0e868804ae36b3605ba513558a71aa857dec6f31d297034625c75ee302b76935905dc161ae6a5a8554086f7c37dcd129131ecd12e92cc90194fb3bf38f71428ca48e2e9cf064927248071d604e2a5456596abefcf95d6f939b4b570c84d1913bb12c16a3b23a8e198cb376fdcd85ab608f798d96343a12942ceb1a63ef5a2c606abb8a1e388dc486a6f06b77bf7a7935d024adefe1c6a790161d2f83be16cc3e7563eafc01298773ed890e9a0f2c255fa655cb576f23fc93793b6b4d1bbe17439be1e7de7688db14b7d68222fb949d5f9e6ced57256622d1ebe49fd3314b5165849dadfa63ad7b2343068cfe34b9cc9e688dd120285c6c6d07094840132246ef07b501eef158d2534d1709db19b18961e1500a7e3518ef92f6998d3d1b8b0385eaeb887a0f00520bd78600f57624c0eadb1acd8463bad10ace7aff6a08818da0f61b1092379b41cd185382a24c806537aa19b047afdba96235dc9a6a050294134cf1bcaca3d97ab3a82a73ce0a595f35d83389296b0e8403b008d9cc6a79640cac5d52784e90e4f28b972025c533e1a0b078c1386e76de555a75979a588c2d798f9e2188528d305abd2c69a6325083e2381a01d92e7f6cc091d4a898ad31c2e9c83d72209ff045faf90e055d91da394fcde62b7f12d81b27d148d262fd1c976ca16278387c224d3de2af6cdd4cd3d318c757b6fca24d713329cfe77941dc35ae92bb255e631fd39e3598c5aeab585082dc6dce53e203fb48b5c315473a4d1786588d6e6e79ed7536c11f90d99759a13e063eee1ccba7d1e58307a2e27aeba81e9f5741c51abb94b4131f0a539c6b3c67a657276a5405e4979f68b59e61ee4b73ce321e5e7e634c0517492214dbbf9801ffbc238f43b72fa07af71d8685739eef93a9952783b583e81c207511a93ba2771b69603ba5079289edc78abf9707b0863eef15c1ad00e9265c77d5d5c4bce286d43e9b1ad5c210dba61428ee77c39c351e4ecdb403bc98e98418c2762e4892526345c3a66ab28472e51361e4b7ce4a93fb57f4540cd76ec2284cc081dd664267815f4269ff23c2534b12331ae40902488cb243c81639c16ebc2869f695673bdbf45e1294725fb35cc990d5e16cc29bfcd4c43c44ecbd18a31f47f600ebc79cb5e345e483c49cbf512b50e2d224e8cf25dbb42951ca46db24fc0005d7ac377a00ac60877a217718abcd5b6f1d85d35a342ca83628b3365921ae9933cf5feb503cd3c8a053776df6329e94864dafef3572ed8826329f95b2f7367bfc93ab465e6a0a512e08e264b052531b9a8d9336eca8923c0ba7d6f6d4badd7079c7300c4f6a9fef36b59d56732ef2e6e1ead868c03f7890eb4ef45075b90629d23347c6f96468977828c297c049f26de53cff82454eafb5ce12474fa5100a15392728997efb1ccc8062dadb2cc937bfe7191e0adfc205b2d794e73f8e7f8fb4b8657b67fb3a629e8b723772fa533364c107286850f40976861269d2f0334f2d07e4f9ebf1aae32d73344e186b7e60b601caa200882e2fa5f801968d82a0db9f4b79f4f4e38947b3d1d61ccbd1bee0000000000000000"], 0x104f) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 441.855818] input: syz0 as /devices/virtual/input/input1931 12:46:31 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:31 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 441.962327] input: syz0 as /devices/virtual/input/input1932 12:46:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4, 0x4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000002580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000025c0)=0x14, 0x800) r2 = epoll_create(0x2) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002600)='/dev/uhid\x00', 0x0, 0x0) pipe(&(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$unix(0x1, 0x0, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000002680)='/dev/urandom\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000026c0)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000002700)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000002800)=0xe8) getresgid(&(0x7f0000002840)=0x0, &(0x7f0000002880), &(0x7f00000028c0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000002900)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002940)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000002a40)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = eventfd(0x0) r14 = open$dir(&(0x7f0000002b00)='./file0/file0\x00', 0x0, 0x20) r15 = openat$uhid(0xffffffffffffff9c, &(0x7f0000006500)='/dev/uhid\x00', 0x0, 0x0) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) r17 = accept4(0xffffffffffffff9c, &(0x7f0000006540)=@alg, &(0x7f00000065c0)=0x80, 0x800) r18 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000006600)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r19 = accept$inet(0xffffffffffffff9c, &(0x7f0000006640)={0x2, 0x0, @multicast2}, &(0x7f0000006680)=0x10) r20 = creat(&(0x7f00000066c0)='./file0\x00', 0x4) r21 = accept4$unix(0xffffffffffffff9c, &(0x7f0000006700), &(0x7f0000006780)=0x6e, 0x800) r22 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000067c0)='/proc/self/attr/current\x00', 0x2, 0x0) r23 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$unix(r0, &(0x7f0000006900)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000080)="c3f08104b32f5fee06f77451d98ebd97e6658a19225f857e87cea70fa615f48b892def14480d3ac236eadd4263f1356669203177e46c330d9219f70d", 0x3c}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="d3b1868d5ad395ae0242aad7867348411673690bac09d274e51d572dab930713193fb32bed88936621b759d3c5899a0efafa229e30b10ae31ca050b4ea9911a13a0121b121ad955e10009b833e431908c5f10834df12fd918ebc17ea19d48d14a5965aecb1604bb60d940f5a85d89bdd9a1034c10e9abbcabb992ff8c155b3aa1911be59c22bac15b2f78dcbb4d427406045f8aa2462632443f1af6f15a6685d35c25882c07b520c35624d658ffe84eb59d1f243d9a96f5aba2b95c0727cbe3720370833b1db3cc0ecf6ee45c0f0581ea6909f91a127ba64bfb32992a90ef2a8979b7488a1497c414cc2b05c56c07f04dd4bfdee22ea3d662ef669e437201ad7926cb1b81da113e3ae3c2cf6515a308b167b86e9c2443334ac5fdf4267c198ceef8cd1b3092c6ebeb2e1e3e2b8e5bdd7d20303201c594d62c7cbdbf90c5ca01540481079e4f3ae18de6ee5458d4fef4aca23c7534c4bf2dc0989b898481317c5c909b923b5bca2589e846c5b6f9272dda4b848f8027efc9545ee3ca322a6c809a3241617649c89abe35c64b68162ef8ecbbffc325c07712ec8035de07335ef581c5174de3c0a9b9b1b82b1b57d5ce6380182bd7185fa3d35c3ab7e4c62cbf9393b61a40a8c108d0b79055b68bb53baa8d7c1fa04335ba5a9a51032355ad3c8ae5c7639f285366748d99c1e02f9af65b82c19836c6cf1b94d2474565f87dea7c705070f469756d997862c329f137bb05290e7dedb5deb65dbb76a6bd62c7dfd72b7bd0d56a47211238f6f348b4823b5e406b07eb38b86952d82afc1413e4f25606b345210dcb40ed2ce24df834730517dd9fe6cd7dd2b5c97f4700faa3beaf0c3fc51b12126e2faf51eb3613f0b91542e383314652c87318875f6b217ee77a58c1d57e3368195e51e4d9ec1012cbcb5c304c5c346c86e80a64b33104f5093042a8fed711de0f165812e64869c238c3db449258553f0399b2a58326dcb890a708bce5c6e6ed2d1b04acad3050324fea9934a6f23b3a548db48a5a9fd1dbd6efdd4ba961abd2fe07058a132dbe60a821329f455215d55e95bab39890c34a8620d9a7b859c43e8befdeeb072dae65e0cc90099f84be8f006b093c21beda41bd1b2d18a991b90b699ab51d2a6b02cc6859ca403564eae7e5fd6d1d7b901de9a3acc4d7f7b3820fc08c8e2f0330b1701bd5302ac682375fb191b3dc9380916a46108e3e98bb78a79f10e0bd3216761056c76073e823b74655916a655fef6c801a45f44ba0ae61e919b46e36959d96afdac4e77902177ff8fcef7adea2997ce5dcdd2f50c153fa73a77875f1430799e9f3fdece4d5740be68d3ce6f0be7fccfaf3a5207bd03483b0f93923aaec48ddc5dfce81543165570edce67f539067628aaed084cb8608787502ef3bea409607f7fadfdc994b6c877c5a00e395bff124f1bf9da307a68335d68f185762dea3e8a908e9b0e1c38f7223d25f4c1992ebf3db1574604623d02d7f97d122a991e84a8f7d67a8a92859d4feb5c43516204db0aff8f33f81a3c49d4e5e6a7b06df6bbfb8dfff3f86702e8a511b555ed56479293f5a985590abbafbacbd4b1a16afbd71c9155b398cbc8661475decdc6753ff793de03df2dc44bd9dfe6777da6168a893eebb68866f538bd71a427c9c8932a9a17b9220cbaace23154b49ea0c6d2c9acdefeae4bacf378ed1cd3970f7bd024dbb4888f02da1ffe7966a063c9ed226c27086104698b3ad26875c3401c073061dc7c530288066d274dd605d3edb493fa08a3e45fb10d127ba750f5d0d43ef2b559b01383d78cb605d3a9682b223d9de29b36dc59ae245500bb2497031bdda99bb5c895011a696b8aa7c9f4ed70be959f32e43c5beb917485f1a81fd4c6b7d4973b4216f5aa3420ad42cc2f5cb4e4843eeae68d13b8284e3b9a9fbe4191e0397a2b635e9b9a6e7e0446d0630ea3065f312df1a0bea91e5255a49fc17c6873bd579ff3ee44263e31e6581dad21309f6c256cbe197aa7e28413fa583ebd48545f18682378b70407e12e59ba7a6d09bafc9e419cd50d25b822d0572d6dcfdb6affdbe0514006923437aa02660ee2a2e39c3786e021ff97415d5a72dfc0b7091feb183428adc048239520f0fa10092485610acbd928a27a1827e526dca4fd80d7dd2bc86571b754bd225123e2c77d30e96f6b53f8f0f15225e4f7c43c7c379a2e249ab14a712e606b279d3bcbb8293dcaa2377713c47d175d80c0fb95985be3a9c50bc7dcd245a7a4f2fb0c41d713926bc13416bbef13bf3eebe924086d3d9510e3968d06df674332908299029043b7bfcb7705bbf2f9aab7a7752684f557d03d351e6fdf48e7c30c5c542d9d1dd4a6019241ff97c968ceb8c3ce354379f07292a347306c4e4d73c21ecde8e03fe56db64b1b13f6236bb06b0ac9d36a6fd05a60018e3237455a673074d28b23021f714565d7f772a6f49f5dfc9ebf7845dba8182394cb64e4002c5c8d373a59563d5d20a9755620df35273d5c53929521dad2b7b0fb2285fc345c27fb5939da7b45c452a18a0ac614bc6347360f6ef679d7f9000e4a20dc88f2cb72235d5e659f4524bc9a4ca3124edaba9b3d9012ff0bd4316d2b7eb3cb154c848484cd970068850f76a3cdafac3b8352ba1f994b0212ac5284201be5293ec7a07544be928d33907b33f27fcd69608d8c98334ca63105ac21605a813f9abd0c6315424f3e1a71651665dc6802ac3a347838914dfd4d71e38b7b98cd83168d749dee65069b659f2ed5f6d18e2ebd7f0675c2fdb96da621d0c5a631767f7291beda2e6f509a377913d6ba922f80d3f6ef79b98618724c9f6a922e9d05cae6b6cd32d04354bb6c99767a143d8f53e4df8be2b06f878f78169e92bd381298cfd7e33d096bb50d0d022b94ce56f298f79322ed7ff75387a7aa56afc32d81db4acda6f09af239767cd91cba9638942b41db203429cd963c1e1ca9640fd5cf7450d397fd4fbc2d8b2308305a9278f758db6d9065ab69abaa3bfee85ceda26c3220639040750b427c13804295c1f07414d51a91ec846d09fb0fc4cdbea0cea3ca3e98c1f9b4356f175f5a4377c397d1940317d46ae4d63de4d676540fdb71a444d5f1e2d86a339e8ed461044f4dafaf88732a4cb388d88a0e09a3353eb98d5e950d25c239064497bbfdead98f911e3632716c3c7582a396d48f8f49510cd8010fc8bab9fcd50eb3b68f20466c25709c9c934f8586f69f7998355d0c091e5c6efba132534d017e5868cf5d8454ded94c08bc3b874f47d33f1f7ddd5c8c965d8929de52fb526151827689c61c9c159a25f3823e6c03ed38b1b1bc578134dd2a03f90f42077cc16007f0925c7aca0e842cef5486fbd55aa34ec2adfedbe70b8e9a7d5510cab76005a2862581c23bfe78ac3347dcc6d876857a39f6ea7943a40c10509cc8e60410e2cb6e9b55e88a59ec72b61918525c3645486e22348cb1a3424b9caa509b59efb26d3e4d5c85cbb3a820518058449cf8047fa1a180b3896f6894d9c73acbc2f7476a1742991e6831385ac8f59bb25b6c52ebc8c1aa0b3ae9125dd0ef7ecf51b8d1e2b146f5a5af2e74dbad4afd33f18d230c012873acc105f2f3b32a07ec74ecfc3bde38633303daac8a2c7ba7a7164bbbebfe8a9f232b865458be9a7a16b6bf976d769991b4171ec6dd5c1fcdccb5d879c3cf16f4594a391a640baa50703d4742f41e4b32d296726c7de8d99a25b8eb48f07f0731ef3802201dfbc738c3044110b05bc5d893aa3dfd26921177fd49afb38c4a317c3186697f54f600edcd61caaffbf61212a50f7b3837522bbcfc0fd1a61