64e0e08a6e261d9ed7e725e482d8377bb103af75edb835da63ee17f2e7fe075ffc11a56c52fe0f1f8c5b64b413f56c7eabe5157803f801be522720f64b25742f71d3745dcd1c3555e35277d4fde749fb5159d1bbb50aa09848bdf22eeef2d6dda075edfc5c8f9d06e67e9cb7da0d3e932a2c63bf149a3b6dfa38996e677e4fdbdf6ae275e3cf99076094fd20598c39096ddc5b3575ec9f042ed8b8580bca20aca5cce8b498ed962e00d42f217a9ae85047f860308403ae5517226bcc25caaeaa62845e4019d6775eb75f178a277a70c3ec4e03ef35b7e412f1d81a32563cf6cc3e1fe1beea41d77b1708a7e440ad85de0892e993441ea0959b98714cda44e1a6e66258c532e5615e241e98930ee6e8f5230d567eef80527d380249c8e2a0ab1bdff04ffc9be7b3652dd020639a0306c1d7304a662d9d66504fe5484f304da730cfbb8d70d71644018962fd162682bc3004eed9d5d06582ead5d9c2d5719e928fb8dee85cab09cfa531b12cebbd60c6ab6fad3af9571e3010ede318c55cd9f0d35013b6c8ff7e4f0d21789e24a6df5be24b60a32af9a85b8c449cfbf03e299acd86cb44b4d3accf46ae9c4047aa4c087f303e9cd6145f19dc75be1269db993d2f9ac8a8f7ee471ff4bab34624e59fe5e59d752c9994d2ec5d63f09aa20b3f14192e9fb3600a7e409a4d64158885fbc576869e48e930f6fb7d422df210dac3928552c722ef366e873817ec74df7fdb7da832985116e759aca3f2794799e5bc1b336fad015fadbecd440cc33abde6c05948f6c8696d41fa1aa66c57365355492166f08b1b81fc5ecb19a0578b2d5777ca50ba50a9600eb4d77302f7c63ca683632111e47847fcee045ad2fabd44ada91944936853d514e0e4339349a414eac4c0c2bc14198cf7663ebc6c51982bbbc9589bb8658cb9c0013ca234416fe94a1a0fccb6bfbe70472efd3fdebb70f8d88724ec275887fabf73441803a1ca2f39802aa9f51d3af966b266ff5a1276ec761a2d685bfe88bd912ab4192d5421aea2357ac54f80eb10682eda4cf16110f42f454881f68ad5284daa826e7206bd2152a6a86b426f52e1d7c725fc52714e6dabc214da7db2f7a6f2e5c39f5b82b899aa2e85e02c90d96aec5fb863030a046f1456800881729c361691d0be1c27f591fadc8d9768d78654af187531ae133c7700da282af9d91e5fa09cf466b112a46572391db1b21216db467013fb929b8bd4238f78862f686368c84e6b3d5c1bc39fe459c4f834e264efbdc8451103b3ad3e17f08697f3077b462a5eb78ea1b4a0c97962f9275745d663d00402c6043257956c074b13bb8f958fd6ca19d218a191e2966a17ddcb0fb432038e1876ca308d8790002c99562f17911897c353e272d8d2c667ee7d7b12c6873be138d592cc78c88dfe17c626f3abe4b8c4ba1fe9ed514e1dc912cf4d3a3ea8d51cf0300ab34d676e5b25d8a9df456741f0a39abb64da2a06e8f2aea226aae6ee12da7e52a2a69e399013235559296d3dd9bc1b549dac10ae296faea834d2a7b5562c1d2232b07b8cbf521335b1c1b74bab96b85fa124163b935f7bf11cc955ce28d50b5325f22441efe150490428fe35f3130575da3570913ec3e73330c710269692780097d9a9603da2bac19e50a5e9d86eb2693a070288395776230e8978a4f57758e62de2f74044b3b47800a6e517a87804bdca6efe19cf295df833d7917dda24ebcdd6e53f8cb0afaa451fe5c912e7c2abbf6e45774c50c3e9ae6fbb0ef856532fa57b9e939c1f02a6e307cc868978836c1701b6c3e29ccace86e564f213b50398da5ae52ad642b63a28d434fe1c1935f4d2d4e387e799041bf6e4d8ab1aa7effdad3150514534514dac2be33c10a22b08d2745049d3b35663a34069929c1825ae7c6491db55f7ab65387d5d1f5137c59f23e0540321342a95828892987e70a8e829ad0fcfd94f6edd2ee8c2bc3b91c7308d0bbf9c52c7d00de1236e155ded57160f79494ac61147445ad067dea2f654af9ff628d386eed50a9148f200be5f0a1dc6a5b207ddb0635150416e2914995b296a8a9354315ef566c68fdbed552aa40a9f489f918e915558c55c9ba0dfe91781079076ca9950a9e38daa0ea29158f8c65f6dac5c68d2e8b6f12ab5e56db0e4f5e4454418f5954759ecb96b9c8b8b3e879f6e9622cb2eb0865d1b743abd2d881c396c3d7b95ed208149dd06378c3490ff255f5c", 0x1000, 0xb44}, {&(0x7f0000000100)="ddfbd270850317b833b1cc6073b31f1d4878bdd54b3cde47ea7a7c574e25215656370f9bceb2afa568c6f89f7726323c4268d0527147c25e470dd474c8f0d389220b", 0x42, 0xfffffbff}, {&(0x7f0000000180)="d8cfb0", 0x3}], 0x28001, &(0x7f0000000000)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000200)) [ 1794.896452][ T9902] usb 3-1: USB disconnect, device number 2 [ 1795.046412][ T794] binder: 790:794 unknown command 0 [ 1795.051738][ T794] binder: 790:794 ioctl c0306201 200003c0 returned -22 [ 1795.126470][ T797] loop4: detected capacity change from 0 to 264192 [ 1795.263278][ T797] loop4: detected capacity change from 0 to 264192 16:26:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x1000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x5, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x2000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xd000000, 0x0}) 16:26:39 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$gfs2meta(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x50, 0x2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="96bf490bc57aa25adbe408ca23c63d845ca949bf5a939e8244038ffb520e6daff2f48ba9b935adf114e11855f21fabc92c449865a0", 0x35, 0x7e08be07}, {&(0x7f0000000100)="c44afde2ca061c6e47960ca04e0e19a036bbda94d42cf93c97a1b58fbe8b0e1f7a12b80061bb4139d75aef116981f888f15ca2efccd375424c71373aa535f82f5c636204b84d730a7b7920b8949d561d4a0919ab3ce715e053fa1ee28f247d7dab83ca8e66d09d2dc414c9850f4598deef1e9bf96dd64dc953fa6e3857365392eabd6d84944deb7fad543e4017ceba963c091a593d30d6d2ce191a32ba0df9029c14209062d904eb", 0xa8, 0x8}], 0x3d0810, &(0x7f0000000340)={[{'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {}, {}, {}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'qnx4\x00'}}, {@euid_eq={'euid', 0x3d, r0}}, {@hash}, {@uid_gt={'uid>', r1}}]}) [ 1795.682736][ T4701] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1795.689961][ T4701] ath9k_htc: Failed to initialize the device [ 1795.740369][ T9902] usb 3-1: ath9k_htc: USB layer deinitialized 16:26:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x2000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1796.225485][ T825] qnx4: no qnx4 filesystem (no root dir). [ 1796.228569][ T826] binder: 821:826 unknown command 0 [ 1796.236910][ T826] binder: 821:826 ioctl c0306201 200003c0 returned -22 [ 1796.324883][ T825] loop4: detected capacity change from 0 to 264192 [ 1796.396999][ T825] qnx4: no qnx4 filesystem (no root dir). 16:26:40 executing program 2: syz_mount_image$qnx4(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x208021, &(0x7f0000000180)={[{'qnx4\x00'}], [{@dont_measure}, {@seclabel}, {@subj_user={'subj_user', 0x3d, '.\'.*\'#\\*'}}, {@fsname}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) 16:26:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x3000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xe000000, 0x0}) 16:26:40 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x8000, 0x7) 16:26:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x6, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x3000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x4000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1797.315587][ T851] binder: 850:851 unknown command 0 [ 1797.320995][ T851] binder: 850:851 ioctl c0306201 200003c0 returned -22 16:26:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x10000000, 0x0}) 16:26:41 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="005b67895434e6a4b65511b9ac004182f7cc0ead3b9434c98c92a8e46fff95c766ec4bd7bc7274e9443c30e9f276370220b23d7158a14c67957121c48c8ff18c37644193660e81b32f6e7031ee57e13327da8b921568d332e1d2df28057d975efe680dc0a95cf6afdcb8490477a36b3e1645f4e05dde4d"]) 16:26:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x7, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:41 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) finit_module(r0, &(0x7f0000000000)='qnx4\x00', 0x3) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x1411, 0x400, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc084}, 0x1) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x2, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:26:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x4000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x5000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x11000000, 0x0}) 16:26:41 executing program 2: ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0x2, 0x6, 0x7, 0x5be, 'syz0\x00', 0x3}) r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x2, 0x3, &(0x7f0000001780)=[{&(0x7f00000015c0)="6895b25a0bd1909a9552b96d124b1382b8", 0x11, 0x401}, {&(0x7f0000001600)="87740af8ac3600845f3111bbad34669eeecc523b9503b88c09319368a70bedd5bb2c181cbcede70653219338efb3f709327671578dbd7e9d0155de9e6694fd1c61b3decd96fd315b15309a4be2d37f77e8abe3b55c78a9a235b975f22732af0fe33e00320b4b4c", 0x67, 0x4}, {&(0x7f0000001680)="4994a9135a2fa09c60a8be078e2eee2b8ca00e776ad9a0265a72b295c3282c15a47cdeab4ddbd8f0dc685b3deb5ce80f3a12703383999c47333759b4007c86e09068b43d3009bf0b6aa421eef590df93c36b60918a5540b66357197aefbde16eba4c0b6177a1dab168ee4f6e549630b26bbcae9bcbcdcb78cb9e3aad9d544be67b51f4db3b42118eca2629fb21eda14f33135f3b18e75eb2023c37131bee7a5cf31a7154393a85955338f58e0adee4ab4e73ef164344d5074e6af3b1fd204c75678428f2e6f2cc3fef", 0xc9, 0x1}], 0x800000, &(0x7f00000017c0)={[{@nossd_spread}, {@datasum}, {@check_int_print_mask={'check_int_print_mask', 0x3d, 0x8}}, {@enospc_debug}], [{@euid_gt={'euid>', 0xee00}}]}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fchown(r1, 0xee00, 0x0) fcntl$setlease(r1, 0x400, 0x2) fstat(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000080)='.\x00', 0x8, 0x6, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ff34", 0x2, 0x4}, {&(0x7f0000000100)="a759f0050a2f0044b4223e74ef7a9a378266b3a7829ba5006e7ebd42dc480b797c15147522c406547e55b61bfddfdb2f9bb3b7fe7f894e6faff7aaa60789b548beee95db78a4a47f31cb44578a90805f4133561709a4c970d11fdebd3cb73ed9ee58c723a600c4b9fb7cb56fd176b168d8a311fec197711e327d90dedf60f0a855aee4a591852f3d2ff7d37175bea4c8624fddd250799974", 0x98, 0x4}, {&(0x7f00000001c0)="a16c93e4205500933b6b596a0680dccf4bd45c3b399d97f2513769c81f675e97bde631ef0e7deeff09a033eaf1c180e739c62d9bbd177d15341c746c907d235eee55ed7ffd5b9e4cfaf03578e4a30cf8c6cc65a19df012448ac06dbeb9b41c5c4ad3f6d9b5d812a3b869afe63439853583fb250abd84df6388df4c27ac1947d01bd710231f632720914581814c847f9666da46a3d0ebb22a20a450a8966d9e365056fda2529e5b2fcb02e208ff270163e9402facd3407029f2070d72ef385d6f7b082cbed6d04d709309b47a464790ec243157aed9dd52010590b8ee2a5916b3e252cb194900e14aaf908a1edd4574d2126ce23ed632c9e9", 0xf8, 0x80}, {&(0x7f00000002c0)="f950a7be0678532407506474be9d7dd7ca72107c", 0x14, 0x9}, {&(0x7f0000000300)="60b58bfb92b0a009e7cdb3dde732944816450bcd5fcae8693bac1ec89aa5dbcd1863ebe0b19735f1b0400e49027ff2255fdfcf320b29e922498aed463169f0cb404a086b429134dcaba02b6de21e6d4bfaded0f58ba43846fa498fa873746bf77d0bcc03a9cda5fa11d6f53f23fed2974d6dfe648629021ccf25e6204fb7307a4ffaaab0f9a384d065cd3fc44c0662ece09e06c211c55828ac76a15b640a974dcd93ec9a0a423134b60341b5dd1545826269d295f2", 0xb5, 0x9}, {&(0x7f00000005c0)="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", 0x1000, 0xba}], 0x100000, &(0x7f0000000440)={[{@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@dots}], [{@fowner_eq={'fowner', 0x3d, r2}}]}) 16:26:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x8, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x5000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:42 executing program 4: lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.nlink\x00') syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:26:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x12000000, 0x0}) 16:26:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x6000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1798.949253][ T893] binder: 890:893 unknown command 0 [ 1798.954731][ T893] binder: 890:893 ioctl c0306201 200003c0 returned -22 16:26:42 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) openat$misdntimer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) r0 = openat$vsock(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 16:26:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x6000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x9, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:43 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r1 = geteuid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) faccessat(r0, &(0x7f00000001c0)='./file0\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) fchown(r2, 0xee00, 0x0) fcntl$setlease(r2, 0x400, 0x2) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) fchown(r4, 0xee00, 0x0) fcntl$setlease(r4, 0x400, 0x2) fstat(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r5, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x3}, [{0x2, 0x2, r1}, {0x2, 0x2, r3}, {0x2, 0x5, r5}], {0x4, 0x3}, [{0x8, 0x7, 0xee00}, {0x8, 0x2, r6}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x4}}, 0x54, 0x2) 16:26:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x25000000, 0x0}) 16:26:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x7000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1799.826495][ T912] binder: 910:912 unknown command 0 [ 1799.834051][ T912] binder: 910:912 ioctl c0306201 200003c0 returned -22 16:26:43 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x1, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="a23f233eef6792a686205e92ec6902f4a4236cad750cc0691f8db218d444f994eb7749254ec20e90fe26192d26bb61258edc8d5b4a340f72eac2024636e835c385b171cd75c555417aad8f471dd3b75e64a9b0f670b67e27ce5bfe9d2b203b304052a82e716d9b45dec1d0ff8d08af8b65fe27bd85086c9bd9f59e37c8544352579c59334a754f83302fe178e7dddb88c6c7280454d8920ac6a81e83379be7b8ff8fabc1fc9128c783184898ce", 0xad, 0x1ff}], 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) syz_mount_image$btrfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0xfffeffff, 0x6, &(0x7f0000001640)=[{&(0x7f00000002c0)="2fcce19bcbee0eda75e6850697ac1a32c5eac301d0b00116b5e96e910d9e13523c73d403ecacc23c0f2989da16e45a4972cf4aeeb04f93183c89097190a5ff", 0x3f}, {&(0x7f0000000300)="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", 0xfa, 0x6}, {&(0x7f00000005c0)="cdf967cb21c6d5679620f59cbbae2dcd7c10fedc408f7fbc7a6ddccf7876746faf155fff19425f81f3a39acf0da7567a9f5ea3ea87e6c6258c96838162bfb9398af46c100ff7b1c134bf63fa66d80bdb07915fbf1e8adf6a6b1c9bba1cef02b8740151f70ed8739df4e98556bd1713539e0b6711cd339bbf29dcf4d86d52ef15aa23de05de715849ea79a9225aa099d54b6e316e176b7b88df93084bb6ac24dbf675fcab191c0d1eaeef4f9682a5dde0de9b19970756a92543cd63d1a38d0d843371973fd5c549623dc11e57d2f08920f2504e8b2246b2cfa720b597b4a7b553251025b9585c3f6990ec0eaddf8df33207673ac53af8cd616fbc4392513037d3d5bc97ced4f75aa1331d594de0e3c7117195e2c89861f5a14832ece4ab9623135283a7aaf77355697f7c3d8dd08e2c5edd4023fe126c7ed255f79047924ab77f0479758844d05896707a46d2157bfb4243fc85110f171e6e00bc2373d4604b6149aae49fff0453887cc49f2f35017260f449f946d6e229d6138406c519912f5299f6a5e4d5fe1b0ed6fdcaa7d13dbd57cea25e91bd0bbaa063bf90bf1ea5a9041add6600ed5c48bb963e66c33dfc36632aa74dece8f28b45333737a05495c93bb8a94b7a7b681cdd6925cafe439169d4649b23e75dee6f706330aa5155625d368161dab15720bf47b035515950f3c435b19861ee8325b3925ff3243e3b3d3b5f6a2687b493d775d39c3c0af80ccb9d004c915bc1307e358c14c9f4b8ae3952fe1664ea21ca3ee431810eadfdd84af19fe7a0b5b7bfd4bd11771979fdd9b93f5edb64f1fc0937215a47349a2ab0e41fbb15ae66f352ac3f1dc7b9c7de332fd4c83caac8a6d7e57eb58ff559df21012ec8724787252f7fc0cef5599318a5aa7122765448138835631c7aad54146c6f0cceb13de12cca9b24a7a4597f2d668b76484b3ab26e886fcdee5fc7baf6982a80b0967a9d848bcdc6b3d731f883b23fb5aa657c9f5bc45b907f2fb98df4b768e9674720ba18ae172745b95efe385133a713f842a00259b53759ea0d5204f1ef37a9a5b3d0f21dd3a89edbb880080674cebbaaad447b0a91446282af8aa7e4181e1afa84bd8f0a3dfdb8a0ff0dae85194fd171e3d031877ae0724e3220c7a8375a444e65f00d677d0e8b5236a662a58e9e16b00d5a0e13ff3e4dfd85c6598acdeb47c6152a2cf4d69891168bc6ec5ae7b8f478ad7c3beaac4d733b2006a7c2fa40455e1e726008cd86c7e87bda04754415804b19f27e9885e9404a33e663a7d2084f6399525b7f0608b9130af4e65e23ef114826c526fd22319422eb2b94a861cdb944d14cc285a6ddcdaa833a8e57e38cca5a7b1a9d88df56437777612e8425a0aaf45fc2753dee32a404367ea786e7bb835eec049017ca25fe438405d0750e8a76b556d35e0d13569b187bcc71aa9af452870bb4bd4f668e3edc417cbe043cd8f963f89a2c6e95d7779ab94fdf3cae54d7c345fe39f7271b66de6bfe5140eeeeb36c94cb2e1ff6eb44a3f9837529066edba62917482d27c4bfc1a390f7566ac350af11fbde33c7929e4022c40196c62d556d4ec9bd0369a935cd2184d3b7f8e70585d46eadb92039623c2fd8b5e114f957aa49403d9fecff08d69579b34e67e3fc2101d0b25255966059c330c01de630e3b354955b93a16150edae35a5cb7ddf04bfaf1918d23d3ff94ee9ca5fc47d2a0a640d7823a8045c6dc304635b9085abfe11e1a04a1c49ad4b9c0b8f07d8f64716fe3d724aaba10bad52584aeb1792b66cc03f19ce2c3c71ca58c3b16c5beb56d6b168c55bcdda01b562d272659c2a4a8bcc248f3f8b15196670d5c42efebae63e7502535f88fe14063128ad074726159bf77e5ead501f6dd5c5dca34f84e702e6f60d9624e4574fd551f5fe756561af138e761c341bd6c6a07741ac966b24256efef38c056f7729154dcac9a81ab4e128d92bddd4fb00224a34dacf09ed07c958e85605f6289a9388955cf681ed3b5948bd9a56a8baad78513f7df81e41ec7e930a7b0fe4b190a394e61f1cba8e082df7f9dd808a322c3277dcb49a908c837157b13cea04c420b07a1a54918c5a04c28929d76d80f02fcc44e89e08d99fa506f617045f38cf0589f77e836f36d9e046aaaf5198f251b35b1fb8473ea80f06a3fe92866617f15dd093b683585ace29a59ba7fd2b4b02aaa8ac399d61c94828f4a506e7c1181fe15891ddd10349539e64da9d3777914dbba2183cafcf34ef03a97488fc0e7577761db159cbac185d0e5db83dca6ba4383af268511e67a81059b3371f43346b9aaa15a3e1f3ffb0d2441d88669820fb9b46efc4ce9daa06566e8ca56dd865d4fb166700b6322c0ff8dbba36edb48425ec14de368119d21f875b17ff71d4e284cf7f6c39f5cf744e88053c2ea5055a43ac442ee4b6aa21b381bb5e9b46c29b84f4dc61ff98608851887488f62b20eaa425fd82eda9f20a72a1545c6cd269140d6df037a3da6251574083a228f8e8b6b28e6566e3bbaf448c1c0ac4f9fe45ad2b94b20449cdedec0925ee0b63adac9e385430571e7d81e31cd7f93309a81f21d3505e186bb09df8f14ff4260686a631dd61cc2cf59c6dd8dc409bb56317108222335869f471869be7c6a56f6ab4a2ca3bb1e94175740a370704b3e40e200326387f39ef543bc38303d25be4805cae82bf81b4118578a622fe6bb982938abaf7a9f9b04d20ec7ca4f22d6c0a8323cc86b6f369eb2cdc5a82b0f6fac2b14384d9687c3cea302c7f8e3881376fa6758d08fe5a961fe47ba166e073ad743a21320bc9bad5597caf80533c6762e338c623979784162695da6869755852cd714d3116133eb8861849a074f7aefb9c19072911cfbae6417620d2809244bf17aca407cd684232fa4c03d769d2944a01bdd77fd0df57c72ae0fe677e798d9746bd9f98b1635904ab71730e0e3d2199825ce016a012021ca30109b876989756eb3e0ae6df01e3ebc4ab780ca4b1bc864565b5b002d3d68f78213baf2eaaee6aa401f11ab9bc99827df8f9cc640530a94e8b0c4c4e29e327e629f29d8dcc2bc700ea671dc7a2a0da46ee577cf0769cd0931fca014b45659cc889d0bcb094f5d6e192803242fe2c111a45f88972dfbe54b2007caf2811a26ea53b4e94279f91346f8fe9aaf8a3a9703901d87b5239249136dad3422da610aa9a28195987aaabf40751102bf893aeec16ddc8067762501389bb25d15603271def07311cc0fc53c5fa0dedeaaee04e271f37469520099881edbdb1fe4b79ad7116b1f7248aea8df3e548807303c4bbb8c6c24186b907ed158e72dd893dd661dcf255647d80af927d0655c5f4230d023abf7d635b10b71c397ee327c1986e6749ce7f5abc98c1bc818044ab63dc9786dbd8450f27b95499f9cd52ae8f530decf0a1fa79dde93bfe64b2f7ab2d209e88fb9396c6ea8edcc052ce879199fb286fcdcfe35c305830115234ab2f4c247f9ece9139106ba37739644095344a6df4e76e878e4f2f917793a263d303a2e8a74b92c3e0fed297fafa76b5cb3e6c697a58baf6b2a8fb79bef2a624c095cbec27565dca86a5bd4bb417b5772b1d97e1ebfc9a19f3374ab76e5d13c5cc3ffe3ad33f124d1c87c0544134c36b709bf6e808776e0c9bd9ad7593b70cbc0fefbdc7054f06edc5314b61f24d712bac6b170b88dae24ea12aaafb1159bb87dba4f49d7c8ee7f43bf5d8752eaa2e960e7fd6c3def343b0e04fe3ee547734e622ebf429dba06196d257c48f2d0bbe3e57c37b42335eb0bbd7ad8da046ece0b76cea5ff3ac1298611508871b0ad581c0930d4c3f23ba2bfc9d4f3d832633ab90d86d719adf14337848ef00e215b656b7ea5b3220fa0e16f0cde93f1692e1de6632afee0707766467815bb434c221e12e6f2052cbcbcf31bcb57d8b9ec3c2fa611de9050e09549ea94d2e9871168e86c6efc2e01052c41fe79a425651408bf848f75e60950efd16df117daa2975c31014417c680fdd42e54d9cb0af5fe675a352551a949a9279b070e5172be69924ede78f521d63d8b0e92f061eb9f50ce655c23cd863aab974f1bf16a8a20d4c25e276acadfaf7c4997eef2558b5d5c8f3a53b84f82db71205137bf77570ed86d664f19720366dd64db6128ef7e2af1d20f006becbc63ffeec2573fc5d66948e5c7a5394f62735548804edc6938937ad87dbd686873059415d7aa85ff85ff5a05fb18eb89906df0129e3b3d30587c19e96369a624d38c9a6d5e75c00f4a293b08caf3014c203fbf3f7185ee05e44ef3326d4d8da9c40f053c762c783a00c685e159082f3b6e42e7ed62382057d87c88268c332f53be660af215559f706e6cd8ba5cb8d7c42cc547c7d84a52f400f21bc1826e318e364105b6f06c54c6e48aa595d2a6e90c1840ef34c6f6218e090e9d94049ae7c5a3e45ba367a6fd4c4696d0cc25e80e0d3ba4fa6538ee5f7605f116a60eaafb6abe8ce37d7e69a76e5adf6098c5f16d67be1362e8012af54a4ea03a4939273e154e83cbddd3b7b44d958d4fc8e4b9d71d5d64e1ae13ac69ea75978ee4ae356f78993a3c43b7c40e29f08b7e2db1ee9555c4b0e4d850d5af843e6b46cd445d479acc3e17f63bfb50a9794b4cc5cd48e5edd8f6b275791be098d95e87f91431b1b74b5af0e8c592d6768794fc5b4e767e626dc63ab7fc4ff17c024329c0aa669ef6451c342b24f6c7106609c7fd920ad8e275ce16ec5112242361d78af6a0bfe3d6a49d3cae1e40601e375d1429e4796046aaf30df8c2cbb43d80c0c6c54bf485895d08d6291f6bc91b152a778600638705d6b9109d91d15b22b16a9f8040a56df4168c84cbd339f63a18ad5d47a742b2b1ebbc5101c24834b2544946caddeb4306b1573afdff1f7c6808b8328927a21c5feb8c1eca60c4299fdce65bb51518775d58090c30ca1516f40b5a59dd1c09003f280583d422ba2999874d1ab8717a2e283145e14610005cf68306d8ad0c5ddf5b01a9a2f35754eacec47b1d5bd629359251d8e584dca8e1b6f222445fae4d71243a9093813791fc0f0a026d6a08b6def16801dc1262724f876b6c4924e985e03f64353ec26652271f9c7fe33b57482fac6f103b755211117e5cace045e9b20c040663dcbe240c56446d3a9f817772133445b03f74254af5c50416b22fdd6b2fe3cc34e648614fb3a187ad40f3c92fb7457bd1ab25f33151c99f9a24fc4928799ab95e546d16262e072c347edfa5e8c0f902f163516e271f194d09ef1971c6e76b47908bf1e420ad8566a64c47140f77c044473f76716e106036bdb271ad2325a2f2426e451f298b2cf511f068780773cebc0b82f24dda187468f7e5d0b9eee1dc3b943df261055a9ba6bd5001c44a632deecd7776ab1ba2705c14340215ad4683073386f9314683675e7106e2850dc61a6e76e45b5535cbec8a88202f58ae1ca3b25cea3cf811f67df2b2299d722120bc6d8c2b6acdb70ba05ae945b0844d2608a31195a49132a9fadce4a5f477ab79475f075ca2410a72dde95985edf7e5d480fa80682bb426b708182dd75c866c61650000600b3f285029ab5f9ae30e92023d0392ce0c481754b3a11a80c5ac2cff2e37f60c62ad76446564406e5359162f7bfc00fa361d22649fea03cf2b0df74044742db9ab6dbd3bb2afee2c5caaab155e7964d4c157cc90c1dad64e03171b273c3f871e417f156393ca4259a7ab3ac95f7b1d1d554a729c7ccdbfc2b3bc0cf5933366823d01ed6d5343e94677b3e0aa5eb9fd87e84ac4bb8f66a7d9591a8d0a9", 0x1000, 0x2}, {&(0x7f0000000400)}, {&(0x7f0000000440)="54cee1ff25b17057ecf5339a530a19986d64de99392fa4d45087984cb5f35eb518c2256107f82cfa885d01b78352bd9b9df77e188a6624d82f9ac2d11344441f8dfb3e7f28884344d097cd056c39e94c6d74c92d6a2daae03ae22646142b0e2769bc59a3ed2c66d6647eca99e9af22b3e4e614d3f18101d6995a16081607a87b821058214a4206f03caa19ff3c1d5d57c4a752c2b751f7102f768a69c23ac863deb1c895a662aeb215ec35ff0e1f57c51e09120248ad7f2a99", 0xb9, 0xc7}, {&(0x7f00000015c0)="08a83e42477ad2c8fc849220f807c23cc50ee6e7b8c698bd976acd9447aa3684d23cf68765daf72d3f990206a772ba0ee95e973f9465b34e23d1919768c303ffcd10a48937a89653fa0b210c62a6f5408f9a2f498e12de3384b1f75fa8", 0x5d, 0x4}], 0x18000, &(0x7f00000016c0)={[{@usebackuproot}, {@metadata_ratio={'metadata_ratio', 0x3d, 0xfffffffffffffff9}}, {@nospace_cache}], [{@smackfshat={'smackfshat', 0x3d, ')k\x1d\\%@^!:+@{{\\{!('}}, {@appraise}, {@fowner_gt={'fowner>', r1}}]}) 16:26:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x7000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1800.087303][ T3129] ieee802154 phy0 wpan0: encryption failed: -22 [ 1800.093979][ T3129] ieee802154 phy1 wpan1: encryption failed: -22 16:26:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xa, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x5c000000, 0x0}) [ 1800.646378][ T936] binder: 934:936 unknown command 0 [ 1800.653825][ T936] binder: 934:936 ioctl c0306201 200003c0 returned -22 16:26:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x8000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:44 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc04c5609, &(0x7f0000000680)={0x1ff, 0x4, 0x4, 0x100004, 0x1, {}, {0x1, 0x2, 0x5c, 0xb, 0x9, 0x20, "5ab581b6"}, 0x5, 0x4, @planes=&(0x7f0000000640)={0x2, 0x1f, @fd, 0x712}, 0x3ff, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000007c0)={{r1}, "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"}) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000001ac0)) write(r3, &(0x7f0000000080)="1f", 0x1) r4 = openat$vcsu(0xffffff9c, &(0x7f0000001b00), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001b40)={0x4, 0x3, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) clock_gettime(0x0, &(0x7f00000019c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r3, 0xc04c5609, &(0x7f0000001a40)={0xfffffff8, 0x1, 0x4, 0x0, 0x80, {r5, r6/1000+10000}, {0x451f38a1f8c12a4e, 0x0, 0x5, 0x2d, 0x80, 0x3, "8168da53"}, 0x45, 0x2, @planes=&(0x7f0000001a00)={0x1, 0x6, @userptr=0x7}, 0x3, 0x0, r1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000005c0)=0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0x2, 0x0, [{0x2000, 0xcc, &(0x7f00000017c0)=""/204}, {0x100000, 0xc8, &(0x7f00000018c0)=""/200}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x6, &(0x7f00000004c0)=[{&(0x7f0000000080)="a713713f051370c6ce2156406e13ab79b8967dc948c3fe7e8d62875ec197afadfc1697e283f74800bf3c741dafbd3ef8cd15c1a503d44255f435e850c5cfcc7f66f8eca2e48ad7c00db8c9fde3778f9a5557b22a19f1bc6aec630fd659f4c181126b85a4cf2a82b3dd7e856b2b37aa67aa5ae26705d94e88e0be4ebac3cb9190de7d7407720e2f1d4f0f1b8e9f5c5c37dfca514f3d988c2f8201b4aa3a1d40b474f495aab86bc1479477ef8bee458819cdda", 0xb2, 0x1ff}, {&(0x7f0000000140)="1f1913b6d49ac3d41c4bc41d606937b11f11e6648da5844e1624ba397671ea3709fe95c7635a766d5668e9502e8fd20b843911c434fc151380bef011de401cac09407f11429e51df9a1c2e0ffc551967aa782554e02744979aa8e433b0fb01d65500af9e1dffbb4783f9f596d6648dc20b092f75eb119945ba17210c790e8dac010cd7f8680f2b283a10129307d24df635bc5d78c45b1dd885225700", 0x9c, 0x1}, {&(0x7f0000000200)="d81fcfe9d02a954e434d9fb2d40c0bb95106f46e45c372d11b6cd6cb2b374f80e12584f3d9f122c9fe2ec7926dccc3fe00254cde5f132614d9e770b9bc3fdb69ab1cec18e7a633ff7cf73aea68a3483772dbf056305d218170e0b92389dbf7745af27d4463f78d1d0d1962ea70b0eeb0762b5b57699ef3a9b32f3055", 0x7c, 0x8000}, {&(0x7f0000000280)="7cb26ab4f3ddc26ca9ed5af7fe10e4a2c74ad789134ade59f229c8e9ada901952c9ad3fee9b48cd42292c541250936ff97fcff23efd1d6eeffb71ed987c24bdcf9856a6884d865a9c1f5038f833444efca6c386e6cdd044aa164cb8639ca4e6eff57c944635edc97177103ed1a1c5893e2ac673e63f1c327e93e88101fd8cd5cde98921dcfab5b411c970ef691b54db219ed93cdd1b0261095a4ba664d1c8c50c8babad1dba94ae8dbf58e79ae3a4599dcc5651ef263b0e3339c8f7e661e3881439dfed4e7a039b79fb66a0300739e420098ef6a685a49c0c1970ab9854776fb0087a3354d5f3e8eb512a2db054d60ab69d1dca6edd7b1a4337b80", 0xfb, 0x2}, {&(0x7f0000000380)="22c6033f4be4976c26684885cb0939143f9936f4916da7c62d0e6cf2a68f5a330b1f1e8a3a6a4737b2e2b6881d8c390c3d5a767750aced35489adbe9de534a5c1a608d2782f5ffe61bac7e0b106201b4bee0d96f0f6ea857bc66e9faa29b58b3bc66fd3ee88984b32800834fddce2cef68a884800ae5d79683458c6cfbf2af10bc63937c586da00f936938646f6705c2cc4218d081b142cc362cf64cfdd0ac0f846a315e723119c519a678e661", 0xad, 0xffff}, {&(0x7f0000000440)="f5b3edf689da6280a9ef596df13f5ae59f901454d984f6bda39a9e88dae84ebd1a1c8f8ad2ea44c9d74fdb3d091b2e55cc7be910adf38c396dd1a3100c188b76de36f4c760f92652ce32cf", 0x4b, 0x66af}], 0x20008, &(0x7f0000000600)={[], [{@obj_user={'obj_user', 0x3d, 'qnx4\x00'}}, {@fowner_gt={'fowner>', r7}}]}) 16:26:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x8000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xb, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:44 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe4) sendmsg$nl_generic(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb8, 0x1d, 0x200, 0x70bd27, 0x25dfdbfe, {0x17}, [@nested={0xd, 0xb, 0x0, 0x1, [@generic="408b8e56ad3f7aaa6f"]}, @nested={0x92, 0x55, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x12, 0x0, 0x0, @fd}, @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x46a3}, @generic="52a13255c90da9e28d7ca278df2c933db318388da23fafd588694bdf700d84b30a639ae74e0a141ce93c279848ed4f91961493e453fe6fee20628de924a5b55945a02947ef138b465718b08060c5b39296c9bd8f330fcd4736a1139f31e3ef527cab91350ca8b30ecbba23f8f187608f2357"]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x2404c004}, 0x24000050) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:26:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xfdfdffff, 0x0}) [ 1801.530944][ T954] binder: 946:954 unknown command 0 [ 1801.532116][ T947] loop4: detected capacity change from 0 to 255 [ 1801.536558][ T954] binder: 946:954 ioctl c0306201 200003c0 returned -22 16:26:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x9000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1801.720414][ T953] loop4: detected capacity change from 0 to 255 16:26:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x9000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xff000000, 0x0}) 16:26:45 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'trusted.', 'qnx4\x00'}) 16:26:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xc, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:45 executing program 4: r0 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x440, 0x8, 0x12}, 0x18) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000001c0)) r1 = fork() r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, 0x1, &(0x7f0000000100)=[{&(0x7f0000001940)="347dc25e6584fff395ef8e85f8634d277c5a0ab71cd90084ce52a9770092654f44b89cfeda9b5496d6921c65cdeec7dba5ed8e5163eedc7f4c32a8ee9063a6739e0b3c41e91d395e09008c359c700c410c01e5528a12518a6684e3996de2497fc538cf45f572e508e1ccbca3b2c4336fc5e968bec73a7dcd8694d86c8a09ae7085283c65635585ee723952963ffcbe90fdf0e0b08d6554d13ed27d0380d12a3ed731bb605d8f35cf1f38b2c624fd9685e860c7e3fb4195c71eb93f6f239f14cbc8c1fb786519e6848b4b59c058b8857b97f6aabcb0d969786b30dc5e2f9abe021fe5e6f285702dce0c9aee7750b332cb", 0xf0, 0x2}], 0x808000, &(0x7f0000001a40)={[{@utf8}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_user={'subj_user', 0x3d, '%'}}, {@uid_gt={'uid>', 0xee00}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) close_range(r2, r3, 0x0) vmsplice(r2, &(0x7f0000001780)=[{&(0x7f0000000240)="65a56a78bfd4b1c05057f9231a8aa19ea3768e12a9224b5fffeb62a36c50b638c899aaeb503e735878b0e68f46e6e5466407310ff06ac91d71c655762ce20fa10923915059bb", 0x46}, {&(0x7f00000002c0)="017aa6f3ba1dd8ae8d5765f7c0be3980fd04b5c45a43426c5e565d7df6144b1652ebc0e9412212709887a5", 0x2b}, {&(0x7f0000000300)="2c616e4d969a7be48c7f11e8676edcc78ef1724acf8d2201ef420668f4a9cdf931373904dbb46633e3a3ddab0647de557ee11906abf7549092152df65dac886ef3f1c20fe16d702e1ba7c57595d7bac05fc021fe2eebd09c16bef37d59bc28a9b9f3334241d2a1f79b12e903f261fcb3d2b56760f3b0101cd65de52aa2db1d487eac72e5fd4f2bd0e5680b847968095c216d38013040ae19a8b52131a739628e70a50a1097fcde8b1fd456cd1b817354f490aa570059f22bd07052997b7df6acac371123bcbfdd341bc8f279b2a9922cac28438df1a0e5e80aab3f9ac3cda2f3733737a4cdb1ed8ad7", 0xe9}, {&(0x7f0000000400)="efedf65ac425dc5a842342b23ab0", 0xe}, {&(0x7f0000000440)="7d67c683895c91185bedeba3c7fcbf081b9e54744957ea0bad13d80f68f66013e4da68e5c9f802a1e97edffd106bbedb266f8dde4a7f1c52a97b9d4f447e96eef843f52860e0bedc48222d77c370d26cc717f7f48dac2dfa87f25d1b3b8e0f69b1a9814b62e9a0079b43bc724604a518e1bf2122d393261082a00bce284fa017c7ab9e78d5e1935e449537b10ba5756dc4c189f2bd002929e6fd1e08e6fa867b0318b477b021a0d0c85acadf8a9e1056576eef9a7d4215e8f6", 0xb9}, {&(0x7f00000005c0)="e237bd367cc0a5e368ad3bf8b2cd4b76b8e6c800b3fb06ee93d626ce3f40cfa8dbba251434886016309b91aa88a22b4db016b859987f6244ca305abe57538b2e4db2e0b712395559af8780c6d4da7b7ad35bc097f8f1bf3f3370ecd7ff403450abf90baf73e5bcc63b9ecd16eebcb5e233f946b9ce2b0593e6439ef55b07568d8a68d0b59be4a80edb4f34e0adecbe09ad9adb13e40d8f0b7b4ba0a81d6a349e0f4b164466b0445963db42c7756b7fdc2c23f67d46783873bdadb92e2a9d33fe78aef84ee6dbf1595bd76edb77b583aeabd356e8f61d2a8092dc8d8ab2d4284dde020221f633b57bb5cde2979a1518c6ce5b905e35c4777598ae4f8ca0657088d207f8cc7e0027e2cdc083e78aededf832e6291f3330925b4ac8a0ec08cea4a95be388a31dfb7ab36079d476fa0f2538b460338d1d90a9ce4e31ccd158a24ae16fe2bdf1bc26ef084edbc8569de2725f841bcd622b672de6030788dab900aaebcc6cd63e8ea49ef651572cabb5345bfd4224acb541a091e50ac8906dfbd6c76021cdbd135bc29e3dcb8a1150e3e5de795b9858beabf5a9ceeb36d358235f276fdff454597aab9018670c64fb96090efc9ace5431e3bb258db04de6efdb4e7be7d28c37da58ae5e026bbf4ea2ac099a446a36891fbd73ba3bd8772a18561404c82d42c24f2beb468a6051b8d5ade04bebbdb16eca38ed274227e2c7698af7305354ddc54108b70fda5e38b5ead05dd7b68d771fda8ca022fb76f4d1068795bc1547d2fdf1cad1a9673cdd27e482407faf4ed1514d65a7ee37b38aa2ba7319180c333bdb37a6d20759efef01942c2381d47f80381560abc06d4a63c4bea8832b549742514922d04a96933fff3aa7057663d1946d8a39949332cd77266beb85dd36b76839e03da2b6c2809b73181026247777d9275692bd06696e254968a36e142c2b3c506af7014f59566bfda8329fdafaca9f8b4d4b3aeac48853e4643bcb59baf6a67dc717a081602c7d63d4ac9030aee1184505055e42444509b5a9aa039625ac3aec25046581958a0d58d805151eb1630855a65cbbf6c2d600fad640e27e5b37d3f6d57b7d468a1e69a93dd509d45d774a5b0bba402acc881867df87035b4