ee98a44b9f8602861c28ab016a21864d06c76528e1e299b9a260a3ab547c29a5ca83c35b9736d1fdb41b41199b9a83b819221e316757ae37d69f359264f2f01437adb0f57be37d4039960b6946690db694a230421ced2bba761e7c4e8b427f5b5b8279a048120d2b9b19f2cd59e252cb2e0622dc2fa71b47b66dd76ba754c760b44816da2ec90384298513de1ae5ae277e9e8632fb449bc86ca2bd7f09859556bfc05e2e2c0ef1fd5a617d9c9a2c48c3053f05c607ebbd6b7f85a2fd667ddc0da297c573bf0f2e0681f1a2ce8273744b1bfdd8b86cd114e29da374f870ad780302d3922642a08c62605e50dc95e9b312a15104d1846208e73d6356df1bb997c61b84e944682397e3247943338bd70d997b145050fc87d8c18b5498586714567277d6a523a99adc318ef36d4f2164d6521822afe71b7eb1952221e7be90f3e2274777d9a26ba818a341932da5d3631fa6fdecfc39ab1aaa98b1cb2b313cbabd94a8c7fafb5c4101d5851b2831dd76694330215ad66b72941233a09e3c9cea3a4cd536016b63263058d43a0a939b2bdb78d4ddda0d6d325eb00383303984e0046ab3893f39d19c7a78c7648fa28a8693b06b1f2ab921035cbcd20a44acb57c5d08e58c69d1e6571ae89e20047a4c363189f128daf5a169d7d0ce3c6c24233e223423b5f01b60c21690dc4544d0547a245f6c9bfed3982f0e62346d2b1c2a2d85e00400a69985261859a1d27a5aa38fd8e9bacea202ab9efb7670be2baeb240661599ee2343d11e99b88dfed0c89c781f6c3ec56fdfd7897d4562a66341da1c9d9af52fe5b84da363f10530fecdcb4bf3a19878922a9a1f3b9dd5fd62eea2edd50e4fa2389bcfada0c6b15cdc9552b2f7b45c1df0dcedf5fab43638c68cbe072c33d6f38ce20d4d70483d84ba29c72092437ef37768b3016e06f819cc7f969b30031695d355e0da8288561efc76a292a6a91ce3db5c270d46f09743b31af509d1ff42e4cf72cb2e3ee7c6c4c79e9f08478b0f18589978f1aec156758bbbdf0396e5c21802f9ceb4edf155e21a8709d16590c2a9f8eb6ffc8a834389b45e55e9c0d42fcaca1ae29a2c68c3a1f9c53872f08b2f19d6ae75328197ef54dfe0d88f9d8b7180426101d9958d68138cae12368b720362969024e601275bf2e75176147b124fc0eba27053ebdd93b373093b9d3f3efc09f17a2a569aa1645c100a7763021f2671cd0a5e320250071920feb5b0774012aff32513986f2c1b49a533a9b9356f9b01319a77ca2789a7a377f7e18469346686eaa860cee2a27a15334b2da957e9bb48a5d310cbb4afaa15cf9fe2b6423df002cf7e609b6334437140292150374f6107ef379d38d2dc1bbf7590815e5d12109dbb3ae55f40728864f16478c9551cc11073cbcfa95a72fb611926d7ba8c7bc3ac15603c2d74f184862baf671e4c292a01e3da77da7541e7c33c4ed4f9aa3bf34a73eb2e3f470e63085ebf41957be61798ebbd05902b2fb7e3df1c170a098eb45c85f3cae9aa63c9d447bfec346abf27f37df7523b86ed7c90d33bcb9a63e7be3ea473d18eb6204acecfad36b18d434f9293869032b03c73deb6b39a504cccedd874689949b8731e32c7e34f1bc6013e45f3c433ad40fd2afc1241abc9256434fad10913e50f8a301af552048f2f6e645c3f384bc4cfe7d378e30e87215ae0524d733ff25c698a9d0d04627db7b481d0289e9f1c015224912016a2ec2914935d61e4dd2d97ed1904e23c33a7bd923415ad8fc87865a77df7328ec8851b0cd410388926dd2db0529cb7d0afb217cd93019701f63abea5cb10710cce421db7591cf55e1ad7cedb0c859ade3148b6e8ed10c2bd3f095d171dc33aa6edc789208afe603254bea45171a5439fae2fbdffdba6b75644a8b8eb0055d46b519141d53d6920deddf3ecbeca7730ef39259c6e93a27859870e0de789c244840810274", 0x1000}, {&(0x7f0000000180)="64118b921ca9f8153cf8f3327dbce4d204986423ed720969ad0da19da9dd973c4d618ba44d49cf0125d885616eb652510ad516d0fc2a34da32420ef43be1b6855c6599ed6762443e3735a61993071622f57c171f4bc60a3cdfbca12f507d731c34db2278b3d7d7e3653c06c1188af949efc5c97452194cc8cda2dc800f1f8bb0045e0875b0811933a7dbc71ecf4b82cb61ba9f281cd5a785c47b3560455bda5d10572919df2f94c609a2e2e795d1850fc2cfb43aa9ae6bc0b3b6f9fa5d9098acbfda29e59df9f82c49f2fa71ca5e19b623", 0xd1}, {&(0x7f0000000280)="9275ce2be6a7768ac29b387bc1782621dba6f967183d26fdd7aff3f5cfb56b8693ea68db37fc422dfc861de265377b6550c5a9210f3d5ad8c0d643538d356a8e4418283507fd6994cb6801ac314046ffca29104de5acd1e7489c5ccf1cc38443122413dc35e2912c9fea9a3d9947ed013200d620d405ae26c870dbe0bdc669c5f12fa02faa71dbabe561e59d697e11b3a77ca936ba14ad5e906361d2597815f788858698077ff898175bdaa75981041a6df51bfb1deeeace76f5644ea3891b54742eb8a763904ddcccd57059ff60df65c1c6a577cbec57b0a8625d644602173e", 0xe0}, {&(0x7f00000023c0)="953038647331cba7a45c94a9320c3afc8f84ed32d21d9eea71a94660845c7d6d2118d243aa3f0b61a2499091fbe5bb404b35e2c9f264f2b4a89b2524117e8cad09", 0x41}, {&(0x7f0000002440)="0172687f49d67c3158365b4416be4c87b0bcce9249b556cd4dd72cf85490ebb5ece170bd4779d81fb0a55f6c6130e9f8489285d476117cccd4afcf875602fec1ee3b1f2e6abcfc01502fba9822cfc73b5815da111fd50928cc7acf251f61", 0x5e}, {&(0x7f00000024c0)="f18d4140f24958866ee944dc289ea35867ca34e936cda2fe25b0e657445cb1573b27a0", 0x23}], 0x8, &(0x7f0000006800)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5, r6]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x10}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x38, 0x1, 0x1, [r13, r14, r15, r16, r17, r18, r19, r20, r21, r22]}, @rights={0x18, 0x1, 0x1, [r23]}], 0xc8, 0x4}, 0x20000001) [ 442.054108] input: syz0 as /devices/virtual/input/input1933 [ 442.079120] input: syz0 as /devices/virtual/input/input1934 [ 442.086607] input: syz0 as /devices/virtual/input/input1935 12:46:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x20, 0x10}, 0xc) ioctl(r0, 0x1, &(0x7f0000000100)="bee567fdc7a777f8e78920950a80ff16319d9c992d784d4d03ee91fadea229e3d63c3f189411d85bbd60081b400a0cdbd56f81b3483b893202917ad098930429f3ec06c8e7c05eaef4fcabab439dd2ce965193b4fbfccc3a636063a1db1c75430268bca0d36bc8378597feac59d6ac57d84786515b433a31238b8409e48d14ab70560aa362d5eda2eaeefbdda7ade66313a4d51deef1a8456dd01c39aeade3fe8d545419e46fac4cc35a92d64ee9eb5fbb6f03dc018350193066676f8ffeb2d6f38b596773614b10aaef954115e38c647bfdd22f62ed07ae4fa4303cb3b35e2499606ed2d0d47525ec705b853d65d01b") syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7, 0x4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff]}, 0x45c) [ 442.207961] input: syz0 as /devices/virtual/input/input1936 [ 442.302789] input: syz0 as /devices/virtual/input/input1937 [ 442.310348] input: syz0 as /devices/virtual/input/input1938 [ 442.314439] input: syz0 as /devices/virtual/input/input1939 12:46:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xc42, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x3000c0}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x608, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x38}}, 0x11) 12:46:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7, 0x0, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x500, 0x2b0, 0x0, 0x168, 0x168, 0x168, 0x430, 0x430, 0x430, 0x430, 0x430, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x138, 0x168, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x32, 0x6, 0x1, [0x9, 0x7, 0x4, 0x1, 0x8000, 0x5, 0x6, 0x8, 0x1ff, 0x2, 0x81c, 0x6, 0x101, 0x5, 0x3, 0x4], 0x10}}, @common=@hl={0x28, 'hl\x00', 0x0, {0x2, 0xffffffffdfcd7114}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x200000, 0x101, 0x4f}, {0x5, 0x20, 0x100000000}}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d5, 0x100000001, 0x6, 0x1}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x0, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@ipv6={@local, @remote, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'netdevsim0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x88, 0x4, 0x6, 0x30}, 0x0, 0x110, 0x180, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x4, 0x6, 0x1, [0x9, 0x5, 0x3ff, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe, 0xfff, 0x5, 0xd8c, 0x1ff, 0x7, 0x5, 0x6, 0x6], 0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6b1d, 0x60, 0x8, 0x0, 0x0, "26724d1f29c55da3ae2d1f22db3c0943ef7eef97157802390217da60cebfccc90f465b98e0292309791aa6415d5a7f410871410fa2e975d285d0dddd33fbf30d"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) 12:46:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6]}, 0x45c) [ 442.448791] input: syz0 as /devices/virtual/input/input1940 [ 442.458366] input: syz0 as /devices/virtual/input/input1941 12:46:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 442.543117] input: syz0 as /devices/virtual/input/input1942 12:46:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x24800, 0x0) r1 = geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000300)=[0xee00, 0xee00, 0xee01]) setxattr$security_ima(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='security.ima\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="1411e8a33f2a32fd"], 0x8, 0x1) fstat(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}, {0x2, 0x2, r2}], {0x4, 0x2}, [{0x8, 0x1, r3}, {0x8, 0x4, r4}, {0x8, 0x4, r5}, {0x8, 0x1, r6}], {0x10, 0x7}, {0x20, 0x1}}, 0x54, 0x2) 12:46:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6]}, 0x45c) 12:46:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 442.618543] input: syz0 as /devices/virtual/input/input1943 [ 442.635817] input: syz0 as /devices/virtual/input/input1944 12:46:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 442.676328] input: syz0 as /devices/virtual/input/input1945 12:46:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r0 = getpid() setpriority(0x1, r0, 0x81) 12:46:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1000000, 0x0, 0x0, 0x100020, 0x0) 12:46:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89]}, 0x45c) 12:46:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 442.768791] input: syz0 as /devices/virtual/input/input1946 12:46:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9, 0x0, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 442.829002] input: syz0 as /devices/virtual/input/input1947 12:46:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0xfc4, 0x0, 0x0, 0x20000, 0x0) 12:46:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5]}, 0x45c) [ 442.876205] input: syz0 as /devices/virtual/input/input1948 12:46:32 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 442.934409] input: syz0 as /devices/virtual/input/input1949 12:46:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5]}, 0x45c) 12:46:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x17) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 442.985864] input: syz0 as /devices/virtual/input/input1950 [ 443.023520] input: syz0 as /devices/virtual/input/input1951 12:46:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 443.084147] input: syz0 as /devices/virtual/input/input1952 [ 443.090609] input: syz0 as /devices/virtual/input/input1953 [ 443.146545] input: syz0 as /devices/virtual/input/input1954 12:46:33 executing