f6585c506b57df97ed3e4d048bb0b4468e99ebaf40ff5523c43ca68dab9aa8d5eb151f248801a22a30495223dd08bdfe667c39911fb1e479f083f7ba2f99dac54dc784cb715878e8e2dce4a4eac957b5d3bc161857ab42b955f342c08084baed2465a388a86b348f4aba1ee207b10bd9196ebf65670e77005f34d6dccba5b07935935cbe37c82c65545377ce74a15ce9947f99f7cd225e75360de46b6a9dc8aa767a0dd1af2e9313b1bb4fe9a9897c99cdea25bbf67a8858b29bdeb5fab73f1517b9f2ca1c8a49c0dcf5759988f897df2be04f8981bad336ccb5d667b382c84fda6b762d051edd35ece3bfc91df4fdf192a8b05d990a10af7d80459848b50f1a7eaae24b4ba1843968cd6bb13e92247c686eea483796fb8d2f5fdfd275dbfd371aaabede6df5580b28dfca015bb05964b10201c2b35a85d4a85ccffac3500df34c32d05a2c90af9a6d8bd294cffd15439ccfb52d95838830483fed4d2e468abc33039b22c57231b68738619ae4988fbfca398a79d3274ebfb7e4e5b613a931df0cc72229d29784060f5f5e199ef3c308713924a2b8f3def11b909f5246b756a66db9943c14d1cbb7b926018edbb1f3f5c3bd42b17af851cfeb34120ea1f75ce8005178399621e6a06279dd5fb85cfeb682ba3f5bf5fcf0e0b3319bffd07a3b5a92f0f6ff09a6a0689d8c906981a12264e9d3105ad0a3bb15cb1b39f385c3909d5bfa8521c7a120237743bd90615bcfed2c030b42a12fd5c889f427f65177f48f4007314a9e8fb0543df4ed6023c7c71367aff524aa1d51756b388d2e0f73960cd1f06f698a87c337bb42f0ad4b6095e567e1f39c0e3f3d781be3f9db14f5b21b9bf9202085651b656e9534790dd28d09561ea2dc121a95f5f33db61d258d6e7ad4e96e028b85518f091a18b2ced197985b466831dbc7118489f7097db369c900c00604a5fb21dcb1ddf0458a1bae6d3a5273c1ebd7578b21aafbe6920396af286b7745fb1caf77ac89fa2629bfadc06646bfb6ef480d3235e53946990578d63459df686714225255342af000a12d63cfda2ce8b421581bd67681e80af75a5ba8eef7b4cf7973c77cd11b04d37cf25d6e7781a67bac5ff9d2bf4609b847a060e7a72edd17ccfaf0a2ce0f9da0fee947206f9f90c30561c68d1a146ca0e2fc07917eedcd0a3377533e691b019b22fd7528a5924e08739b3740b800eb49524a7b14804a3d3f3d8268a6357795387d49721a8a864157b780f23ac54e67aa44fb09a7b414fd10c17a15bed5bd3f01cd7ee21f7ce6bc116d1169f9ebc904dc02ccd4d3db2b9084c28b517f006c9bd97ad8ad55c085339a29836224f1cb4d63c0a65aa03deda6875e091e125a1c86cb2a93467961e5e119126b6f3f816fb049c2e18ccd3d68e99986cc0331853352d59cc871576d8e82216ae3236de5c37d46b807d3d1796e58fd85ed0fd50c7800c3ccfb402f6621a92fb7db33a2b0f319a6cad9ea6dbfffbb4cad83006c4c8ca5c2054666e391d67ad304cddba3e459ff6e2b3a43da21569e9a69a5da6419aa7dee521550e1749f38adbdfe9d1e59a30e875eb38ac1232ac415a993beae9475914c951227a7178b8cde6f035af29a5d7df6a061c8b221bbc0dfd777e5203fa2ae9b620c0e7147a939a73e12ef80e752eb4e85637bc41fec4036a93049153cdc66503ca8b23cc5ceb79eb40ff37d630a47a0cf3ce4494ee0a5c8ff44f8c0ba36344b465dbfb0cee0b9c891e40f11400029ac58890e1b52cfe87cae63ea6859aa227f1b6a89d80395aab55098409d389eb1164f55d9315d72348d5337a4f16e2b4d98e5253226454b5a2055111ebac0f30a145a6c13bb96ac1cc5df2f77cdacd72cd9549b30212d76eef349dfc8e5959325bb3aeb7ab0c30a4d9ef557130fced46a909b9efa1e070a1abff2858c40e601a56538adbe3fd9395eb211756b7e296e768b89bc120242d9a66065a3767df49e2de8ecf609cec5e49359c95fb618f2380e7ceff7923851b27ec631adf4ff349c43918779ad8d5f14a37d2e8151589be8ee0e3bfa9c21665de4b3d1d07101262825c89ab7bd3276f2fdf5211ca628f50842b4fa31576ecf80386d49f17fbe0f21e07946400563c5bbf17b32b7a2d4ce7f01f71b4aa87af21ee1458e086dc6315e76354be04e54f3a41a6d30a2175109c4682beefcaba9c6910c6e00b55ca6bcbb8f1e4f4fc56003fbc2b839732368d757be34a790d5859187c52f214e5f093d6d10ffbad1587d9a070075bf5d115e18e868b283ac42d84f453ba87218c4f8d34c2b12986f60738c500790ad025a98c8f6c5626088dd14617259068d55282c61431541556419d2020e1653f3760fc30a9a50333f43e99ba530b79817a4f39a62e1a639a723d1b39ee05cd87c1c021ea9b28aa5a6e85b221c97b2616bbbafbafbaa704cc1c6cbbf5c2a739e57808f0586c764baeab25ed4be03d15d087c0f408672fef326c2f3792a90501fd53f11bf60bdbd528554c14d1d0f632f9e22388a27a9bd975a971eb85732458a75c71daaa2a7aeb2edfe2d0413bb42de6d342f7a6b41753768c335fa8a6c5a0ba2f97616dce106c56bfef08440cdb4649c38946369010416bda5bc384589f463931ba6a8a35fec3c5a44b96c0334cc510e0fea59ecd9fea8085ceda04a73c28ed0270a332420e51047da95b5bee6806cb1bbcd2b8bd30b1fce743463c07e383835f512d4f39e1c79dc95953748f0f15023bc5ba55620559b2eaa04bca5e2cfbcff3aa4c27edd8241c8a141d8cdb9905f5e085cf8105f27b3436528245b6b49d3d6d739d919723609f8e3d91e88f29ae941ce0e73a3a4a051b0e48124c9515d9aacbe95017894efdeeac8fb453b995691cdda3e564bb44f44cc32d21061b07c81b0ff7ad47315b7f981e6c875164bf6276af6d833c2c870496aab30a3f711a063eb036d1472ae066f78b031f58ac2d9a3fd22b78538bd6a4d156162c6404248e72c4f1d52e27af82f516620ae4736df726bf0e1e8071995282c9899ad102da20d031560e41e5505eda4b3f6b43156e1d3343ccdc6eeb33f34501d3a99a1819eb9efd51494734a07b2b0a409d5eb85ad697694fe4032148dd74b35033f4e4966b0ad450a748dbee2d94761825401d18b41c5c433781ea9e02aa12914de28c55a3d51b89125eed5b1884c108989a6b471c728fef39b2c2ec38b6e12b5eb1c9f468e5f5181091e03e7dfa5aa80265580f9753fa05907e32ece8702bc8c9a359871d2addff8d818c659e62d1754feb81411d84d60aa767ef35279c05d96149f99ea4da7e9fc5f0b27835b0bc97feea7d86ea8effa53e38771a13d327c395c85eae2aed31ed22832f60fff91e6be7fc5b371e71954d9450ca01242b6602e87e09cb14549899b848fb5dc732649acad5862fc0f31228fcc35839c6ea0daae81108b5284dcba439ab7e588ab3350a18b6765f63af274488d957750c5686cdc4f5fefe930752d3da1a01e40d81bf4a106640aaa64c0979ef74e8c66eb263511dcd7d4505b78dff757a903ba37f536ded3c4a9320bf91ed41cf8f9f5800c808449f7eeeca7cc4bc3f729389890110349fedc1dff7a3aaaf6d739739f1689ba672609253de8bfe472d7d57560872854854a43c5e7dfdb0ac809273089ad4b454ba059f1e7f8af7749b3e8b4fd5b5d996c2f072a732c1bb66d9003ab79444f8cee394005631b6774fbcc7867508bf63dc164f5ec7cb08901752dec723acc2273f71030423522d684294c5ac499a4397ed534c3e6b41c4c21cd5e5d000f471e56eda3bf08c6e7129e47027a4bf3052ee2c03953ea3f5fb7943f7c5812329e0c9626e1cda05d127a0fd72b089d96b22b891b23762f624531570544cb35466d70b5a1b1340617ad8a218bbd5c546a0baf2ce94323b9a794983696d60ad8381a453fd08055536311d10db34756f0acb63406667fcfa548633cca9c060bb71fe3d52432984842ceaccf452f84961c4cd6880c0e69078476f3bce36c8171c59011b04d22be1f9e0349886c20b6eee8b8d5cdc4def254dbc910f7a31265e2ac306b6e038478ce5da8c27d9cbf8ba3fb8b2efecfb343ca398aa2bbc07ceefb46fe534872c7f6fd67bf2a8071e98df4465867d37762af34521a7293810aa84fbd3e69f1df8374debe246c064870c885e05b0b008e45957c2db1b6d16681ce741b792571583f56144699027e99cc62625811d474cb05ec953f9766674344d3cb1ae05d124a00fbb03774bbcedceb950a97b86cb71d630a14201548d019fdc140e8b31ad65dadf9de864e844edbd14ecb83736b6ae6bb47e65b9e5596299b48beb7c605230045b65fa8e5cd807a6c4c144c8f3be8763aa6a2e2b79f346e3c6e110d07631b99d8d64d67efefd3a44b05853bfd85589f10e76741a9fc585c8929a0e478b566521ed6d14173856ccb9a4bae8b4c516eb8025086bdc7e37d7473f8ff330204d955f5cc78f8223a973e9842545bce26b7ddcd1bcce5478a35587b10be7df3a3ad2f27cca12c4ac9f9dd44f35d3d088bf35e0e9aaf41da301273d874740f349a97fec785aaef39192bdd32fa35d4a77f5342bd353290f72213e3b7a8d4ad1434487beb362eda626dfa909faf9864bf19dbf78ed4d27453b0dd8c3b489509dec6c394b1220", 0x1000}, {&(0x7f00000015c0)="7e7271c680d33fdd1fda68701e40de5f6187e582960fe21800181d888f8336e08656d4493e65569e19e3e33cbe5b1fe171495cf27816ab9ffe18a376ebcba9031b0b01b88c28b08a69ff4ecfc9fe4fc78266a7a55edcd4642c5391f764aca637b0a0b93e02a5d9abccbccc1de7c29a4b04008c", 0x73}, {&(0x7f0000000500)="e7f2175a1404aa3556a97289cf90a053c198a10d7cefd50effbdf2df3b01a07f46d8e63da8bdcb9c02ecff66", 0x2c}, {&(0x7f0000001640)="97753c1788c118c986a4d427d1c4327af9d98769f87d6cce8481457dcd20f8c7fff2e236a4b4281cf2591f4d9a8bc2e413437eff22b39ba9ce1bb8793fd61abff3d04f7bbbb2b1f88495d05eef548df5cd6cea0f96f6c5d9306d069f94e54b128f004ef55193a2d4fc4a1e8ae68f5908386697f3a3cfc9b488d10548fe4d0ba7182c2a64b077e7dc88f99d55bba411faec6a28c3b9f39f4036a6dccf4002ac9c", 0xa0}, {&(0x7f0000001700)="11d44945b9ec203704bbe715c717595eef44dfecb82de793b5407b945e95138b129707105c1d92ff994a5545297e062bdcd0183118751f7352abc54e5e281fa5797b047f33d5ae49ef5650b0a070caf2523e9be0c6530dfcf83690945460589b61d84c1e32e53cc871c8f8fb04e823cba138752f2de1", 0x76}], 0xa, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x80e1, 0x3, r1}) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000001800)=ANY=[@ANYBLOB="0097573838aef77a830004fba12d31712e1bc0e93badee4c48e34ecec60c8518d08db62d456db49c004ba9000000000000000000ebd71f6f6a63049b412c65b610009d2ffe5e3b814d647697c4c8356eda419f4e7dbdf29183a66fbc8b3cc0a3b9bfd0bab99ed9c4007d35b2578c6fc932a831ab6c9eb586db19378900d192a66d38de9973d52f964e36818e718199a2c2e20ad2c79c2ab805fb0a35ab03b81cc40caf76327d49382b0c0ba3520bf9d0b94b20819888fe9906ec5c5d7f6e7e57f76d69e86320ead06e3d463e2d9a04aa8f64c85080762d5a8b1cf57bbe16795d2adb764e2a7ca4d59c2bd9e7305ba5756a6b6f859aba6aeaa584ecec20e649f41bd1c78a03297f086d58ebd52f46b19b8803f9781aa0f3ce40ce00"/297]) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) 16:26:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xa000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xa000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xfffffdfd, 0x0}) [ 1802.614989][ T983] binder: 980:983 unknown command 0 [ 1802.620419][ T983] binder: 980:983 ioctl c0306201 200003c0 returned -22 16:26:46 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x1, &(0x7f0000000780)) [ 1802.862049][ T984] UDF-fs: bad mount option "fowner=00000000000000060929" or missing value 16:26:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xb000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xd, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xfffffe00, 0x0}) 16:26:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xb000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:47 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB="02"]) 16:26:47 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3, 0x3, 0x5, 0x3, 0xcf8d}}) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) [ 1803.523850][ T1006] binder: 1005:1006 unknown command 134217728 [ 1803.530054][ T1006] binder: 1005:1006 ioctl c0306201 200003c0 returned -22 16:26:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xc000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xe, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x1000000000000, 0x0}) 16:26:47 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESHEX=r0], 0xd2) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x4, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x80, 0x400, 0xff}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000180)={r1, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x7, 0xe72e}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r2}, 0x8) connect$caif(0xffffffffffffffff, &(0x7f0000000000)=@util={0x25, "243c8dc1e9484f062b63bb2ba1fdecc4"}, 0x18) 16:26:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xc000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1804.291261][ T1027] binder: 1026:1027 unknown command 1661468672 [ 1804.297756][ T1027] binder: 1026:1027 ioctl c0306201 200003c0 returned -22 16:26:48 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) syz_mount_image$adfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x98a, 0x4, &(0x7f00000001c0)=[{&(0x7f00000007c0)="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", 0x1000, 0x6}, {&(0x7f0000000080)="069f4021173e11fc6ccb693bc2f81904c76e60a93ae51f32246215381db2b7e4871993cc30672186de22dacd6a8a44dadbfa6b841447d9c38db72d", 0x3b, 0x1}, {&(0x7f00000000c0)="fb5144e2c0a8adeaedbfbb8db9b120360cbe4f8509d598e6b41a414a49507bce80832c6d5731a8fec80e9c7f4d633b5392d9d391275c430c7a699f97e82153c762d7ba1b4754073564c261e1320cdd8f04cce45b12d45a043a61fa16fd1302339daff9bb2d18b2ec0c82a1969ce818810c75971a8a163239b25e85079a242f672d", 0x81, 0x7ff}, {&(0x7f0000000180)="86e7f047a0", 0x5, 0x6fc}], 0x20, &(0x7f0000000200)={[{}, {'qnx4\x00'}], [{@func={'func', 0x3d, 'FILE_CHECK'}}]}) 16:26:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xfeffff00000000, 0x0}) 16:26:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x10, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xd000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:48 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = geteuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000080)="f8d182caadafca01d25eefa357ee100659ac1ae561cf4fbbce49c406c002b59c447d7d952f594f08fe3940b204e36cad26009123380d0727c0bdd01965b5daefb32326140857fb62e9174932fe194a54dfad05eb6a1e78b11f5d4d8c5e5b40", 0x5f}, {&(0x7f0000000100)="68f706144e9b5a21730f6c0ba0a7497979b52bda75b026a044936c94ba9d64b0d031405b1e9f7f74bc44839d498fbeb893d46fe5073bd7fa03db5eb09bb4b601db49281df225969c01060379af58fce509602dd1d39dc4398f2ca38060a4010d072eb967585c4cf0562c573e3c874c56b4e1e9be1e067b5f1e5f40a20b8fddf22ba47bd429d02d3f4c5444ab9d5acd86ec4ed69adfd3f96c57658904dccdcdb6b1af786a99bd68237df9204b0adf19ecb385d5e86124615fab36093191ee72ddb4a345157467dc12512083f06f05b57e3c7418145ea5563a22fb3751937dd88ea60b418004e1", 0xe6, 0x5}], 0x82004, &(0x7f0000000280)={[{@nostrict}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'qnx4\x00'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@uid_gt={'uid>', r0}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@audit}, {@obj_type={'obj_type', 0x3d, 'qnx4\x00'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@obj_user={'obj_user', 0x3d, '\\$.\x06'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) 16:26:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xd000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1805.250736][ T1047] loop4: detected capacity change from 0 to 8 16:26:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x11, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:49 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000140), 0x8001, &(0x7f0000000000)) umount2(&(0x7f0000000040)='./file0\x00', 0x4) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x800, 0x8000}) 16:26:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xe000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x100000000000000, 0x0}) 16:26:49 executing program 2: modify_ldt$read(0x0, &(0x7f00000008c0)=""/245, 0xf5) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0xa, &(0x7f00000007c0)=[{&(0x7f0000000080)="2330822d70daf5b413f5e4cc6852ae2fbcb3f3b010a9865934cdf8d951fa7974f2868c08bd38a82ca52c1e16f26bc1", 0x2f, 0xff}, {&(0x7f00000000c0)="c365be2e7f22465f8278e3bfd088a3e37c229fd3d787de36387b84fd95c47704053f660493ce99b47fcf66d059cbb2626c1d3ede94b1256717db95069e521d19b338cbcb751f8aac8ac7da39627081c82ea56271f0612ab114e660a87e6e257f6f127b03f1a34b18a67d929f2a55555efb60730fee2e93ab955419c954823214d9f2ba5844e7b50f82db333c458c02afdc5071e39e07ae298538ac8c419a1d205df96ba2acf6b0a4b137efbec356725fd3eb9a34e6a58495", 0xb8, 0xbd4}, {&(0x7f00000009c0)="bf314346b60995bec696b122e46fc22300b78b6dd3e2784d15699568e00903ae50054078beb9d064fd6c2ac569e8cfe5f3991ee4660d2e8a90eb3cd9ef79044a44ab93d336ee5f8998be140f515bf7c0feba07d1ef6c3db9315a81f7fb362fe49b19b0c0d6a2b83bd5dd8a58e691786906f5f248d8a204a094c071191424d073d7888419bbc9692f34c10863a49f28ebbb803cdb38b9b32ae9d4602db819a5cc6506ec55f2", 0xa5, 0x3}, {&(0x7f0000000240)="6eb4e794cc44c05e420be85a572d50f4734a4950d9cdc0f8b8c9978ce84fdfb5756d067dd9581b76fe531a047bf0e6a1704e10f0e9d11823432d8434bf8a9f988aed2bc9b6b3327f0350a5c5a82d", 0x4e}, {&(0x7f00000002c0)="97f364b44569cfbfb80d008e63a275a753d842d5d4a08ca6adacdb02b597cb16392d21a40c6a213676765fab3fa7887d852770c1ee9990e398d37080202b1eccc8a6954ef0a96990322c26ec86f1dca011e7c5623d9d6a30c5c2bb01d12fd821c6f2981c4af187f389a5277d64a0be90cec4b6ba6e218d830d470bd94188138d4f2615d07c559a0d3563a0a02c8eac80b52945dae05b9bf6021263001ba5d7cc39ff41f7e7334d3034e3a69bd8755508e9687791d2a9299c7cde51d26c49ac0cd149ffc5469fb6f30bac205b44a4", 0xce, 0x800}, {&(0x7f00000003c0)="b15066ba4b7b0b589bf30b5441cac9398f277bad7baab08172b2ffbe86b41de55e709e85f8336b99ee352244fb06424911c1d37fcace3ad2ba2d9354d8c33497626b4e621a58b825", 0x48, 0x1}, {&(0x7f0000000180)="8894a830880ee8fa23cec6157e9387aa71fd5ffbae0c38810276ad62dec155249c313e315fa06946b4cd75c46bd08041e5b426151671e8e5f7fd30911a7d2a0e9daeb7f765b221b4", 0x48, 0x9}, {&(0x7f0000000480)="8f41884a0b603fe382912c9b922f82d74fee25a70647017859657f7d88849381e3203a5b8182988251bc91891698d3d55e5bd501f33ce7fa099f9ad17206bfae994c3dddab09466b4ee8ee1e0c09699a3a011b63f48bdd067d2585006ef16db4918a558caa22152af733c3f9fe7fb0188dce27301ad580738f05c8bf0a2fcca787b3f5626fca3c733e9e55a9ec0365db60270d20d0f1cf1b2d981c", 0x9b, 0x9}, {&(0x7f00000005c0)="14f405e237378c95762cc4086cb49e9abce09452480fb76dc7a4ff902873638a34be0d39e0c837deae936550e361997662b547ca131f14a07a254c1d6f501ce64220c4cf20d5917dc4332b1e17329478", 0x50, 0x7fff}, {&(0x7f0000000640)="e958ab17bc69fc6ff7869b370137f5d81de672802a44bd43bf7a1bdda4b11a859150d799519608fc26356aea7720ac3ec2525d25202790cd155e361a63998aeab22d2203f40cd4d235ad32e46f788ec70a9361a05092321fae5ecb356538178f846cfcb2d32b6d2e42507b7db9a78e0d4b62ab8ed8e5574c118d7b52ed4cbd265c164870380c17744ead7f753f045dc97f7a79515a2b94fa003cb1534f008dc56a79685900e8958badc1fd7f7b9ce2c262d2e5a202c1226378f520880e03c594b823ac3bb9e4d37d627c6dc79d18a1d53e35d13a5110df69869179828cd50827ae58abef9955", 0xe6, 0x4}], 0x10c0, &(0x7f0000000840)={[{@inline_xattr_size={'inline_xattr_size', 0x3d, 0x6}}, {@heap}, {@noinline_data}], [{@dont_hash}]}) [ 1805.791635][ T1068] binder: 1066:1068 unknown command 4198499 [ 1805.797922][ T1068] binder: 1066:1068 ioctl c0306201 200003c0 returned -22 16:26:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xe000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x10000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x12, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x200000000000000, 0x0}) 16:26:50 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r1 = socket(0x23ad27ab511b17d6, 0x4, 0x8) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fanotify_mark(r2, 0x10, 0x2, r0, &(0x7f0000000380)='./file0\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000080)="1f", 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000100)=0xbd) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6gre0\x00', r5, 0x29, 0x80, 0x3, 0x8, 0x14, @local, @dev={0xfe, 0x80, '\x00', 0x22}, 0x700, 0x700, 0x40, 0x4}}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x200}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0xfca, @mcast1, 0x7}], 0x58) setresgid(0x0, r7, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {}, [{0x2, 0x0, r4}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x0, r7}], {0x10, 0x3}, {0x20, 0x2}}, 0x44, 0x0) [ 1806.654681][ T1092] binder: 1091:1092 unknown command 16400 [ 1806.660631][ T1092] binder: 1091:1092 ioctl c0306201 200003c0 returned -22 16:26:50 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000040)={[{'K\x7fB\xc7\xbe\x928\xd4\xc5\xc8\x88\v\x03\x978\xfc\xe1W\xa2\xe1`\xe0n\x02'}, {'@\x1f'}, {'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {'-{%'}, {'^'}, {'\xaa'}, {'^.'}]}) 16:26:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x11000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x10000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x25, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x300000000000000, 0x0}) 16:26:51 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:26:51 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f00000007c0)="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", 0x1000, 0x8}], 0x8001, &(0x7f0000000780)) 16:26:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x11000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x12000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x5c, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x400000000000000, 0x0}) [ 1808.113475][ T1122] loop4: detected capacity change from 0 to 8 16:26:52 executing program 2: r0 = openat$cachefiles(0xffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000840)={0x34, r4, 0x1, 0x0, 0x0, {0x0}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_VERSION={0x8, 0x2, 0x9000000}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x34}}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, r4, 0x800, 0x70bd25, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000084}, 0x4000800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r1, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x59}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x40008c1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8, 0x3, r7}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000007c0)={0x1668, r1, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xec, 0x76}}}}, [@NL80211_ATTR_FRAME={0x195, 0x33, @mgmt_frame=@probe_request={@wo_ht={{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x9}, @device_a, @broadcast, @from_mac, {0x4, 0x7}}, @void, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0xed, "4ec8be2361ab3a664ec02883bcf487eaadc05de2cfeab44241cf9d4148340a7df9dc4031abbd8609d79b2b0dcaf1b896534a10a6c1b207bd0549c96e7c1d8b1023de4869f0157af213ac019cce3a421d06a7918133bcc48b4189eea1d79e6700b4850dc619a510426c856b9867583b7163fc6a1d6232d7caeb654e0fb4f11a00cbd555643e0b4da9562687c3d55eba37110aefcecee3a4481899450d1f3fd669cf379dc017092784be0e9646e27ece05b31a1fee577dab37486e2af1fee92ea4592b656c6735d5443e5510bdb4fcbad2bb4ad3aa12f57e0fbee8b6547dfdf30498ac306d0eb1cb7440144d5e25"}, {0xdd, 0x80, "68f1c9fe4f487f739a4b7c76424212ef198467a94c8a3ff07f2e6c3cfef3cc672af9384e6e3fe77c03de7bfc995ded53f2e4b01b86e583bab89c4bdcbeaee9369446261e573854f94981b4247acb881cc49ee237d00106a64fb276342c2ff4a0f1836eaa67be0f8f9511ecb47ac896172169151c94f5adde1eb70d8ea428504c"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@pspoll={{}, @random=0x2, @random="8e22c3ae32dc", @device_b}}, @NL80211_ATTR_FRAME={0x147c, 0x33, @data_frame={@no_qos=@type00={{0x0, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @from_mac, {0x7, 0xe8}}, @a_msdu=[{@device_b, @broadcast, 0x2d, "8fd3f95370ae70d15d234b44302543e6a1bf00af6874a6b5cdfcaf17650d3d048a36b7997555fcdecbd51be5c8"}, {@broadcast, @broadcast, 0x20, "d8cadb571b0be6e5e7637c7aa2daf5e3c7e00aec9271bab61783088e0d426a9f"}, {@broadcast, @device_a, 