program 4: r0 = signalfd4(0xffffffffffffff9c, &(0x7f0000000040)={0x8}, 0x8, 0x800) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x5, &(0x7f0000000300)=[{&(0x7f00000001c0)="4f438af9676013422c743957af7070378781313777d304c49481dd85d5292cad6e370dc3869278379336a8a4bcdb2fbb5da746645192bb94258a6575450dd60ace700a96a579024b365332f5", 0x4c, 0x100000001}, {&(0x7f00000003c0)="2dcca65a26b5a375990670e149411b1ba1a8d0081a88feb599b14693d491813b570393e7e4099cd2f4d9ddea1154345dc126179a745cf5fac29ed20b3ed72909aa8089a9846c05715387c77caa89395cc0f5744dd76ad87b4c00c276e27caf6b686558bfd385782fbcb0d723f661dd5e4ea27e2326e33c3f606f9218a17a2ae3e613a01d3cf23c4698db0061618ee37fb0391f6e826da3aa154ce27a18c4f036e71cd86e38bea6a49a7f9151e1524e8f801817866ff202a10c0056ed5774aa75ee1c632098e3be707125028423c312482aecb0f484ee9c6e82d927cbbc63ad64665e6925389c23eb34d767366c6e8f6b42d0a094686d7f037e3650c5b6fe92d7798c094516113c115a5bf3b0adbc11d3e148627dafbc20b10e62f2c2e8e76c787d11a3293260ed29640539710cb5789939b576f5e2fc93cb59d3385e6af7529ad520b78dcba1e55207391bdd6dc9d92f8a6c21dbb312511b702046d3fa3b7d44bb577868ac1e9dca03aa02b91f703a3f619435173f72519ea209cf01e954058b8c6ec55a5f2f272bbe5006a790a4b32dfac1736edc09bb4c8df474e08b84975d99577b7cc902afab1c565c84648e977607c4f90c692ccbcb7bf4b0eeaf267eee5aeacaf26bc533f930a0d77548dff8b499bb041e718a555e4cd82b81236a9c7f68158e7926dd0eb44046ecdb9f9ad21786a71041dc04a974356b6d817d274268610c18d9f4afa1363dcb869350b066f2eabbb87d7e6ec1ad8191e374e2e434e5d7a6dce35a34924adebbd02ad0ab6efef1b5a5d9d2d71cc9592063e0b770070b55ceda005b5741a0a263a1a869019ccb9d20570ac0c0e372e1b694967334d907fb31c748915688ea21e102901515571fed8c5f92f0aad4377b493ed74ba1ab9143f57b1921dc44457780f4e1561db1c6b2a40839b75529e9ca905b447ebaad5dad836af7dbe17b0fd455701e69c5e058530ea452e7a17efbacdfcd3e0014f900dc5f84cd92e15c877c5317a74f8c85cd90d90df0d5a7059469c2b879ef73c2dec739d94110add1ed3a4c3a8c0f07ea4db9878411e7ca87230022c105a090d1ba335f1548ff83a844f3c6bc4ed3cbb6c281789287ccf750ad3693b8dd08fa26550e4ddc51613ddf32d284160638f42d5ed2879a60d2f7a3142305878d8d7e10d55d5adadd75f5c351a0c156cf4f46dc49dbf563436ddb5bc0d7f22958a7fbd81658a6666d1cfcd23dcdd56742538407ba4f5dae7604b108964d14a4ea78818ed53090b691f3ded4383cb5bb4a8cc33ae547b9eb5e16b4a79d19b0df5ed8a8b886e76a31d3da9ca73122e56ec90e58e938cace5e1e0a2cfdeb2f1b296a5ae6099cafcb765171856b81a6af98edaf3b545b941277c33fe380ff914c5401fb5418113b55336c1ffcd3c3e56f69491da2a0bca03ba8b54accfa5ee1ae2cc511a76484a534034d139676a47a5da626933706d87e2d6b7f75cb4e2438a4b46c7552b911ac4b6bfe4c00f1804e0e0801bd00afbf11136b4ddbb69b2b0bfe053970d57495746001c13de0abe45b10e126276096977c6d9bb7e11f69f8bd0d42d3f691af3d56f3cf57f20e12988b5d8579080eedc2d21024e4dcdda954cfb04a4927876ade602b4109ab97fbe7511e3e7496e680808bd669886910a72e589f9672bb93cf8fb421b946b558554a01ba59485f757455a73e75f194be0e89e7b77ce1fee760e5699116f07592171ecd32ab3e80b205f7280f5e67fc45bce7cbe486e48e5acd9750102b98a08329f77f852daa1ead1bcab6438feac149e69e5440b4e803cb004d400a338397c5dcceb351cd968af100b8924987eaee91922283479ca73a8d38e33703fbfd60d152cb77504c04f8fa1f49eaba3b40a551955a420788f7747fdf76f9ea557cfbaca4d578458b15415a232d1df871e88cc503ac061c1581b7f81acaf691b69b3a8a645dbf7a5b169ead5430b6e87a9c4f43bc482c433b8d742e64fc10ae618622bb0f7bd8e5b7823e54e53c66fb8c13004fab1fecd9accbf3a7bbddda65b4df7d2c6248efaf6fe5b998ddaa851764262211182d3c2a130143388bccfc0dac91ed67fbdc5e4ef9cf6605a2af4318071ba17e296432711c24bf0f883687dfa15146d07ef99d862f13a7c94014503c6e424d482143a85ee40553d6330234e7176a87697a0984c20ac341ed03ca1c9f293db094b10beadcbc287d948eaf83099af86f5a1238d21c354be28ee8ccf5aec73ae1e1d0e417cc514859110c5b9f1d265b3d79157ac9ac50a59a153c7fb2a1a0a049f50b8584a50a9cbda6dec8622145857f026a7e09ad42a8b9bdd199f762102b6689af9c0174e6d16958be017c21e7c79c40c40a573445f88e23ee75107cfc3d3cbde71a79de1f2757b2ea599d67bdcaf4ac33072fcdffd42c893e374a751d96fee72520563282657769d5339e546f573534aaa38ac2a41b0f31fa5ddd21f2886e97bbca8da8982057d0e403db8421b3b39d657b8370e6b20a3f8f130df1670a62eeffd79833f9eaa67658f4350982249aa39223fd01a6447bc82cdb40a9d9ab2896f262c000a408aaa1d26c5c338f9ecfc7b37f3d961a3dda838cb7bee171963e2c41dd1d5800c3a6af2539dc204767be0bd85069447770f574dbc29e2f08e8a4231769ba7e9454709a637d8ae525386525c4bfd7513b958ebd5e7111e90b34161224edc5a5547c35f1a0089cf25f71fdb85427ed4d79dfcb89a2a8bbb7628d19319a0712df2cba786d9ae76065f9f7eae1935f6004f461827adf07520f4f4990f7583a23444fb6cc465334c9001057216244e59ab2492112cc9a8c1c19f0be9af27dd6e7c650184a732d0a0c3fa714447e1393b0442bd6753c0d4afe689722025fbc52542f3cd959c61c6979c2d0e536c436ee860719b2828421dd0b9a30a535b2d0cf4e1002ea7c079529e8ed3bc713247251b1b9d00a0e4d511685634f311df92ce5f05abada4c62ba13966033b767bc25de644c6ca88ce6c476754b6294afe04e81ae4e4acb47297710aab5998f521f2c9c2cc541d6427465801cb322d5cd1731ae9c9479b92a1c6de27bace27b8e294af60afaf1360b1ebd95b7632d4152ce9d6cf33e95d2f0d8e442c6e2129f062eab64b36285c6cfb4ec4c88010542ecf66717046ba1b107614342289794cf4bfa7662e765ed08749ee04b96da2c77e1d0ff45598183b379d1ce16ae03e08cfe5ffdd40b2cbede3c38e93d87087ce4d12b998c72d06c82895f96aab1bb328bce3566ec1f5403686397fe67df9658cfcc5be48d21086d901c58b7c0327bf266d9e0555b91f22c121b7664734ada75a95eceeefff949da27dbf2502d9aa61602ce8274af55d70cc419dc75c705fd6a95a56693be125d36131fe5dbfa80f86ffd3741044b825592c5937304b7ba8361c2254581ed9dd0ceec7715e1c1b3ac52f29d80966f44b7d1543cb6d32cc3ec4220a8d006674f0abe97e631579ab6fecbec4c2b1e07b16bae8b47cc9b8371cecbb7c31e9766e248b7f56132317631ae396b67b1b53e6940012f6f65d3542b34cbabe170e83b083be223f915a67c3ef64c2a2f36f8ec93d2614f3c1c7a89ce1190fabe99660fb437e6364cd61f49a380ff67c5658af9916631effd6967e8ba0104c283276f89316f0ad0afb6ccc768f0ee7a3211407f3f6b2a805db6e5d4d922398d5856b63c21e20b7786498171b2f2eeba2871629f4425204f64e83d4e9532c819618ad4c8df92b1668b3645ef8ad5e2a159dc551ac62b0fb99740c3e795b19da5af0810525c85400ecd299deca5f54a74e6989632a76ddbdd39c92b662503dd6febc96587c9fe911eb7f6ca698cf7a3a9ddcdaf6ab4bbb34b7eaaa7cce619937acc9aaccd55fb36f5b4bedd45380a5e1dd6efbac42c241ef96ac6b24e2954840782996051d3e2f92b4bdd474e000db05ad42c66f236f972ed41b7ab5ee06b379ff8cca2eb2b28a55227215e406ce1b097286afd197239fdb6eb3823a84aa9c2ec5d2c7c8f643318385041ab90804ed050bdf98a57ef1e777f6f8f0163a29567cf4b31569a00c21ea3512bcd94d7baaf38ec552bc169e0c047b06f8708792fd6c0e5c1fed46fb0a7a9affb93ee0ac8bd974ec777f41ce3fb14fe899e2585e2a5affc3e69762233bc2c114f00f562871777850563a24589975c85319ce8c71b9fa942d597907c8195b6d089f6c50c3c06abf25f79bb5ed5c3abfa2dbecf67f68c4910718cc1c8eacfd2305aa427c45616cbbcd1e62f23e7c1ca69b97697c99acc836258dd5794fa10960e4b8866fa7c4621871908a508a53735e21f090b3a432e582adb94b6fdf591581e9852625dac5883cb17d35357dab3ed1fc2a4cf0f379874b6c0d0e062292f5ee81daf555684142a9e126be5d06662879e2495d7c44bfab2c0a5359292d1417195160c4059eebf9705431eea6d62115bbfccb49ba568b46dd15264dff94f170d1dcfb92a8879969c2570bb903aa09fa51216e44df00f8b41bfbe51a86327b4abcbca510716735cd7c03dbda9e14cb419e2f623da189c1570ce3c41848450011da507a34edab5d5c71aa574dcb59dd1fa9f0dd88cf7d5556836c728594e103c4ee2401c48a54a97e626658b52ecd8a36612f34139d962fbc6d3cd2343b464f68ef307a51b8d140eb31bf98b84c56fd84a6039b1ad6ad8ec32eaeda1d1a39ac3ee2cad889502deed0b26d9464872b0400f02c665397bf127251e77e5294f8dd068acfc08ddda6d546e647084fc05802399259b6bd9a9da8b97c3fe643ec8c992ae64e67296e574a5cede27986c8c04be83294074edab918db864a82e4a1313b4397c1e0d217c5600ddd7cf6cd719f6060245417803d34b66f3c9a2ff20c353d9f0e6bea6649cc15f483b491640c6dba7233bcd2df39c7e43a70917d8be6b00f00644af8bfb94c7d401c5f9feaa654598b18d2d0f1d7eb176ba891979e48c5d4680f532fce254b56da430adbb453c49243ad88066a12b4bf9942590dcae86a904b5b513e9a4c1f0d981cb376f69cc4cc07bc090ef6d362cbd5188b38a07055b26a8d456ffbde97083de9264a9ffa76745be1cea7df08c8f28fd7db29b0e3241827069a7ed2a8f92bce3f604a7091111573a212294d178a7f1b7c741c819f7161731e4ad026655f0fc13b0cba36de300ff74cd6ef1add913cdd0a972dd95611d5ddd1b7ca2d299041458d038fb8524c700d3fb21ee1c5814cab69da8b0ce004855ee20f596cf88e87505063488d08626da77157c956bb096731fee70dba811084c3c39480d87e15b1549eb280246217d5bb0d2f94b30634935a6542ad9f7fa7c52b68146589897144e9c2a45a9b4842c035997da80ecf2dff62c6381551f6cf0f4ef0529877d158823bad2e239befb3ac2e6acd9ed0140d660a7bd0dbbf3bacd69668264deca230bf4d8f6fc8f3fa4d755c5b5ace2f6933ed9baa5babdf70fe3b628ff3833233a24764f63080487e6d6a89564abe0c78c8a5990b11a475c6d079f4b41c73d21e5865a0db052c58e89cf60776b955a6c3f4122e600529d4707a7ee2c225603f48bc71ff3a9efba5045a22d60a381b51ec3c12933d0b6614b13f42facd004ffc88aad832e2722a5b54f24e17b8a8cce3faa147f39036a73509a18d43f5d87137ae05664524686dd68add08c767cad35b8186f147af11a721559d5b6d8cedf1ac78664260c75c101f2ee007e98f7f94a2ce3fd08173e2a656d075d1dea183d3e1cad5128317679c21cfa13142fbc331c24fb58302dd2aba1a5beeb41079637d482", 0x1000, 0x5}, {&(0x7f0000000240)="2039527ff79392815d7c99c67df170e01c9deb574bf7b18f37ac01e2096861fff940341e8ea866da5e6f34b99bdf3fb68b30ea8b5da94e4fa1b7660b24c7208314a82e8360db3134744ea3d8e2c13b59cbe9af7734ce6a5344ddc220b44aaa5144af4d660a17a0469084b3c59ca544fded91c813970791ab44b17fa41f3778bf725c6b2e51cf64d677707c644a6fef3c9dcb6656c6288cf2232fa6273005a7d857509a8da2ad4f34ed8ead260ec4231b3f850aada8f21f7f", 0xb8, 0x3}, {&(0x7f00000013c0)="a097dc5aa9b2fabdfc73dc511ac3b5268f023b44ef9f8d8dc8d21459020e4cc7faec93e2d53266ada9efb3217016a25222d32547504d77c9bafe7f11a21b56d4f1c2221a9c1301e26738cbfebb2c507bb2b29d8b08003deb2b1871ca36f0c29b256549a045ef25789d8117a22d458bbe816cea352423b830e3efe692ee8b7e19fdb1c5f3d13837964f9077180ec93183143de2129406c4bafb587f427bcfdf517afea23e752de1b061e782b67dc66f07a16127657565434ac380b5fa0328a5aacce4c3395e7842e85838cf0a1055397fd42d7afbb670190d86bcfecb89159c347ec56c2cdec15c83f83165528d", 0xed, 0x8001}, {&(0x7f00000014c0)="f8b144c0b4ada1d0fe7f7361e1b36b5129a83d4390e660999a1438b38b0b0779b6f9858620607f41e65adcde271dbf792b5bcd73e694930679c0179405672132ba7a2889451773b69d7fbacfa4b1becdfbad82d36e948b9435c8e94b98d9f26bf31ca9ee9cf10b31ed526ea0b31c2300f987170f167ae1741b28082dc3678b5d2d63944bd33fd4a3bf4dda7c80fe65e056d454de4816c0c1371fbfbc9d07fa676f0b1918a54f3eb084e9a44d90620927", 0xb0, 0x1}], 0x4, &(0x7f0000001580)={[{@debug='debug'}, {@nogrpid='nogrpid'}, {@data_writeback='data=writeback'}], [{@subj_role={'subj_role', 