0x6d, "6939b0681b0db52d782f4b7374cf651a8ceef78983d19953500c5997b923a4e1ace467593a0b417ae215bce148223e373bac7ae64269b0a7cf56a2255e4fbd94a9a802b343d77f4ce4064938eeaebbf956c3aea549299e6a29fce275ed21634b763513cabbed111eac6d96e0c9"}, {@broadcast, @device_a, 0x81, "c4b3894c7ae6db4fa3c63ca6cf24995225b7b8005791fa1043973ddcbbb3ef30e4da55652f1c33bfa667b219af7dbc8bace50b5d3242c1ccd241e0c8d004bd76970dedbf90286c9a20a3a9973634a7bbde83563a1411b5846449c802bab4d40cd319e69caafd1c945e3b5784eb42c149a42099e37ff6c11e2e582138064819f414"}, {@device_a, @device_b, 0xe1, "e70a0fca2705361baa466d7588d3cddc382038e9aee49ad9a6ea662cb500c73d233c2afbc0b3891cc33f20797cf2749b97a2998bcc3105a01b24eef65772bf72eac66c54ad60778f7a362e79e2113ca1ff160f3d1e283dcbba2e069655a527879ad2c98a04f08af998b704ade53a904fbdc26251dcbf6fd688c541bd2f8e59cf49eead733d2f7c6e30772a7565a50dba254d995f325c4e93849f62e83cd921157325f0bd22b6f5ea4a57178130398ee36e789fd52d9fefc5f3d8f1f44fe68248ecd1e3908173bd47343d61dc053f6aaacb5040c41a7231634e16416c3749650168"}, {@device_a, @device_a, 0xb7, "15da1a4c31aeadb23b3cb5c59441d9f27f3dd91eb334f106e8be411af1381392da17418bc62716fec504bc70ba03633bd6750778ce92b2a5ad16b37df821e851238a4fa6a29a7d91c33dccc859f3c47015af67e7995a0641dcfade3b1bc37255a88820ab0109d65ad3ed614de0a93335b84d090035ec46fceb9f4ae469b535ef4179aa34f3df6fb1635b5500c91e3dfed355a58686af8e30b6d3e39fc91bf90aff6450836c2d9bf83bcfd3b25eab8fbc5f6db4a9ddf211"}, {@broadcast, @broadcast, 0x7b, "f0bebe8219e33c2da2152c14586dfa7a6e28acd072ee410d06bdcb5ad7f90d6a5b15c34e033b3c28ecbbaf3cf7a0f45967c459786f0843b501146651ba50861bf40701c04256fda03cf82437a1f7fb79d459be94d18d0a7c158803176a59e9843ba88b0c2ebb96aa5f1afc641b0002e6c479f45baa1cff025e3504"}, {@device_a, @broadcast, 0xb, "dba70cd30da9af34ad1508"}, {@device_a, @device_b, 0x69, "025c6ab053dd3f23b375b3642e6e3be85db82f1cf500f228313e7b9f255cf0a059491b948eaed13aa0169317e9b4d56c5daad1396bd3f7506eaa7419cac7d86a1c536419891b20959b20946f78a17e922bc5def187ef19e4a7002c81a5526b863955e82b0f9f7f7472"}, {@device_b, @device_a, 0x1000, "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"}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1668}, 0x1, 0x0, 0x0, 0x4040045}, 0x20000044) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) [ 1808.373939][ T1122] loop4: detected capacity change from 0 to 8 16:26:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x12000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x300, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x25000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:52 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) fchown(r2, 0xee00, 0x0) fcntl$setlease(r2, 0x400, 0x2) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) r4 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private2}}, &(0x7f0000000240)=0xe4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r7, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000000080)) fchown(r7, 0xee00, 0x0) fcntl$setlease(r7, 0x400, 0x2) fstat(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r8, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x2}, [{0x2, 0x7, r1}, {0x2, 0x0, r3}, {0x2, 0x1, r4}, {0x2, 0x3, r5}, {0x2, 0x6, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1, r6}, {0x2, 0x5, r8}], {0x4, 0x1}, [{0x8, 0x3, 0xee00}], {0x10, 0x1}}, 0x6c, 0x2) 16:26:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x500000000000000, 0x0}) 16:26:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x500, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:53 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x2}, 0x10) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:26:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x25000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x5c000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x600000000000000, 0x0}) 16:26:53 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000080)="4b78bea9186c754933703a8379f591e099d5906a655bc82f83546dc7ab953274c5ef076426f9099963225ca8717ef0a19a554d92f3cf20d2b7b6c6dae8d13168d7944e91341deba682f45b8761edd901365b7872e03709b27b5606efc3cb21a60f9ae3d2370af44883a7de12781b068c5c8af5f7dd86761aa31d9b33cb3163ab4aca2e98463cca01d7aa02f25f030c3743f3bcac885459c8af47f30915198ebc5144c01c100b5e6ca7d038fa254ddf619d36c2df762e8bd35768e8b20652b7475f568486e9b5184ea83aae529053ebe8a1808dc3185edc8d4414ca", 0xdb, 0x1}, {&(0x7f00000007c0)="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", 0x1000, 0x800}, {&(0x7f0000000180)="e148dc43b101cb179b7af94ab6", 0xd, 0x8}, {&(0x7f00000001c0)="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", 0xfa}, {&(0x7f00000002c0)="d858cccbff7c6bef034a95cd22f83675f181ff5398f1480946bf46034540a5cc0c2ce8f39b021cbd3ee76c42d33560d20487205de3f7024e3117330e584aee", 0x3f, 0x3}, {&(0x7f0000000300)="6989e2b5be0604c959bf7860970a78ee0464cc18522fa2a0280a447784dabf44bf8a8c7730913331778a61441d31c6546e09adb62a479f20dbe59ca6c0fdd8c82c928410be8dca3cb1dc3e9dc8e48ede64866fc922cbc261f1643831e9cc72134e445c5900e3884439de94761340d217ad911456e57f81dc934bbb30c6ed8a28b69f51a1b4f39b8b92db663202d8b36b214c32a4fc693a75194891823df1cde44152aba3bf89ff7e576ef1f88c4501439637bca3514e8c2774d9da106871c4f5cd4906fb2aba71da053f44658d23f64fda26386772ec9026d1210a", 0xdb, 0xaf24}, {&(0x7f0000000400)="e1e8404c10bedca2982d1a19e1f92ed15c8ccf052a26f11d4f5d3daed33ef87bea9bfcf097e879d0c9c2917d5a2528ca20fe890abb1b8cf0e3699af0a8617dce3d2fee426015c35d160821700013caa91e3f9c772fc1233953116dd3a823b11356fa908938fffe9f96c07e82a027300b322d53", 0x73, 0xa4}, {&(0x7f0000000480)="15b591bea7ca3ce9a7c735c727b35c0f67ad161833e4b877119b8772a7d62fc2a00d86aae65f3f9e291e509586e50846fc72d2ffb8edd5d4264513c733fc1044ff4e6fb1d5a89ff4f607a617e5987ed545643c8eba", 0x55, 0x8}], 0x2000080, &(0x7f0000000640)={[{@nouser_xattr}, {@nouser_xattr}, {@nouser_xattr}, {@noacl}, {@nouser_xattr}, {@nouser_xattr}, {}, {@nouser_xattr}], [{@smackfstransmute={'smackfstransmute', 0x3d, '%#.{]'}}]}) 16:26:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x600, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:53 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x4ffe0, 0x3) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f00000000c0)=0x8) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000100)={'ip6tnl0\x00', 0x400}) 16:26:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x4c000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xfdfdffff, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x700000000000000, 0x0}) [ 1810.779853][ T1185] loop4: detected capacity change from 0 to 175 [ 1810.984389][ T1185] erofs: Unknown parameter 'smackfstransmute' 16:26:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x700, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:54 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) 16:26:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xff000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x5c000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:55 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000200)=ANY=[@ANYBLOB="b51669105769fa38c2b669411445a608b0607db371d7f3b787"]) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8000302) r1 = inotify_init1(0x80800) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) fchown(r2, 0xee00, 0x0) fcntl$setlease(r2, 0x400, 0x2) fstat(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) syz_mount_image$omfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="25e22c72e1b0ee65c20fe2fbfa6f49095e6033c660586c559edf7f11a1fe501e0631555f9eeadb32095e45c661678ecf757a004961375e2d34d48bedcbc0e16b22b7d594c06d68e5345ecfd581602ba2f40be63de886983f4949aa6f19bc2ecc4ec615e0dc78cb5526cbc145db44ea", 0x6f, 0x10001}], 0x8014, &(0x7f0000000180)=ANY=[@ANYBLOB="716e7834002c716e7834002c716e7834002c2d2e402fc42d2c6f626a5f757365723d2c7375626a5f747970653d716e7834002c7569643d", @ANYRESDEC=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',hash,subj_type=qnx4\x00,\x00']) 16:26:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x800000000000000, 0x0}) 16:26:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xfdfdffff, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x900, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:55 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="3848276f35f0cd96b700"]) [ 1812.128997][ T1216] loop4: detected capacity change from 0 to 256 16:26:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xfffffdfd, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xa00, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x900000000000000, 0x0}) 16:26:56 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000000)="ffdeea294c7b6bfb634f9c9444e3743dd1935ec4a9e56e297b99f17910e233054e24152b3ca5c0a44e2dbcc07b658d622924a06ce27235674116ecb2689e8716118649c86affdb963545f9dac44c013820dd5d007365d3cd57f4a1f23b42254756137e297058c5b7d9f0adc573b80487fe1e5d589c789c41026d8112d63aea0b3121062304fb3b8d703545acabd8148039f835ce2dce4ab53f714130c6586f", 0x9f) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:26:56 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000140)={@nfc={0x27, 0x1, 0x1}, {&(0x7f0000000000)=""/238, 0xee}, &(0x7f0000000100), 0x24}, 0xa0) 16:26:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xff000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xfffffe00, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xa00000000000000, 0x0}) 16:26:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xb00, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x1000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:57 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB="fb"]) 16:26:57 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000000180)=0xe4) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)={{}, {0x1, 0x2}, [{0x2, 0x3, 0xee01}, {0x2, 0x4}, {0x2, 0x0, r1}, {0x2, 0x3, r2}], {0x4, 0x2}, [{0x8, 0xb, r3}, {0x8, 0x4, r5}, {0x8, 0x3, 0xee00}, {0x8, 0xa, 0xee00}], {0x10, 0x4}, {0x20, 0x2}}, 0x64, 0x2) 16:26:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xfffffdfd, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xb00000000000000, 0x0}) 16:26:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xc00, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xfeffff00000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:58 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="00518b2604eb6c61424d89ce00fd78913fdacaedba3eb719d0997863b20f5e77136de1701d3566ca224b443c118dfa92ae22bd009509f1f257c71433"]) 16:26:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xc00000000000000, 0x0}) 16:26:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xfffffe00, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:58 executing program 4: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xbc, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1a}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1ff}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x233c}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:26:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xd00, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x100000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:59 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0xa2c014, &(0x7f00000000c0)={[], [{@pcr={'pcr', 0x3d, 0x4}}, {@seclabel}, {@hash}, {@subj_user={'subj_user', 0x3d, '.'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x32, 0x63, 0x64, 0x32, 0x36, 0x61, 0x34], 0x2d, [0x31, 0x35, 0x0, 0x64], 0x2d, [0x33, 0x33, 0xcb, 0x34], 0x2d, [0x62, 0x34, 0x37, 0x30], 0x2d, [0x33, 0x38, 0x64, 0x62, 0x38, 0x32, 0x34, 0x35]}}}, {@fowner_gt={'fowner>', r1}}, {@seclabel}, {@subj_type={'subj_type', 0x3d, '\''}}, {@dont_measure}, {@hash}]}) 16:26:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xd00000000000000, 0x0}) 16:26:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x1000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:26:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x200000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:26:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xe00, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:26:59 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x2, &(0x7f0000000740), 0x202005, &(0x7f0000000780)) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v2={0x3, 0x1, 0xe, 0x7944, 0x42, "30eba84b00478ed9acb213f0f40048ecf3019b28891246275c2c308bae599678816528bbe17c3e823e34212a8dc715e3ee784aae3ab618fe189c58a40f6a18e0b343"}, 0x4b, 0x3) 16:27:00 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fchown(r1, 0xee00, 0x0) fcntl$setlease(r1, 0x400, 0x2) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r9, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="0021b200000000000000b99c00000000", @ANYRES32=0xee01, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000100", @ANYRES32=r0, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=r2, @ANYRESHEX, @ANYRES32, @ANYBLOB="02000300", @ANYRES32=0xee01, @ANYBLOB="040001000000000008000300", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000295e7ad0adfd8fe72de2200", @ANYRES32=0x0, @ANYRES64=r5, @ANYRES32=r9, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0xee01, @ANYBLOB="10000400000000002000030000000000"], 0xa4, 0x3) 16:27:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xfeffff00000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xe00000000000000, 0x0}) 16:27:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x300000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x1100, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:00 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x57797f04a01312cf}, [{0x2, 0x0, r1}, {0x2, 0x0, 0xee01}, {0x2, 0x0, 0xee01}, {0x2, 0xf, r2}], {0x4, 0x5}, [{0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x7}], {0x10, 0x2}}, 0x5c, 0xc0554d0b2bf1ecf9) 16:27:00 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)={[], [{@dont_measure}]}) 16:27:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x100000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x400000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x1000000000000000, 0x0}) 16:27:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x1200, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:01 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000006c0)={0xfffffffd, 0x1, {}, {0xee01}, 0x8}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) fchown(r3, 0xee00, 0x0) fcntl$setlease(r3, 0x400, 0x2) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) setxattr$system_posix_acl(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x4, 0xee01}, {0x2, 0x0, 0xee00}, {0x2, 0x4, r1}, {0x2, 0x5, r2}, {0x2, 0x2, r4}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x7, 0xee01}], {0x4, 0x4}, [{0x8, 0x1, r6}], {0x10, 0x4}, {0x20, 0x1}}, 0x6c, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@mcast1}}, &(0x7f0000000b40)=0xe4) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file0/../file0\x00', 0x1000, 0x3, &(0x7f00000009c0)=[{&(0x7f0000000840)="d3962f6d8988f97df4f65cf772cfa37944b437e3f1fc8e2e3e97ed407487c9b99750fa742d1b5093414c933aeb612608bc42f23ea1fffd9ee8d10c71fb60bb26c3", 0x41, 0x40}, {&(0x7f00000008c0)="73ae4044e79e8d48c31e3ee63eb85e1c2ebf82095944b05898e78e277b0c54deb219b5c8099064a2baa504a4915b5aef1872018bae0ed43f50e2095d8b7d7006ab523ce8e44306378553f2fe8ee3c6ebf73549403183c41e7c38a0eed75b6db95a0c0090d06e6d5713c149c02a20cf745f8f5c558ef76432eb8451f909fec8ba40df7898d7605ff18eea677e688b0f", 0x8f, 0xf5c}, {&(0x7f0000000980)="e70ecaec0b03964c9c6436a39920", 0xe}], 0x15, &(0x7f0000000b80)={[{@uni_xlate}], [{@measure}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@hash}, {@uid_gt={'uid>', r7}}]}) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x96, 0x5, &(0x7f0000000400)=[{&(0x7f0000000080)="edaacd9f5237a3de93378100f0f8038117d04adf9ebcfecedd6734dda4973f2f571009c23087780022569880ed26a7853a130528ef1c03322ed10c10128c5aa9f61b5299439f35a2e03f0fe63d2b76871a3b2badb6330735ed1d305a", 0x5c, 0x3cfc}, {&(0x7f0000000100)="d3a74d076a1c22288341d41d1c5864b04618e88716a64f59db17c3378dba3729547a857bc705ae55bed628e96af49be823f442c4d4601f1954f0579799d11d76d7b7eff730a962cd6bf9ec7e0889e45c51d61d0bac5b147929369b70c56d589522e28b59a3b63c44ef2376fa1908a71860d9a296aae10328ac454960d580b9beac637b586409a9aa84f0dc95f9740717f430c23c2bae1640ff6f1288499a421af786556d4c3212b61353d6fab1c36d7a5e46f1d861550846ffcc7eb353383b675c2a7ec6cb9650f7d1476aec60721f1e5b20a49d00b46cbd6ebd71cc39e6a87d5ba8136753308cb7c8273fb340f20054", 0xf0, 0x8}, {&(0x7f0000000d80)="9cd288c44e133649ae5fb277d2f8de0e3d4485fa0589d8fda5b43022f36f3460052c1a8e78a2b33cbd0f2d79fda554c35cceb921ed3ab1a0373af975a089302d5df1fb03cf3db042dd51de0675598199000148885ca1e2d049387255799911778cb5f54449a0c1ce8ae0a1e10df434b7ee55f498049179e06b0cd92802f784693b3ccc137ae4aecd6c0b81b37b63aadcb9a1c6d40c7304943bb93e1e34bb6f87fb0d53d7492bde43db0c3365bf2db4370db1805a5dc42d9e990cee78c3ec341c7afc9184f37285ff34fea5368604eda0d42bec1adf8f3a2e2e65687c9ea9191059a525352bf41c45b64798422f701f310aa1e0846a887e416f55c609efe4faba1bb660e1354c4a0126cae7b8abbef18d989a2ac804361e4c8dabf7bb7a5ed09a14bd5b4f44851b787a6e17e2bcdc59455c2d0e6d293f2eeadc1f89da5cfed0d276952a5f186b12f432c9a7e2668f6c6796d1c47f1eae32807dae84cde1eff90c4c1f07f6db11c8c6e9ff4304287ea5f18f84b4622739522c0514ac3d13ee4ce21fb190461dcae3ef433e2ac1997817ad4e2f2eb2abc59cc7b4e30cd4909f7d25495aee7976dfe707eb79ad4a80b9b0c53c9c45d79d8b5ef310ca02d0af8899ade02f87a49a3fd3b4c6ead3ae5fe933c306c110a47e5e76051c633a6bec0cb481249a9499d4a7237f435ed7ad34c5f3292c4442c697", 0x1f5, 0x3ff}, {&(0x7f00000002c0)="41aebf54ed3d890fd3b4f2a4e1789dd6da4517141783fae6d9a3ce91e5623e074f1c0dfc8fe7e5bdd7a2", 0x2a, 0x7}, {&(0x7f0000000f80)="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", 0x150, 0x20}], 0x18, &(0x7f0000000440)={[{@inline_xattr}, {@noextent_cache}, {@lfs_mode}, {@inline_xattr}, {@nolazytime}, {@heap}, {@data_flush}, {@two_active_logs}], [{@uid_gt={'uid>', 0xee00}}, {@dont_measure}, {@hash}, {@uid_lt={'uid<', 0xee01}}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '(\x88('}}]}) 16:27:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x200000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:01 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) syz_mount_image$gfs2(&(0x7f0000000040), &(0x7f00000000c0)='\x00', 0x40, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)="fffcbfe7a649cec4b2f0a76cbfc08eedcafe28c79249e3019043e9db54f6dc432d6dbac17c57d634fa69713f4b598d159f168b327852d893e94f74627dc116bcbb55d62e928603550df727d20a94077019ba2086361b05a90225d336b7c012ff07579e4320cb717e9453e3510b067dd9d7f0b2705bf76c37dc071914776b2270bbbc5a61c19ea6c09717a9d9f608bc53346a0250bdc34ee3aadc2967a56d", 0x9e, 0xcdc}, {&(0x7f0000000240)="fd829e1ff47c4fe91153d76fe870f2315ea830db2762ebedebb2a4ef6b23da22ec7cbe070554765410295857bee8f11d7f2f1cadb6e07314442d20edb5a03413cf27204e9a98fdc614fc24cd80b7dd85cb22f585bb021f179142c9f74fd01176715153c6ad1f313ce5349a009b3e9886d89da5ea04b4705f8d9352de89763be5919fc7b4de7e6141ebae21614ecdb580c29f37f2f326d1b9f38cd9fb03cfbe5b41dfdfcf92d971689e5f889fca434c311a60cfe498d6c72f838e11732707c0", 0xbf, 0x4}, {&(0x7f0000000300)="3b6cc9d3d3ad2d61c33fc74a8cf6b7c57963d95b106fd06c7b93ef5d089ca8f4f2561c5b86cb81273353392f6a25e34e841ecfaa360574b3838d950fdc3ac3f98ce56ea292d530a0dd77f5249b12", 0x4e, 0x1}], 0x400, &(0x7f00000003c0)={[{@statfs_percent={'statfs_percent', 0x3d, 0xc}}, {@lockproto_nolock}, {@noacl}, {@nobarrier}, {@data_ordered}], [{@fsmagic={'fsmagic', 0x3d, 0x7fff}}, {@uid_gt}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@audit}]}) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000600000000f000000000000000100000001000000004000000040000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="020000001200000022", 0x9, 0x800}, {&(0x7f0000012e00)="ed2e000000080000d0f4655fd2f4655fd2f4655f00000000000004", 0x1b, 0x11080}, {0x0, 0x0, 0x40011580}], 0x0, &(0x7f0000000080)) getdents64(r1, &(0x7f0000000480)=""/33, 0x21) syz_mount_image$ufs(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0xd74, 0x7, &(0x7f0000000b40)=[{&(0x7f00000005c0)="3ca1ca64bc0b99bb8342cb7cafcf68e41f02bf6b287bc6b0db8a42573bd3bfff4a5ee366ddf896420dccfcee816703ddc5572b5c7bff0ff65716f40df185bdb332592c7dab4f2b040dd87770655d462fe99907fe22c2cd8ea426c4912eab55a4bc0a0851e331b98631159268da839450040496bea8388ad75045da197a658e88c2a80065e263bf855dbeb0adabf28a1851847d404a600274b9eabe9ed9f0316d21795c86b2684593fbd5f9933d0ce6b3a0a11f72cad875a718c2209e2ba5de41bea0b4", 0xc3, 0x736}, {&(0x7f00000006c0)="dd2842d4b32f209a164b56f176b741c04d70d3ba9909b4f8b334e5fc23bf39364cfdd714500d8f292a8716cf20f798d5b3a5c0df16087a3fb92fb341a7f6e8a34c8d59e717c4b7", 0x47, 0x1}, {&(0x7f00000007c0)="dca6082727cd111f3f9b45287d914e9e87855bc1759f7e71b28efe4630da0b9311eba6358495a2ddf67e7185caf8772d8650bb7c0c8444d09eceff16d9243e145ca4ff5de16d811fdf9cc8acd14315865125818adf1af8ef9af1abe5970592577d17fbe5e31eb984595ddf2b7efd22fecea55460925880044145c232525fce274e0d3491555b9eb697a119449a4b811a412deb645874e2", 0x97, 0x6}, {&(0x7f0000000880)="3642c26711b9141463e1e6bd56ce2d6c9226fafa3b15afae3a33a4b5ce41893eda86375acea9aa690806694f053c2fa5769487ecf753e5863d279ec3d5eef7de89092ddcc9212e77f2c802b3c53ccd5d965bea06bb7ad93e5cd4934713353d5e85327aaf24829bc86f9a31294064cc021d4fe3fcbbff724dd72da90bdad495bff6559f213a5912c23025fd1bb051173e618d6f47c215595bb039654b0b4f41d3f567d5243e7eb9ae4ea88ca967ba991cefbbc42c0de47de42ced475b6379885c866cc225e480d43efd5fcd9287edf3640281d9e51bd9aa3b491600586cd68294f230", 0xe2, 0x6}, {&(0x7f0000000980)="feaf9071c63f2ad63f8cac54637bee639dd85a6ea8e9c10f1249ed828f21637d33fdd61d6bd494749f1d46fc61bd18aa22891f472e1f7347aba15f88c4d758aea0160775549e48ef87322ae5e6fb2ee64851c95179f51a64146e781d64745fe3c3d9070969e9cdd81c4639c27cc1d0976592db296c558f7e348790e4fd3979f2b49a38285d", 0x85, 0xfffffffe}, {&(0x7f0000000a40)="574ef78f344775975542ba5e10306d8fb90b568c265d3fbfd0b97e2f8ceb1f116e63d0bf4f28a2c6203836f96223ec83f56f632b791f7bbe90e8cadd0b22b29765d072058908bd06c992b3cc61cc5335b28e046c888c83e00ad6fa0df21de6591f53afb0edcc", 0x66, 0x1}, {&(0x7f0000000ac0)="7f1a9f6f4d18409571dd36cff9c27980abd06f8cd6bc23ccaea64aea7e3f33e48c0a36d0fd0d4339a1073fecfe486138ca7762aa19531824a8bcb47167ebf2b7192bdf80779d037f694bc52b41721651f5bf1a1d585cefe6d93ac7b36d6f3e9566bc3a429ae57eea6b0eecc576", 0x6d, 0x1595}], 0x40, &(0x7f0000000740)={[{'}\xe9{+'}, {'noacl'}], [{@fsname={'fsname', 0x3d, '/('}}, {@subj_type={'subj_type', 0x3d, '^!