0x3d, ',:/\xa8self\\em1'}}, {@subj_type={'subj_type', 0x3d, 'trusted.overlay.opaque\x00'}}, {@smackfsroot={'smackfsroot'}}]}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e, 0x1], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, '%wlan1*'}, {}], 0xa, "99d0bf9fcca1ba533ecf3b9213fdf3a10eb1436af02f3120d1474cb3899721a20572bede263d83a5513136583e862983a021d01807c8c006ddac60104df615b098be092de8f662ba6650ad5e60edd71351ecd92c19dcf8a13600d475b96db84d66befbb7c6af5b16a6b7b093e02bcf0ca29c922d55f62eb79787fadf30cec861f42d9aba204dd4291462266a4b8578bad7d9cd236273d8be37f538252a68e3fe385cdb5dd31b40d946de3060424d4a9696193c84636fd2d6def6e53d8bac775ea136a27622a3f84a095da93e472975671fb58ad6fdb9635d5c657bc3d54d8c7fa24e"}, 0xf6) fremovexattr(r0, &(0x7f0000000080)=@random={'user.', '%wlan1*'}) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff]}, 0x45c) 12:46:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 443.229091] input: syz0 as /devices/virtual/input/input1955 [ 443.251833] input: syz0 as /devices/virtual/input/input1956 12:46:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x16) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20]}, 0x45c) [ 443.329379] input: syz0 as /devices/virtual/input/input1957 [ 443.361717] EXT4-fs (loop4): VFS: Can't find ext4 filesystem 12:46:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3, 0x52e], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 443.374461] input: syz0 as /devices/virtual/input/input1958 12:46:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0xff, 0x2) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000080)={0x9, 0x6, 0x62, 0x3, 0x3, 0x7f}) 12:46:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000340)='syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x40000, &(0x7f00000003c0)={[{@mode={'mode', 0x3d, 0xfff}}, {@mode={'mode', 0x3d, 0xffffffff}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x6}}], [{@dont_appraise='dont_appraise'}, {@pcr={'pcr', 0x3d, 0x14}}, {@smackfsroot={'smackfsroot', 0x3d, 'posix_acl_access%@'}}, {@measure='measure'}, {@fowner_gt={'fowner>', r1}}, {@hash='hash'}, {@obj_user={'obj_user', 0x3d, 'wlan1'}}, {@subj_type={'subj_type', 0x3d, ']ppp1nodevwlan1'}}, {@fowner_eq={'fowner', 0x3d, r2}}]}) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x1c) 12:46:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4]}, 0x45c) [ 443.439306] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 443.472700] input: syz0 as /devices/virtual/input/input1959 12:46:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) pipe2(&(0x7f0000000280)={0xffffffffffffffff}, 0x0) r1 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@initdev}}, &(0x7f00000009c0)=0xe8) r3 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000a00)='\x00'}, 0x30) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fcntl$getown(0xffffffffffffff9c, 0x9) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000d00)=0xe8) getresgid(&(0x7f0000000d40), &(0x7f0000000d80), &(0x7f0000000dc0)=0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x8000, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000e40)='/dev/vga_arbiter\x00', 0x10000, 0x0) r12 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/urandom\x00', 0x400002, 0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) r16 = openat$ion(0xffffffffffffff9c, &(0x7f0000000f00)='/dev/ion\x00', 0x80, 0x0) r17 = epoll_create1(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) r19 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000f80)='/selinux/checkreqprot\x00', 0x0, 0x0) r20 = epoll_create(0x4) r21 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000fc0)='/selinux/policy\x00', 0x0, 0x0) r22 = syz_open_pts(0xffffffffffffff9c, 0x20800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000001000)='filter\x00'}, 0x30) r24 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r25 = socket$nl_generic(0x10, 0x3, 0x10) r26 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000001080)='./file0/file0\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = openat$zero(0xffffffffffffff9c, &(0x7f00000023c0)='/dev/zero\x00', 0x400000, 0x0) r30 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002400)={0x0, 0xa376, 0x10}, 0xc) r31 = socket$nl_generic(0x10, 0x3, 0x10) r32 = getpgid(0x0) lstat(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000002500)=[0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) r35 = openat$keychord(0xffffffffffffff9c, &(0x7f0000002540)='/dev/keychord\x00', 0x2, 0x0) r36 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002580)='/selinux/context\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000025c0)={0x7fffffff, 0x10, 0x1, 0xffffffffffffff9c}) r38 = openat$cgroup_int(0xffffffffffffff9c, &(0x7f0000002600)='cgroup.clone_children\x00', 0x2, 0x0) r39 = creat(&(0x7f0000002640)='./file0\x00', 0x100) r40 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000002680)={{{@in, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000002780)=0xe8) r42 = getegid() r43 = getpid() stat(&(0x7f0000003b80)='./file0\x00', &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r45 = getegid() r46 = syz_open_dev$evdev(&(0x7f0000003c40)='/dev/input/event#\x00', 0x226e, 0x20102) r47 = open(&(0x7f0000003c80)='./file0\x00', 0x241, 0x50) r48 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003cc0)='/dev/uinput\x00', 0x2, 0x0) pipe(&(0x7f0000003d00)={0xffffffffffffffff}) r50 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000003d40)='/selinux/access\x00', 0x2, 0x0) r51 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000003d80)='/proc/self/attr/current\x00', 0x2, 0x0) r52 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000003dc0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003e00)={{{@in6=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@initdev}}, &(0x7f0000003f00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003f40)={0x0, 0x0, 0x0}, &(0x7f0000003f80)=0xc) pipe2$9p(&(0x7f0000003fc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r57 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000004000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r58 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000004040)='/selinux/checkreqprot\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000004080)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000040c0)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f00000041c0)=0xe8) getresgid(&(0x7f0000004200), &(0x7f0000004240), &(0x7f0000004280)=0x0) r62 = openat$ppp(0xffffffffffffff9c, &(0x7f00000042c0)='/dev/ppp\x00', 0x10000, 0x0) r63 = accept(0xffffffffffffffff, 0x0, &(0x7f0000004300)) r64 = syz_open_dev$evdev(&(0x7f0000004b00)='/dev/input/event#\x00', 0x0, 0x2000) r65 = socket$inet(0x2, 0x803, 0x2e) r66 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000004b40)) r67 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000004b80)='/selinux/context\x00', 0x2, 0x0) r68 = gettid() stat(&(0x7f0000004bc0)='./file0\x00', &(0x7f0000004c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000004c80), &(0x7f0000004cc0), &(0x7f0000004d00)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005080)={0x0}, &(0x7f00000050c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005100)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000005200)=0xe8) r73 = getgid() r74 = getpgrp(0xffffffffffffffff) lstat(&(0x7f0000005240)='./file0\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000005300)='./file0\x00', &(0x7f0000005340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000053c0)={0xffffffffffffffff, 0xffffffffffffffff}) r78 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000005400)='/selinux/load\x00', 0x2, 0x0) r79 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000005440)='/proc/self/attr/current\x00', 0x2, 0x0) r80 = accept$inet(0xffffffffffffff9c, &(0x7f0000005480)={0x2, 0x0, @dev}, &(0x7f00000054c0)=0x10) r81 = socket$nl_generic(0x10, 0x3, 0x10) r82 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000005500)='/selinux/status\x00', 0x0, 0x0) r83 = open(&(0x7f0000005540)='./file0\x00', 0x800, 0x1) r84 = socket$key(0xf, 0x3, 0x2) r85 = openat$rtc(0xffffffffffffff9c, &(0x7f0000005580)='/dev/rtc0\x00', 0x40, 0x0) r86 = openat$null(0xffffffffffffff9c, &(0x7f00000055c0)='/dev/null\x00', 0x0, 0x0) r87 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000005600)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r88 = epoll_create1(0x0) r89 = accept4$packet(0xffffffffffffffff, &(0x7f0000005640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000005680)=0x14, 0x800) r90 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000058c0)={&(0x7f00000056c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x84, 0xffffffff, {"53bc8e9f900f681a7815f835fee4d26b2b33b44b23bd4f58103b076f1c93029a7613272cfba013c2475a9f08711765480cfea5e38472043fdd481507c2aa91e5f14cb4bf51222db91e82bd909608704c01842f21f003fe2e1e9a4bdabee9e03b2608f0375bf0900ae21487"}}, {0x0, "491e6aaad2b98292b34d9ba214013f7b4f2c924354f39f2c04fe41b62dddad568f74d34d2f80474b63f9e667e7066922d91f147e83fb5c2ab1d380cf721dadb879f4d97ee17718c2b53329f8aa6b16d4a5a76276b3b8cc259741d5fd53fb2a3edf9e11d6dd583aaa80f9ac914c2193b295333b46073afd19699699d724a209e799ff31b90938ce47f2f3912af343d02b48e309ea2218ef94c9e6e1e35eda8bcb928f6836fe"}}, &(0x7f0000005800)=""/148, 0x12b, 0x94}, 0x20) sendmmsg$unix(r0, &(0x7f00000059c0)=[{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000800)="bbbd261040ec5159d157fc800108147349a30f6ceba4aa708289618a290eb7f50dec1fd455ec8f7101c5abdc782e88eadd7f5f07f2b2011520f154bdd0da053ae69438e06e07a975e870ba3a7f41d8d94238a343dc4e5dcf4fe2de065d07ba869d7d91aee082d862449bb54f3d5b3ef33d02e1d357dfadb4783f29859d7eac021a3836c6120bb35ae79a54ff13e56d882f61b2357caeabe1cbce443e470c6671ead49e9009cfde5001f0855150ca5c10f2", 0xb1}], 0x1, &(0x7f0000001200)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r10, r11, r12, r13]}, @rights={0x20, 0x1, 0x1, [r14, r15, r16]}, @rights={0x38, 0x1, 0x1, [r17, r18, r19, r20, r21, r22, r23, r24, r25]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}], 0xf8, 0x20000000}, {&(0x7f0000001300)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001380)="4770a81b0d810e4a2ec5ba77cf4aacd086c0ac6c5314dd180bc810885a7d22cade1b7a746f85743ad61b918487e6f8601bacc9b49fd6d0f333e77c500dad0c282cdb3723a338aa00558b212895b32f36237f7a559d40f33a0bbd64a6d3ba2c0f3d36ec3dee67caf3d99024c2ab618d9f42c9000e0a678630ab2949a35c2ea00b7feb3a876fd4461aeb0b56a23dcc7bd5293c7b6f90851d8ed1591075ffc7fd262cb478e949132540c9f671ca394d0fcd148fe8ace8a337ef2ae802eb10eb2b98348289a6c69d7eba3a564885a9d6760fe2ece1d1975be2f00a5c31f9e44cf7a02c54b7cab389252c23c24765cd78e9d06f1342f44b394bed783709c45c37330f4e22d0ca8c4d8f12529e791bbb00a29ec74a517b72ed2ec2c36dee3f154ef7afeabff7727e5ec737ffa61d109c3feaabf93fceaff01e315605a55fd0cc944d6a4af04a59be6eb520f4236ccda0d70a1c1bbfa07fb7444e0bc6b7934999705f126837423fa4897b24c94a130514d735c10c812ea20925a80915d920cf7a4ff3b4daa7d896a1172e0c2fde2c63b04af74b8f27f0e1db614f846ac4b0b556a44dad24948f158d64d92f396d86ed745f5c27805c9665e86def3e45d3c0bcb2e8a4ba4e9a53f4f1d8253fe23bd722c5e682dc019086eeb7cb3bbf3ecd79404f1965eec2c692d7b617381f3912203a5f59bdeff2045dde9f9a80c4a16dfa8c612743d5a9ae104282c9e2aa8ed91ee637ff5fc979209381b8d58721affcce2209e0050e2091effa5d4dd799a0ff8260317a93b62ed40479ef369a1ac42af35421926cc54baaaeb99d0f488680c3a48f485544f3a9669c15116e7cb7e4c0a112314b61528cc3daad01c68f7cd1802f62944540e6d315a4955381a287ecdad26d8337a114dd86f59d287e5f7f24a65da8b673af0f61a35b776c710b62f3ab2e3a11bd722427c64a94198561a40f8bed456986db712d9ee92d55809fe5ed9d1459a8a16e995e6d9985cdb260c8cf69966b1d3f88e7834fa85e5b7708d0682cdf345065f202c83c18f5c2fee526cb9470b70dcbee8e2b3d36235dd3a60a7849881f025d80e9a36aeea7f1c5db4abb133733d971f55865925bf9e6bab90d9291c52fd16298934b03c6591e368fc277f78177f87fefe7fa02638755403de2f6d1f867ac291abf0ae69fb7021563bedd0b90c0cc0a63dbd98e9ff9f2e8fdc0be8a8700c77b64931579302862a181cf565edc5d13d3ea289cde3f4d9a308952eabfbf44b18bf42ba5cb8823f41bb9a12d0aeb6fad6ee39b53ac36e6bc59d4652583772a3c03ddfa00abfd1ae6229200866079cf121bd98de3c74601d86791275ca2d586b5c89844a970de8eb7d1a5692f00a32930dd637b1a8c10a2aa75bc76a2f03911bb11f4628e5be54a768a8338ae958f907e48b18129b91df457118250eb7c4ac65c5b791323bb53c4873703df78fe37fc7f5e85004539d0d614e104201d7cd0e91c7e2b43f2b9864cd10bf99b4969b38b16543f9924d2f17e245af6cd8ff138d1915e6eb1ae8dda199f8e5f76f4160c57c069180dc467c53f5283d9052bd798f1e810e00c8aead021c3d5938b9add70be002745deb3a8fae8fdeac230cc2480e53d18e20bb98cd99c9a72c929516c1ff1bf44422300a94477598f357dcc215e0c0119342e450165d3f604e05528c913c07f81f786609cc10f8863d976c12872aa1b736e6651be7547c867e362a88c056acbf6ae6b5a4d05310f59599244026d2660d2f24001102a382109f5e01c0098ef846b215506ead352bc81ed77e3ddcfa14df16cd847744d377ab9b691dcd8c1b34c38cda6b20ce8a945271cf07d8c58df9dedf7e36edebf9d8975aad38ab4e7ee28a465ae939b17e2c4dadb62c7289d04f0085607d53cc8b47c0a80c161ffa9469c80ec99efe4b037ed4699d8c07c360eb44052bb77b30fb7042dcd9519620b7162dd68469fe5e4b6dc7ce2251c600c422198ba90e27902191f8cac3a284d9c79642dffdc0d1d142fdcd854c0fb49d3cc1ada044c0a9f61468cbd4d12885de12b1764f40ebce5fb58bcf3c59fdfb0c9db3ce4140cff90c524b00a332fd49d85867e059b0a44900b0f7751b9cd2267d0b6f6bf215436e270fa4dc8fb869c2f711b95446d45ec37f7e791f66f1a64942ad5f3616521010404ba744e8273d85dace1bd267f50a08e76269f0be01333b25f777ce57d7716909aa07bea904cf020b589bd006912707e81691345eb4cc4c3c6a3ff1d06f40a78e58d6d47128af857b91c4ca18980c0f3301fc5fe5a6c3dabc605a215930f5543a9386ef02611d6f779b56c394198f5488a2398094eeb11e94c27f08e215bff2631b5c1d5172c8ed0eb22966032de63d3f82673155a3b2b611e2dd7d2dfad6ae736b3be3b4e49d607a1943632e7c9b4cfdfb4ca66c279ea204eca3bf7717ef88d06be2d4f7f607d506ec90281c2c7b5fa79c20e733bff545582c39e601055971e2ca582417a0b3a42588ffa38e321fe7b59ca898245c7a8fa3b7334c972b247520bedeb724b97e37754a956eae8c6bec2138d1d4ec5439c4b07c8552b8dd00e15d53e8d836e899f381c2a6d2b50d7c41cc2aaf9d47cd44f5e47165baf416a239bb6a3730826084d5cb24a0e21720ddedecaa20f5abff667c8f8070db97ad1f40e2aaad87c903745ff5f133e6fbc451c3decee608be1a39e2fd616a3641db076b4e5139942dcd8a0f9d774cb553cb4f61608f5909d38df552cd5dc2aed67081b2b887431f4d7bb3bd4a8bbadc46ccf921b1f24f957130fc60d1656d589ee5f7cc386e3e298fcdcdcf592b1a7a43e1163dc43e23a10759cc18a938f62bd11a541b713984fbaad644cf0cee7f19e3d1e72ab4d097dd60176550d0e736aff85edc15fc1e687d795ce258a2552d728d72f9842aac8e0b0112b47ad53918d6af7e85683e7c497507d99e022d185cdf036d16019254c8f475190f070ee13ea8f7f87b935160f72f45b1804c079dc5ac8f52ea21a824899e2228a9d7831a6ac74437411e3983ff091ce975314aab62e8c091a5f6b34c9b6b990c3e9a477dbf8bbe6d3d6b7dd67d8f0d8d2c454b893170c768e2ff81df859848fa19c669cd792d14a472cdca4763da22730370e48217eb46e28fb4b4b4d738b60146702da4ad040d4c1123c538e152068ea063fc282901721e3a706e71fec30830dc5281c8240c8ff3d37959205b8523c046dadac2af0959c747939de87aea9f6d9c56b1da5bad14ca705a95e0b45cc20d77df7a244a551c83abda0138c4d4a5080ef7454614a49a7d0bc9e01d71860108e7cb67756125031ade2d046f537d24fd2ee63e56fe6de45cdef8dbfa78e0a528bd24900e94bcdb07d0213ffa092b8bc03133f33aea5cd7b3c80ae076dbae47a0502f1218890953a01372570b68db5d46be25bdcffe1bb5c183035a9c14c244230fc05cee5074892abef9861d73c54c527310c6a134358779a29e59b91007f8dddfd4fb0aaf805df2825f77eb3d1fd988ff9301556dbf986633626f624ca03c3a513c71518b98c86f0ffff2ab31af6c3061adc5666e6adc798988c198162c90923069c9de8d87c7df554408b22a2f13291304289d718579db7a001ad0f7b856532ae6e26cb6927a1dec225cd586259dbe6e5944d77cd94b044fe4484f62449262d768225fb05885a0bac00813ce88dfcd1180f46da1324f57364f66995b0e5379cc2bd4ad70e23fcb7783d963d7e8f80a899e1bc6ae8d1bb71ddc4fa87772887e18d38920bd67dfc137f2a76e81ecc10c2b25583aff2877d91851ee908070b4fb48db4e0aaef178cbc32558138099db533a0ea19b97486d04ce006a8d4cb976dc9e8aae8c5dc38871ab4ac2e347322092a552ff55d1e3c79f10bbe376e449f95eca3a3e643e2e414e5ce6aefacdd5bc6ac4a8ba30dd4a05f5ca7dd6602a4f2c9885ad2706e735d3cf790b6857305f26aa689a2742fba22c3aad2f8b6c9c4ca2269a07963088c867f9902eb4f209bdb9acd3489b8f60c3de8b31a16b3e378cb43e226a716dd8fef78584ae6637126a757ec55930565c405c691a13f053a8f2491697ec539366faf996eac437d173fa6bffc08e06205a85aca0260d748db0a9e67fe9f3b2662bbb00b7812f15047d2c8a87655e199dc557e4db8b281028f482f5b8c782aac950024346061cb1421db57dd3e187224c68835e47c49f2fc0f425c29877da0d464872504d25fe0a73a8c889a80091b588e92577507c8bc1ae919ed280c1c77b886f2593db0167c74c424190a78477fa2c7ff3ffd441a772b3cd1208bc3b21970aa56664b4ff509b4a3576a19fa94c5e6b3c7eaf766dc2c4785f293cf68f53a4d6d34994be9a150ac87c75d591b99b5cf3e0112e9b5bff90f19235e81ad944aa17283922ee8b345cacdda3cd25dbe7c0efd8b578710e56467c53a30cb5e88f37bdee241fa1bd22c61a82cc1b6c2ab089d518d0d66396f5952f99da5d96e6a2eaccc2c49398d272e30ab34e6844c92edb3f3f66cf50abc96e77591f9f51ef97bdd9f65b089fab834bdeb1c4500749bbf04bfb9f6979956ca60c40712f3a0fb624a32ea84ec5dbae02f7a9fc304c268390abc364297e29759681e62136928b99b272f0b8e6bf4323fa438b529afdb629f27aa0e6feac2ce00857bcf74cd982c282991df8cfc2f9a9cb035da86542baecbd2e43126b32c569ddd803ac53401a57c8ac3eb4e04ac120b60baa8fcbd2598eb986ca9ae8a57a7d8bff1275c49fcbe7ff9b22315f8b71fafa5ed75ea0bcc3837587512e3efd6c61a486fc0a3c42d302feb815ac84e18c66ad86db8a5d65500fd233501a6ebcd1388f626734e2b563c0f102ad80da66924be7aeed537720ef72325b80a15fd54a4db11a97678c8abf4a8ca42e36ec43ff020070e1de9e54bb2fee1a2a42c422a39be6e4c0faeae7f3ad5f5736f526444dcd4e2a06bc70ffb815e68f38cb5864d3403bb391906c1a3fd8e9cc66d42bba9d3e7a13be70b8abe0a53787dae58471d7535ceed6811b528050e3427cf42cf4b8ee22260d2adb2e60b50efb2c6c308452197acf391030ed1cc82305a0935f9120dfdd76a08d5453e1dfd0b1d1a6055cd682df47aa8d008d99d50728ac5e75ea1d31c9de30a32d4917c6047f8f1215a132f4bec770e00adbee5a9e1afdc5e32e4df7abd9fd9da9d59f217e2b26c522e2b440ef0ca00880ecc904e6a57ce4c908d1dc010bd84cc69c50c0b4e113cc1c3666234d89e4d57e506589995a94a38fdb0996fa9ece549d6862802a5569a6a7fa9a457e6423ee8476e3e2dddc3e49f4714579b679a0ec6715a88d7268380d68cd49e2fcd7f4544357a2a2d2a943cc542ae7c64aeef1f9d535491b1829232624c783fbb5d3334dd2a843ae8f3dd2d375200513320eb32698551e709ceee1d67dc2615eea72973c64dae485582d936b320c32551114cb695c5770bd63f669da018906c761c3a7d72fdffd9452d16ab8555870c0c66a9a358ab6a78c4fb80faafaa2da158986d58d8ca01b9a6f22684ed50f4afdf81c6fd622b5b89b88d13d5908b8881bcfbf7640edb42d57ddace0071fe4036a5c998c7bdada7b828ba130559a33766dcb1371acec9274505bd72273579e31608214d8958231e3eb10fa88c390ec3cae1de698faa7606b51384001ee88246147cc49ee8153e486b6162de6ad06c5b9c4dc2dae93a1cad6a9802fe912740b093181ea2b6b7522d9d50e534a93a19e7898e0e2567e74947fd5cf46601f7a23c9947c97a1d1928dc831b8a97096f628c", 0x1000}], 0x1, &(0x7f00000027c0)=[@rights={0x20, 0x1, 0x1, [r29, r30, r31]}, @cred={0x20, 0x1, 0x2, r32, r33, r34}, @rights={0x20, 0x1, 0x1, [r35, r36, r37, r38]}, @rights={0x18, 0x1, 0x1, [r39]}, @cred={0x20, 0x1, 0x2, r40, r41, r42}], 0x98}, {&(0x7f0000002880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b40)=[{&(0x7f0000002900)="b8432c03691e98c5f0524d13c7540447c426f6e2ce96d5b9312afa5d891bad0b46a752ff28b9b8aa3ec0548ea3e56cb76bf99bbeabc632f9306da7ebb256337af36e3d6e714aa2b28ed081a146947f8908636488670960df6e375183b927265b8ff60b3b70974d60fe14cc5749e9c876d45626fcecfc374585d4d16b7dba74d0aa", 0x81}, {&(0x7f00000029c0)="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", 0x1000}, {&(0x7f00000039c0)="50fafbf548b5d2b9d6042032c8d85328c39520f6f09246b23b73bf1b6a9223f03c46794a1416f7edd0cebda6b64292466fa57222e4479432b5dc47265ab0861df6595382fa444000cac8b0463f35b7820ff83edd838d0d865a0ab95b4d58f55c487a6760ba1d009823b9888cd24ca208cc8e38d7a731717b12343d7ea732c92b26bb6dd973c34b10ab11a7912b0c38ddfab5bb5c4902cedbf71907e909927bf9daa3af74fdd0b4db0dd52fdcbef7c7b72a215dc740c0d0094dff889e593b29d6edecda1b6911e8653ac9fa1d7c3695b1a93bb456d04eeaa98608c8d87c7f388451d4cae9d8aa", 0xe6}, {&(0x7f0000003ac0)="9e6daf6da01735759bf69fa2c43beb140896c02a5aba2a3a86d1c61192411c68686e4b3b04763bdab868130d7f886134c0eea5cdede68e4699680fd6d8d0eb4c18f6c7943a9df8c2ef03d9a91b8c4969628b13c5c602f28d189b23f84d0cdb8165d08296873e8c820cea75fb48e5dda93a4395b1ef356cb40a499d9f1398d8", 0x7f}], 0x4, &(0x7f0000004d40)=[@cred={0x20, 0x1, 0x2, r43, r44, r45}, @rights={0x30, 0x1, 0x1, [r46, r47, r48, r49, r50, r51, r52]}, @cred={0x20, 0x1, 0x2, r53, r54, r55}, @rights={0x18, 0x1, 0x1, [r56, r57]}, @rights={0x18, 0x1, 0x1, [r58]}, @cred={0x20, 0x1, 0x2, r59, r60, r61}, @rights={0x28, 0x1, 0x1, [r62, r63, r64, r65, r66, r67]}, @cred={0x20, 0x1, 0x2, r68, r69, r70}], 0x108, 0x4}, {&(0x7f0000004e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005040)=[{&(0x7f0000004f00)="b17636f97ff686", 0x7}, {&(0x7f0000004f40)="0a88b4de3ac9314401a9b74b75975e2081af142a9463f3ba6555ab6fa661b82e9d338c19bfe0fd8b59528a722bc271a67e2f43b928b787", 0x37}, {&(0x7f0000004f80)="b056e3de1a8e373d3fc7ea93e9217c95a67dbec4190de9aa3a23150e799cbbae96674ef8cbab5562f428b168c8405f50b4346f18ab672622e9bf5ad0b6a849ffb544bcd3a1c8ecbdc493d92192cb2782e8c9eeaad5e87ed84126ba13d8d9774847ee910fb2b330357cd1703af955945e926ae5d71100d212ec427f277d56cf76d1beea127f71fe871c8a365d58a679efcb05659c350acb022b6b7b0ca8783c2d8fb2c67eb3036e57c0adaf7ca59694336f13d19e694da34b6ceb65c397f9", 0xbe}], 0x3, &(0x7f0000005900)=[@cred={0x20, 0x1, 0x2, r71, r72, r73}, @cred={0x20, 0x1, 0x2, r74, r75, r76}, @rights={0x18, 0x1, 0x1, [r77]}, @rights={0x30, 0x1, 0x1, [r78, r79, r80, r81, r82, r83, r84]}, @rights={0x28, 0x1, 0x1, [r85, r86, r87, r88, r89, r90]}], 0xb0, 0x4010}], 0x4, 0x50) r91 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_mreq(r91, 0x0, 0x24, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0xb}, @empty}, 0x8) setsockopt$IPT_SO_SET_REPLACE(r91, 0x0, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000b0030000f0000000d0010000f0000000f0000000f0000000180300001803000018030000180300001803000004000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="fffff4ba00000000000000ff000000ff76657468315f746f5f6873720000000062637366300000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000140000000000000000000000000000c800f00000000000000000000000000000000000000000300061680000000000000000000000000000000000000000000000000000000004000000000000000100000000000000280052454a4543540000000000000000000000000000000000000000000000000000000000000000ac1414bbac1e0001ffffffffff0000006772657461703000000000000000000069666230000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000ff0003590000000000000000000000000000b800e0000000000000000000000000000000000000000000000000002000736f636b6574000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000700000000000000e0000002ac141429ffffff00ff0000007663616e300000000000000000000000726f7365300000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000730000560000000000000000000000000000e800480100000000000000000000000000000000000000000000000050006f736600000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000001006100000003000000000000000200000060005345540000000000000000000000000000000000000000000000000000000000000001000000020000003f0f00000200000002000000ff0100000905000000040000010000000000000007000000ff03000003000000c000000004040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x410) 12:46:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 443.529453] input: syz0 as /devices/virtual/input/input1960 [ 443.560609] input: syz0 as /devices/virtual/input/input1961 12:46:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 443.618745] input: syz0 as /devices/virtual/input/input1962 12:46:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6]}, 0x45c) 12:46:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40, 0x1f], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 443.707279] input: syz0 as /devices/virtual/input/input1963 12:46:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:33 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x14) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x7, 0x0, 0x0, 0x4000100020, 0x0) set_robust_list(&(0x7f0000000140)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f0000000040)}}, 0x18) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x2c) 12:46:33 executing program 2: mkdir(&(0x7f0000000340)='./file0\x00', 0x20) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() write$P9_RSTATu(r1, &(0x7f0000000500)={0x8f, 0x7d, 0x1, {{0x0, 0x6c, 0x1, 0x80, {0x40, 0x1, 0x5}, 0x80000000, 0x9, 0x0, 0x1, 0x19, 'trusted.overlay.redirect\x00', 0xe, 'memory.events\x00', 0x8, 'vboxnet1', 0xa, '/dev/rtc0\x00'}, 0xe, 'memory.events\x00', r2, r4, r5}}, 0x8f) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x800, 0x0) sendmsg$key(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x2, 0xd, 0x2, 0x7, 0x4, 0x0, 0x70bd2a, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}]}, 0x20}}, 0x20040890) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000600)='./file0\x00', 0x8, 0x8, &(0x7f0000000ac0)=[{&(0x7f0000000640)="66fd4b21190e68f032d456634578e671bab212e35ff6e4b57354223197e9b346bc24ae54a07781e9a2ab5a96108e8e15b958887c7bd6a5ae3d26f17cf222d498ccac25298e2e640fae899aa7f6db7fd95874956fe4f10d71ec4bf2c2a21b43c403e9a93d0116cf1dbe660d1dc8a3097f699809d001edd2e24536b703332d032f74fff46118683a3cbc77d6b56e23de6bbfe2c06f7300e6804ef5ffd600a1ede62225dcb9b384a211609640604a6bf25f5fe5da5385cc", 0xb6, 0xfffffffffffffffb}, {&(0x7f0000000700)="49b93b5e1052bcbb5095156b8d21a239463ca13d4a4ac89471b9fcb7db55286a0935df4f4036b5bb7d14d36c2a68b7c97a731408cdbd127adb", 0x39, 0x9}, {&(0x7f0000000740)="1ff2fcb6ae19a8e71df1fbc179fe31aca62bcb26902e4f108c5224e5d47c6b80a89f77cf75d9cfda6838a192b05432c92dc8f3f1e7f8da59718f93566dbda6737fc51930231f438c2da3a7033432f07f29f96fc4aab72b9bc768a5710270d2155762b1a9c08d60f756b050b3f2ac44c7061f", 0x72, 0xfff}, {&(0x7f00000007c0)="77505e28380b30d18cd5594c2c8ad703a9211117c41d03f48e3f2caf777e05cd3685bad38e150253d065c4a6d09b4599e37d3f22246ed6baea6d85d083dc4a24c699340eb22ed3b89c069c565c6f0c2f2114f39fb317c0b3bd46abc497839ad010ba622be4e4c5d6a665c4b88e0b8debae55086b505639d873d85cf5c9e3b779d6e27a1a3ce2811c074b4de6862ff961973d614ecbcf881e11e7bdf2de5b52dca6410f4c234386ccd7a7fb2ba0ec8ea3a310852242039363ea", 0xb9, 0x889f}, {&(0x7f0000000880)="95f9a2afd62b7893158aff2bec16eb275031d371fe956f0768bc927ef5b6a6fe4b368ff7bbe6c3c5948bf93dfbd548e9b9861115c48c208344adc90472e58a96f70dc243d5f9a1ff1f3156b3140e61ecb74ec5895909512ff1dbc7fdf5251434eb5de9b01ab8cd5b14862c8f67dd7c9652686d76e83f49b5b34288908ba5205b65e972bf63286f9ca0a19bb131e362d81732976bc26d088a283eb543e7254721a3e28cc0a81e5e14ffd33f11a7c529850a4fa4a89615d9c59e0e5983eb8556a95936795eb52d8ce197db434eb9362ce60d9c4267f65bd1", 0xd7, 0x4}, {&(0x7f0000000980)="789b97850be72f63a378437471bd6ac7e349935fe4c416226f8f9d59e8467ef839ef2b78e3e2a320669d4778def2acbdb69d52080daa7d943ef26ff7dc64c3c4005d47432e8a1f183d572559b854f7f4e752a57702b687e935d452e6afde117840", 0x61, 0x6}, {&(0x7f0000000a00), 0x0, 0x85b}, {&(0x7f0000000a40)="c3bf01b42bced3fa71aec4ac21d2b4d46b7d68f5ac794cde5d9582ca312716945de5cdae5bd1e369227c2c9e91d8b091edb51a163776a0410b64923c8338e9e762851017c0ebc6b64fa85b1202900b9be4480324", 0x54, 0x1f}], 0x40048, &(0x7f0000000b80)={[{@sb={'sb', 0x3d, 0x8}}, {@jqfmt_vfsv1='jqfmt=vfsv1'}, {@data_writeback='data=writeback'}, {@nojournal_checksum='nojournal_checksum'}, {@nombcache='nombcache'}, {@resgid={'resgid', 0x3d, r3}}, {@nojournal_checksum='nojournal_checksum'}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@dont_hash='dont_hash'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@measure='measure'}]}) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c40)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000d00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x88}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r8, 0x0, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20008011}, 0x800) ioctl$EVIOCGKEY(r7, 0x80404518, &(0x7f0000000140)=""/240) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.redirect\x00') [ 443.769183] input: syz0 as /devices/virtual/input/input1964 [ 443.790975] input: syz0 as /devices/virtual/input/input1965 12:46:33 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3]}, 0x45c) 12:46:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4, 0x40], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 443.910242] input: syz0 as /devices/virtual/input/input1966 [ 443.939520] input: syz0 as /devices/virtual/input/input1967 [ 443.951188] input: syz0 as /devices/virtual/input/input1968 12:46:33 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277]}, 0x45c) 12:46:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000100)={0x0, 0xfb, 0x107, 0x7, 0x8, "ed485e0256420d328226ab7469c1ac7c", "bb98077853e626ed62888e7674abaebb9fb49ebcaefe2f59441b502ece2d15aa4547c34b5fdab37be64dc2111c6960133d9ad3cbb337c8bc7e60eadfe2fa1b73e7fce0c955a3f060a5c4ae23273b26d7103bd832f03e1d9780b55c69c0fbca6ba79076a200b0ed473545df56a0bb76033e28157b22bc945272a1e6861c257f8bce9b930e39928793808a5d2577d86aa89e491710c7a7b959fa97109d02f56076400832859c06d37f77b7f14a837bb03e233d1c792a5f4c829823e197516208b6a5e5680b451632f3fc58f0c72377ffcad7cc472beeefd14cfb8e974b47360c193e624f224ef815ee36f5ebeb9fbf1d8f5d26"}, 0x107, 0x1) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800, 0xb4], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 444.089838] input: syz0 as /devices/virtual/input/input1969 12:46:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0xffffffffffff1c3c, 0x0, 0x0, 0x1100020, 0x0) 12:46:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 444.156940] input: syz0 as /devices/virtual/input/input1970 12:46:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1]}, 0x45c) 12:46:34 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x8000000000000004) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 444.200916] input: syz0 as /devices/virtual/input/input1971 [ 444.274634] input: syz0 as /devices/virtual/input/input1972 [ 444.303004] EXT4-fs: 53 callbacks suppressed [ 444.303013] EXT4-fs (sda1): re-mounted. Opts: 12:46:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2, 0x800], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 444.318675] input: syz0 as /devices/virtual/input/input1973 12:46:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6]}, 0x45c) [ 444.368783] EXT4-fs (sda1): re-mounted. Opts: [ 444.381215] input: syz0 as /devices/virtual/input/input1974 [ 444.385281] input: syz0 as /devices/virtual/input/input1975 12:46:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7, 0x2], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) io_setup(0xd0d, &(0x7f0000000040)=0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) io_cancel(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x80, 0xffffffffffffff9c, &(0x7f0000000100)="0291ff8ed9f3bbb94498222eb23e0ca2592313d95f1307f7fa06146d8d94d2fda4dd59198cb662976dbcc4ceb265e757c93ba8c8c236427bd8333cb9e5aed2742c6c546d46a5d1", 0x47, 0x200, 0x0, 0x2, r1}, &(0x7f0000000180)) 12:46:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 444.513754] input: syz0 as /devices/virtual/input/input1976 [ 444.529564] input: syz0 as /devices/virtual/input/input1977 [ 444.551127] EXT4-fs (sda1): re-mounted. Opts: 12:46:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x84a) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6, 0x0, 0x7], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 444.597262] input: syz0 as /devices/virtual/input/input1978 [ 444.605992] EXT4-fs (sda1): re-mounted. Opts: 12:46:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff]}, 0x45c) 12:46:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 444.669189] EXT4-fs (sda1): re-mounted. Opts: [ 444.679705] input: syz0 as /devices/virtual/input/input1979 12:46:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3, 0x6], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$TIOCEXCL(r0, 0x540c) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x8, 0x25b, 0x0, 0x100022, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0x8000, 0xd13) [ 444.776326] input: syz0 as /devices/virtual/input/input1980 [ 444.780672] EXT4-fs (sda1): re-mounted. Opts: [ 444.791024] EXT4-fs (sda1): re-mounted. Opts: [ 444.797268] input: syz0 as /devices/virtual/input/input1981 [ 444.810896] input: syz0 as /devices/virtual/input/input1982 12:46:34 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 444.899963] EXT4-fs (sda1): re-mounted. Opts: 12:46:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/prev\x00') openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1012801, 0x0) sendto$unix(r0, &(0x7f0000000100)="7cc7a41de60b5b3540c0fb2002ee53ab1a0431cb546c3360985fe0faf3f7b0b1c5b1829e478a2de441687a7f66df7f7379bbc8a50e17f3c6e1d622926ae299d7505dfc995bcd2ad37503249c52ab1093e81e448d16127ac8c63e85b9", 0x5c, 0x1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff, 0x3], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 444.961473] input: syz0 as /devices/virtual/input/input1983 12:46:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = accept4$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000080), 0x800) fsetxattr$security_evm(r0, &(0x7f0000000200)='security.evm\x00', &(0x7f0000000240)=@ng={0x4, 0x12, "2af8d4581ddedbd0d273"}, 0xc, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) sendmmsg(r0, &(0x7f0000002080)=[{{&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x3, @empty}}, 0x80, &(0x7f0000001740)=[{&(0x7f00000003c0)="932b3ff73c5651e3eb35daf84d1180b77e2e28548e6f17d9c7bb741fc4f1f5924755df84acd7ea815d177c984ce7ba08e7a484538906c8b692949bfc80c825823b94e811b035c2bdce5bca56c362b872c51600abac74e44236fff4474613bf005b07d51464eeafc9f650d8105bc18ae7259cb5f1da83518723e0d2105b03a2e0ff1b01448647866c6916971edcfcb0c305ce97d35483e58e7d5a7ad8f037230f9f4627cc5e068a2397a7d8215c2358ec027baf21f9f0924c62af6cb81ab3c15f51c5", 0xc2}, {&(0x7f0000000340)="62495218e492516760cf6ee00c14ff67a09ad4080a251016b1ca81eba125cbaf31f79a84", 0x24}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="5483cdc0b2a6e7a03acc701341486b5e64209dbd5d31637f17faf26fcbd2badb5bcea819fdb4aa01b80bf31720fea7c7787937ddcb4ef0668fcba96a532a586a3e02ed1746d5502bb7ab66b50adbcb0bc727a248addf0eff690d456a523513e0b33b8d2064dfe1192f8e89b9109a620269ad393fe123d53322529cd8025641671b8f693b35c75c55c8073d5a8369138fc2996ece124922426fef6f2503d7fb2733d8690d322c79208fba1c42ffedf6c9fd", 0xb1}, {&(0x7f0000001580)="bb0860fcd0d2c4afb0e888a188a51df6653f359b0451f93cc4b60b5b68ad1d30b32566a909d507c54ca3e04fdff7ad32908bcde2af84da2cb32fc65e83e4292cbc432cbfd06266b62b5593ba241d367f54980ce9e8db9897894b01e60771a90c4577f84c9385b7d35bbb3f2e77a508866d30ef3f9b4dedab89756bd5e42cdfa2c8d0092d34b9d8fd631e667db755669e6845f3cef1bd8100cff21e8c41a2065660843a5940e39c1d0d52305165a59eaad8df06bc6903f02d7ec2953156061402021ac909e2a15646889ab064f7a3c7", 0xcf}, {&(0x7f0000001680)="b139361b60d2ae38c0475457d2e544f9988a9f8f78dccd491b0e0a889ec9ed253d3f85e344caed66e9fabca1ecb4813c8cfb3461f1767a851c5e576b2c7b7bb86ed44adc911077456448f125425a451e5dda256443b0e7fae1bded304e6433bd48cd966e2914a869e1b4377a38d065594a5b0b8b252264ff6005fbb3298a0ecd7f67c40e74e7545793f6472dfda8f7dc7aeafe7a6913ae89153e0d16088456", 0x9f}], 0x6, &(0x7f00000017c0)=[{0x50, 0x11f, 0x1, "366563ff57e4acc7f6f078478446c5b7256227b2e08c4655b89bcb7d16a373100f62b9fd48257525b0f6dd6679b095710362fcdb3c5e1db65c"}, {0x30, 0x103, 0x2, "11b6ad1c8114d6b877442f6229de2f809381f7064004e086b3fc06a3ff4a416e"}, {0x60, 0x1ff, 0x3, "a8fc24a74dcb4e960000469c3649c251946356bc8abe1b0110dd88850b91aa0e9f51eb9127e7b49466b9ad7fd85a607822a17325e262bfc719fa89a4575cfe61ad5600b7bd05942ceba49015"}, {0xe0, 0x88, 0x20, "250f5bc85e769982e5926ec94f3a88be24cfdcf91b9b642362e72c787e3bf7b62dcab9e47eec2b46bba9bc55da15345fd22aa037e423a8dc4df22741093d145b8f7f5249938d636322a62b17b50e2dad1cceda3e6be3eda4b7bfbeca7522ee4f25167ffdabe4b91ba831f694b9fadc845299a5a7283b7a89d02cca7cfa6aa408fd326b0e821ddfa1e9e1c0db513aedd31b96abad197f45cee9d975c5f7fd85e055a51b93e4a25098cf9ef5ee6532d12252d6e8eaba87d457a92baeb88eab3ef8cc5995329da24a4cc56b5d6c38"}, {0xd8, 0x1, 0x20, "b1ad508a22ad87b963cd270102d7ab3fa571ba2c13b45b3f8c103509942df625ec86eb96859b01d08292d59f4cb679540aa689dbae3b079e48ab2bb91fc9a214fe9e0143142ccc99366a3425ea40debe688044079de37fa89d27ac76d2af3a907a79f189eb493f49083b0b546e5f5c7942a63d824d956337c08ee0574546b7ed71ef2693dbc48214017462d08698e0959c933aa8c8ef8b02feae2cbd0bc2ed3e71540237c154806343399ed1a2d3f8e2e32e8584b62945f393e8421448b98342a140c66d"}], 0x298}, 0x8}, {{&(0x7f0000001a80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8, @local, 0x13}}}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001b00)="037288de810f165949d3feeb20b0a96645a9b3908e02333ab66a70264c4345c4fa3a960a6218f9def72565173f41fe42cde9aa93e451ea98d183d971d59679cae96efc45656c5608af2533b1c4b174b0b44f89936afbe160fff017", 0x5b}, {&(0x7f0000001b80)="a156e10af469e900a347c298b150cd2ead9b3ed079a946f1de6c34accc21e00ee8c67521201798756289461b563ecddec99d80e0b975cd6482a7e4de6d7d6ceabc427dc90b", 0x45}, {&(0x7f0000001c00)="a5b8ccb792abaa3608a8e72da9dd4df6b4538de47083f54baf45d40a708fc2cb85d473e531d5a2ab1ca5e9cc587b7cd0f54835f4de485451e3982b3e94dbde09ffbe67dd6af5725e0fad3b8cac7d65f19a7b482e73afb9d647b9fdfd62843613f31c2d641379a3133dac3dc44dd9196fe332eff580176a657e9240ba6eaa8e13e389e0d1fe55c89ddc1463ef29fc3d333b4bb4df0f209f1498a76d7ca2393e224ab7f166b6771420e23f3646db35a24771faa47167b4d99775265e04daac41f1", 0xc0}, {&(0x7f0000001cc0)="26f1198ca98546c89b37071e44402f58f7a1457ec3539a222967ff4548c260ff0a4b19d85963f36dfffdce529f", 0x2d}, {&(0x7f0000001d00)="72d4760770f3c83b8223cda299fdb811190458be4ba925c2c1d1a99c646943e0792e645ae5c68322d9b795278c3fbc8f9938dfe3", 0x34}, {&(0x7f0000001d40)="ec118dbd2425024663533d771c5a988e950f5f3440ffe4f7bc97c565e134e7802c65e75cca690bfd6c949b75b7609c80023dc46dd1e654deb5e6001582b1b82ae8838119ae7c0787056f795b322656dfed0431f02145d5fdd2cc66e5564bd1fe5ca677895a286441f62a5fa249cda7722c27593d1266e3c4173b5e6cde88e5cb8ef84811245d1e43bce8ece913d87ce6b1be255c44b8a0bacea25c886483febbcf119568ae742b6bae9e4d3d5dd16e7f815fa6992018233755bd0ee1877c062184cdbc4b502fe094e3d97b21b051244c626a44633ba9a8c4d1672399277c21a718c5168dc983fafda829ce029d5fa28a2fb7", 0xf2}], 0x6, &(0x7f0000001ec0)=[{0x18, 0x107, 0x7ff, "f974695cba"}, {0x78, 0x117, 0xdbf, "b9910b55e6f7196e4f852d98c2a6c9d52a15324f9d76644a381ecb1d7022d8b4ff3f45abc00884aeab1b11648539e2c2266af66132f78d34581243e433517a6c37451b064ecc3fab4680adc0168e0af2b015bb373ae4fd3df08155935ae6cc1f60"}, {0x40, 0x115, 0x100, "ade22bf38aeb17432542e2c8f17d7f2418794ba7cf6290fd5184b9aaff983fcb27ea90b04fbac6ede2153e763dbc24"}, {0xf0, 0x105, 0x1, "3ae6d26eaa5be4cd5c64d71765deaef61f24749e2606fb6d9ae6d2fa9a50904293905a933d9fe6aaaca44d36381cfd319da27fabf271577e7dc828249a435aac22a66a2667be4affea6f03227dd748bfe6a2a32ebb9bc9464a66f87eb575927351bf863911db7bc54832e3bb3630997b48ae339b911d28c6967bb7e3da83d37ef9c239261ce1bb2f86b30251e364992a72442b5d6641429da341c87bfb054d482524e49fc1163769e779b4cdaaae62759fdc614f0b7ac0ada50e4ba2b816f6ef1ebb1063244d4cbe9e575360bad5d7329cd97d20c34676a5848b"}], 0x1c0}, 0x9}], 0x2, 0x4000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80000, 0x0) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x50) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/253) 12:46:34 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7]}, 0x45c) 12:46:34 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={{r1, r2/1000+10000}, {0x0, 0x2710}}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 445.053349] input: syz0 as /devices/virtual/input/input1984 [ 445.077028] input: syz0 as /devices/virtual/input/input1985 [ 445.103664] EXT4-fs (sda1): re-mounted. Opts: [ 445.117150] input: syz0 as /devices/virtual/input/input1986 12:46:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054]}, 0x45c) 12:46:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000080)='./file0\x00', 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a, 0x3ff], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:35 executing program 2: mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@empty}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xff, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000100)="b1599331ec4ac75c12ab4d164b761dd96c3faaa7c38c31a40e3e19e0e78bef280e3cf0ec48a052fd17d301cda003a0790df5ae301df231bdc1bec3068447e1ad0ac44dabeb020de58fc23b1c70c7e4d4559d9975d51bc0aa5139b690a315554f902434a0267951d46a7af05bfbcd12b22fa926094b2987c5fbb0076009f70aae38e464ac621128f1b55b11eb6c1e96d0df61d59d76c369414733c90d7fc9", 0x9e, 0x7}, {&(0x7f00000001c0)="672bcbd9cca26472caf3e95ea4fbcba0b4a253c116df557bfe52e6613d301ecc3a62929ff6d9f5b4e35b5d95ad537d42d438e840529f7ed77970a84193a52f5e9a0e8a0e36d6b3c2b637535f885f26e103a5e5a13a1fb90154981cd37f25f86ccc09e89274a1ae4053f22647", 0x6c, 0x1}, {&(0x7f0000000240)="a515d08e3205ac31d9ae9d0fa00098704be55919b5b661832db0b2874ee058ed09b9470f285bad015db532b05ac46c49ecb2228f4083579f8f09cd359a30e222c6e4a0a9af21f56e3b163bde85d74772038a02e36bcb50522dd6a7ac6d1a41802da0051b37d6cbaedd7441c290afb3cc2a4d07c2601f268bad2a983ad43a04a8c5da7007b6e6e3b83938d578c2898f9710a9733bea8ae6271e44b2da12ad72c1f71ea600e687a0b4c9e9f7", 0xab, 0x3ff}, {&(0x7f0000000300)="c2e2be585861e28ba96be7aff90eceba9816cce0cd6f5e17893cd93d272fb92b9a582e0b98550b260784fbd977ebbe6bd25a2e2c6f18b0d3ffa26dbde46c18c211fc3987f13c8447063badfe0d5c5bb1102c39dacca47c8cf93dbcce547773fd217eb0bc0cd6e52189cd290298a2d62c", 0x70, 0x10000}], 0x1000080, &(0x7f0000000680)={[{@errors_remount='errors=remount-ro'}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@orlov='orlov'}, {@delalloc='delalloc'}, {@lazytime='lazytime'}], [{@subj_role={'subj_role', 0x3d, 'vmnet1eth0eth0%'}}, {@uid_lt={'uid<', r1}}, {@euid_eq={'euid', 0x3d, r2}}, {@fowner_eq={'fowner', 0x3d, r3}}]}) getpid() syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x20000, 0xfffffffffffffdfc, 0x0, 0x100020, 0x0) fstat(r0, &(0x7f0000000780)) [ 445.214561] EXT4-fs (sda1): re-mounted. Opts: 12:46:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 445.248506] input: syz0 as /devices/virtual/input/input1987 [ 445.268916] input: syz0 as /devices/virtual/input/input1988 12:46:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 445.301783] input: syz0 as /devices/virtual/input/input1989 12:46:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3]}, 0x45c) 12:46:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f, 0xd8a], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 445.366480] EXT4-fs (loop2): VFS: Can't find ext4 filesystem 12:46:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x20000200, 0x0, 0x0, 0x100020, 0x0) 12:46:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 445.425387] input: syz0 as /devices/virtual/input/input1990 12:46:35 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x1a1e00, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0xa, 0x4) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000080)={r2, 0x0, 0x8, 0x7, 0x390b}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x80) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2]}, 0x45c) [ 445.518955] input: syz0 as /devices/virtual/input/input1991 [ 445.552092] input: syz0 as /devices/virtual/input/input1992 12:46:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac, 0x7f], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 445.566590] input: syz0 as /devices/virtual/input/input1993 12:46:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:35 executing program 3: mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6]}, 0x45c) 12:46:35 executing program 2: mkdir(&(0x7f0000000700)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000006c0)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) r3 = getgid() r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x101480, 0x0) renameat2(r5, &(0x7f00000002c0)='./file1\x00', r6, &(0x7f0000000440)='./file0\x00', 0x2) socket$packet(0x11, 0x0, 0x300) r7 = accept4(0xffffffffffffffff, &(0x7f0000000780)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000800)=0x80, 0x3d61aadf7fb0d29d) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0x311) getresgid(&(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400)=0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010006000000000002000000", @ANYRES32=r0, @ANYBLOB="02000400", @ANYRES32=r2, @ANYBLOB="040005ebff00050008000500", @ANYRES32=r3, @ANYBLOB="9771cf22f6db28f33f88992f582179c10300", @ANYRES32=r8, @ANYBLOB='\b\x00F\x00', @ANYRES32=r9, @ANYBLOB="10000700000000002000060000000000"], 0x4c, 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x10) ioctl$EVIOCGMASK(r10, 0x80104592, &(0x7f0000000600)={0x1f, 0xc6, &(0x7f0000000500)="3b0b35209fd1df210f41a610d0a5ad21129a3e9601ccd9ae8ed63bff22210b5927ae7e930e61e15b3a1d3070b41e04e6780baaa603c509f64e91b13282dbf5376bd2aba5e2a093084df30052f396e4b07d4203b07999a717449eb383f2c7b62b8026433e278e583d20d6f7e27ea17923787b12b021bbe720e4161cd05d6a8a8ecae52c27c3da351e8111b8732500f447f34c1a36b8d67a0d76c856478bbf126facd23483767ebd3bfca7ad04bc6918c75bc4a1ea26614c563ee636abfb3b6f4d2cda1f90a3a6"}) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) [ 445.697028] input: syz0 as /devices/virtual/input/input1994 [ 445.726479] input: syz0 as /devices/virtual/input/input1995 [ 445.726867] input: syz0 as /devices/virtual/input/input1996 12:46:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x44) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f00000003c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000280)=""/172, 0xac}, 0x40000000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000013c0)={r1, @empty, @broadcast}, 0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001]}, 0x45c) 12:46:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd, 0x3ac], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 445.869057] input: syz0 as /devices/virtual/input/input1997 [ 445.917110] input: syz0 as /devices/virtual/input/input1998 [ 445.932766] input: syz0 as /devices/virtual/input/input1999 12:46:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4a0080, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bic\x00', 0x4) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000280)={0xa3ed}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x68, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x6, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x1) prctl$PR_GET_NO_NEW_PRIVS(0x27) 12:46:35 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40]}, 0x45c) 12:46:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9, 0xfffffffffffffffd], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 446.039607] input: syz0 as /devices/virtual/input/input2000 12:46:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) 12:46:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) [ 446.126200] input: syz0 as /devices/virtual/input/input2001 [ 446.150363] input: syz0 as /devices/virtual/input/input2002 12:46:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x2001001, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x100020, 0x0) 12:46:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8, 0x40, 0x94, 0x6, 0x5, 0x2, 0x100, 0xfff, 0x0, 0x2, 0x9], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 446.182353] input: syz0 as /devices/virtual/input/input2003 12:46:36 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0]}, 0x45c) 12:46:36 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x805, 0x0) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {}, 0x30}, 0x45c) r1 = dup(r0) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x9, 0x8], [0x401, 0xffffffffc62a471a, 0xfffffffffffffffe, 0x80000000, 0x8000, 0x5, 0xc4ec, 0x3, 0x40, 0x8, 0x4, 0x8001, 0x2, 0xbe86, 0x100000000, 0x7, 0x1, 0xffffffffc7e51c7e, 0xfff, 0xfffffffffffffff7, 0xb72, 0x8, 0x8, 0x8001, 0x6, 0x40000000, 0x136e, 0x5, 0xffffffffffffff38, 0xfdab, 0x4, 0x6, 0x91, 0x7, 0x0, 0x15e3b5b0, 0x40, 0x80000001, 0x6, 0x2, 0x3, 0xb054, 0x7, 0x4eff, 0xcc6, 0x1, 0x277, 0x3, 0x0, 0x6, 0x4, 0x20, 0xffffffffffff7fff, 0x5, 0x5, 0x89, 0x6, 0x0, 0x0, 0x0, 0x0, 0xee6, 0x7fffffff, 0x8]}, 0x45c) [ 446.289353] ------------[ cut here ]------------ [ 446.294289] WARNING: CPU: 0 PID: 28349 at fs/kernfs/dir.c:494 kernfs_get+0x52/0x60 [ 446.301990] Kernel panic - not syncing: panic_on_warn set ... [ 446.301990] [ 446.309337] CPU: 0 PID: 28349 Comm: syz-executor.5 Not tainted 4.14.98+ #7 [ 446.316326] Call Trace: [ 446.318910] dump_stack+0xb9/0x10e [ 446.322453] panic+0x1d9/0x3c2 [ 446.325663] ? add_taint.cold+0x16/0x16 [ 446.329658] ? kernfs_get+0x52/0x60 [ 446.333275] ? __probe_kernel_read+0x163/0x1c0 [ 446.337844] ? kernfs_get+0x52/0x60 [ 446.341459] __warn.cold+0x2f/0x3b [ 446.344993] ? kernfs_get+0x52/0x60 [ 446.348614] ? report_bug+0x20a/0x248 [ 446.352433] ? do_error_trap+0x1bf/0x2d0 [ 446.356478] ? math_error+0x2d0/0x2d0 [ 446.360267] ? __fprop_inc_percpu_max+0x1f0/0x1f0 [ 446.365114] ? HARDIRQ_verbose+0x10/0x10 [ 446.369170] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.374014] ? invalid_op+0x18/0x40 [ 446.377668] ? kernfs_get+0x52/0x60 [ 446.381290] ? kernfs_new_node+0x90/0xe0 [ 446.385335] ? kernfs_create_dir_ns+0x3c/0x130 [ 446.389900] ? sysfs_create_dir_ns+0xb7/0x1d0 [ 446.394377] ? kobject_add_internal+0x27f/0x830 [ 446.399039] ? kobject_add+0x135/0x1a0 [ 446.402908] ? kset_create_and_add+0x190/0x190 [ 446.407478] ? refcount_inc_not_zero+0x81/0xe0 [ 446.412052] ? device_add+0x333/0x13a0 [ 446.415938] ? kasan_unpoison_shadow+0x30/0x40 [ 446.420510] ? device_private_init+0x180/0x180 [ 446.425080] ? __kmalloc+0x143/0x340 [ 446.428786] ? input_register_device+0x605/0xb20 [ 446.433529] ? uinput_ioctl_handler.isra.0+0xd9f/0x1800 [ 446.438878] ? uinput_request_submit.part.0+0x280/0x280 [ 446.444237] ? __lock_acquire+0x56a/0x3fa0 [ 446.448459] ? trace_hardirqs_on+0x10/0x10 [ 446.452688] ? check_preemption_disabled+0x35/0x1f0 [ 446.457700] ? perf_trace_lock_acquire+0x122/0x4e0 [ 446.462660] ? uinput_compat_ioctl+0x80/0x80 [ 446.467071] ? do_vfs_ioctl+0xabe/0x1040 [ 446.471127] ? selinux_file_ioctl+0x426/0x590 [ 446.475615] ? selinux_file_ioctl+0x116/0x590 [ 446.480112] ? ioctl_preallocate+0x1e0/0x1e0 [ 446.484523] ? selinux_parse_skb.constprop.0+0x16b0/0x16b0 [ 446.490149] ? __fget+0x1ff/0x360 [ 446.493609] ? lock_downgrade+0x5d0/0x5d0 [ 446.497762] ? lock_acquire+0x10f/0x380 [ 446.501722] ? __fget+0x44/0x360 [ 446.505072] ? check_preemption_disabled+0x35/0x1f0 [ 446.510107] ? security_file_ioctl+0x7c/0xb0 [ 446.514526] ? SyS_ioctl+0x7f/0xb0 [ 446.518252] ? do_vfs_ioctl+0x1040/0x1040 [ 446.522404] ? do_syscall_64+0x19b/0x4b0 [ 446.526459] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 446.532268] Kernel Offset: 0x3a200000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff) [ 446.543246] Rebooting in 86400 seconds..