((,'}}, {@subj_role={'subj_role', 0x3d, '%'}}]}) mknodat$null(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x103) 16:27:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x500000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x1100000000000000, 0x0}) 16:27:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x2500, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x600000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1818.826042][ T1369] loop4: detected capacity change from 0 to 12 16:27:02 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) syz_mount_image$gfs2meta(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x401, 0xa, &(0x7f0000000640)=[{&(0x7f0000000080)="3e94532213c8760ba51d2eedc6cbf484a7df32633f0cbecb290cf32a53b07b35161d72486c673a50dc9f33f73e5c6129f6f52546e039c9d9fd1ec911c2547b7c7ced867d053c999e4aacac3795d8887e26ce820cd628fe72b1dc29b426d4b2375e785cc262dbad1543ec72d632e73c3364580016661aa943a93c07da38a0fe22e539959af6ab5ac1be076870c25e742597f80f98e0b7c765664a3a41a71d7b51d0b100b071a92b54ccfcd9b0ec23bc1136659fbd0c81ae3a9389f4662231b71523828233f55562da4cdea0bf63d7788ad27a9a581c788a20c7", 0xd9, 0x1}, {&(0x7f0000000180)="d202c21e6a0a13f3f3a86139f6c321f5dc804317bda1de6614bc5c7195", 0x1d, 0x1}, {&(0x7f00000001c0)="9e65526b6ffb8166c1f044476878c382887b4414b4bf2e8892ec001f79c425e9abd84fee3c483dfecc3335e6bd955ee19d33712934d7594eae9f3d967641f64b10c7f27497eeab62acec1c80b39a391428fdf813fc1a47c0f41cc11a6d1219c5dfe66abd4c37dd84036a59ceb0d9e673a51eb8065a9f1a80435c276b1e417889f1c318", 0x83, 0x7ff}, {&(0x7f0000000280)="1717033d7c5c3bc72855d92cf0e10da7", 0x10}, {&(0x7f00000002c0)="c072b26a4137822f4417b9b043b49a28d0465c818d13145d0e3d3b794cfa206ffa1cb33b85ac3ffc9a0467c0acf58fcd7a889b0dce710e9d1451865ea62cad180846117ef7991ec75824be7b7068ebc3c4b92f45a611944f7fe9ed4a46e76d297713f5ebe4152f342106c24b3b32fd4e862e75bc920a3f4ebb4d84dcfdee7588f996d859c3216694249ebc22fc97df9e4218698d80c4644b878b3b461047405bf9692b70bd170d", 0xa7, 0x9}, {&(0x7f0000000380)="f43300552984af8c14c55a1506bd4cdc9f089d312b080e8ce8a169f9a07559d29eb294c93f6130357fa070eb232153dbdf6e95a58d9758dda5851d61438758c3ba9c1598df329486b5cd87fe9e95097916fa8574d58c6f05795f337629227dbc6335589c9c679016", 0x68, 0x3}, {&(0x7f0000000400)="1e62af6bbcb832b4754f48c2673d52e066a3", 0x12, 0x7ff}, {&(0x7f0000000440)="e1d49902b6574f508b81f00cd02ce534340c601e3f5ef3137e5280532515156f9809246eec19944090c092e032cacea585e588aa57c795a8bd01085b0d16cc4458a389f5419094d89b64ce341f6982c92035e7dcf8767896501d9ff802ab92846726", 0x62, 0x7f}, {&(0x7f00000004c0)="a28343e6592807cf5304b125a670b5c59c05b2645f247966487e1cba5fa3fbd78f459fd15c2dd3d88945c821b3bd5d60b49afb8c081a2d1f892131218defdd063d2e646a665d064a04bf864c09a36dffdc45f71a3cfc5e578f9720b52f34044441df80a235802237b2be067229f7a0bc96808bc693cc458fef", 0x79, 0x6}, {&(0x7f00000005c0)="216bfb6fb86a67a3e72230d7680a0ad73976109cbb6603dfc743a47f1d793a0856c6c430bc7af9d7d67e13931779e15b1cfdb2398dda4ab3f4840105b48631bdc28aa8445a8652b9682387426487ed4220f34628dce2c15fd5a4773790c4703d8d084d126749bf6435ead05d0e6036729ca62e06971ba7948e", 0x79, 0x8001}], 0x2000ac, &(0x7f00000006c0)={[{'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {'-{\\/){}-+'}, {}, {'qnx4\x00'}, {'qnx4\x00'}, {'!/\x00'}], [{@euid_gt={'euid>', r1}}]}) [ 1818.943827][ T1376] loop4: detected capacity change from 0 to 264192 [ 1818.998398][ T1376] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 1819.005273][ T1376] EXT4-fs (loop4): mount failed [ 1819.174665][ T1376] loop4: detected capacity change from 0 to 264192 [ 1819.304089][ T1376] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 1819.310776][ T1376] EXT4-fs (loop4): mount failed 16:27:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x300000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x1200000000000000, 0x0}) 16:27:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x5c00, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:03 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x200050, &(0x7f0000000080)={[{@nfs_export_on}], [{@appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x61, 0x64, 0x32, 0x62, 0x0, 0x37, 0x30], 0x2d, [0x63, 0x6b, 0x35, 0x37], 0x2d, [0x65, 0x38, 0x61, 0x39], 0x2d, [0x36, 0x30, 0x61, 0x65], 0x2d, [0x32, 0x63, 0x37, 0x36, 0x37, 0x61, 0x63, 0x61]}}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@audit}, {@appraise_type}]}) 16:27:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x700000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:03 executing program 2: write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000000)=""/130, 0x82, &(0x7f00000007c0)=""/4096, 0x3, 0x2}}, 0x48) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2001000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x6004845}, 0x8) 16:27:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x400000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x2500000000000000, 0x0}) 16:27:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xff00, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1820.482384][ T1415] overlayfs: unrecognized mount option "appraise" or missing value 16:27:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x800000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:04 executing program 2: getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={r0, @in6={{0xa, 0x4e24, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8c}}, 0xc73, 0x8001}, &(0x7f0000000140)=0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000200)={r1}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x9}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={r5, @in6={{0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x24}, 0x4}}, 0x0, 0x8, 0x1, 0x8, 0x36, 0x7, 0x8}, 0x9c) 16:27:04 executing program 4: r0 = syz_io_uring_setup(0x2de3, &(0x7f0000000000)={0x0, 0x5625, 0x8, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000340), r0, 0x1, 0x0, 0x1}, 0x5) syz_io_uring_setup(0x2d30, &(0x7f0000000000)={0x0, 0x75ed, 0x0, 0x2, 0x209}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000100), 0x1) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) io_uring_enter(r0, 0x3caa, 0x375e, 0x3, &(0x7f00000002c0)={[0x1ff, 0x7]}, 0x8) 16:27:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x500000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x5c00000000000000, 0x0}) 16:27:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xfeffff, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x900000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:05 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@x25={0x9, @remote}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1, &(0x7f0000000140)=""/145, 0x91}, 0x2) 16:27:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x600000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xfdfdffff00000000, 0x0}) 16:27:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xa00000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x1000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:05 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="b35c7d6f5ad466099035b65bcb33270d988fd84a98d433df78669359450e1d7d936e2f48848e07712bcb48e9ffa8ae5b6105ead18b860fea02898965ed237295a70fc02772e0c5dbcdc2879088a70092c0b16a57ee67b89182be1dc2ad5ae720fd0d2f3ccc8601e0cf75570aef67fdfaf9", 0x71}, {&(0x7f0000000080)="aff5b0dab7aaaeba687c31a0be13fbf6204597d333a3ea244aaa713572eaa155f062f9d37339278d09a9796f2e94a5d323957fa790ce799a00b3e22043c985f64c6877c3b208b7bc742d4041c0479a5697bf78bc5b61b4c796fed7798493a2ef7b33c8a5348fd959e7ecb11f5ff0a8f3fcb7480710d455111e38e8fd267eee28cfff66732cded8f24a4dbca9bdae3f5448553d692ac4af95605eccd2037e644c14d031c91be7392880366d0c970d70077bc68b0f354499dd5dade4e660346b81f1aa7b4890e55caf9ea64eea", 0xcc}, {&(0x7f0000000180)="fa1ccd6ccbfd660f9855d734b4063ad0e6008d52d0cbc7fdb0d1e379f868fbf3c1dc4e7c221402149a71bf1961b01888a289a23f9c09e07594659c5f867c8c1b944d6bd5c670ae78d229eabdb475219b3aaac010d74dcac41e97a94ba79790da21dffc09767faae3e0e61797f875", 0x6e}, {&(0x7f0000000200)="0b0d59cfc18efc002956fcc79f65440ae8349c5f3fae47f099b84d825186226598c0c08bd3384c95848675", 0x2b}, {&(0x7f0000000240)="98b4a984d8040a5757d2ba66b82ee099206033f15ca9c47e017623e4d5591044c84867cc981fea6750a02efa3826b9778dc9b256819ee0cc8c8c33caf8f359a40363", 0x42}, {&(0x7f00000002c0)="0c1944cdadf3efef5708dffa3a6ec6dcb231aef7cd88dea701c76a23031859105823ebb3160dbf46d4892844b77e0234da414f48ddd79c49e71083a92bbb6797e3068223c9e3f9f0118741468b96102df489a85c5aa98e3dadcfe0610c3190146b6752ca743c14f7c08b665ea71a5c56d850f91366f59b8064c436480d1a709bde9ad55a4dc6983b0c5801e7c888988e8b359c6d913acd389505a40dc4b20ced29451998ec682650f600a531f300980f530aed69af6ccb580b954d7d42aa2f93f32ebd5d9740f5bbe8ce5d988817a2584c3e32e4617c", 0xd6}, {&(0x7f00000003c0)="c2866d44f5b298ec783d19022905051922963b15b0de8f4b27a124c5cd6e3cf96e54ce25882a13ddff9493228a0b437c86fc937f97885f0a9bf39db59aa40e4f47b0d2f6f1b7cdec8787c0160571dccd7fb592f2037ecc3c36fcddfd64c9680383c87d8d0dbc6b5f9ff0e4a83ba46f4d6575d0bdfbec30b3cb40aaa4ff5105881ef849c251211f62392285b9078d759ee13b6153b6add9a450c401681b8bffa930fa617b748627543f5f92683e2a4f869f941c499b6d4167a597852c303f91a3084cc3c41705bba38e4937de50542fe8ae8d479667f2a8f70abaaefe88c7adcd831c3a7e5ed6", 0xe6}], 0x7, 0x4, 0x1) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:27:06 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f00000005c0)=ANY=[@ANYBLOB="0194893a58615c42759f81a0db2b90c9e6fa026221596b44f883bb70efd40cc2e0b0111d61ae9846eedec8528594a53f8a46cb5a2f3d005b7d29a3c551a33ee01c7f11830297ade5eb84c3aba374ed0e63c654cacc5b0d946b98c1f6ca3d6c18218c4b9bd88e6039e923fcf45a0cffdbf249cdbcdaf4c910c6ff25497a6338abd91eebf3fbef6d9ec724949a9b14159c20ac8f68a38b8969d46aa01ad8b5cd2b9c19af"]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe4) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0xee01) setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f00000017c0)={{}, {}, [{0x2, 0x0, r1}, {0x2, 0x1, 0xee00}, {0x2, 0x0, 0xee00}], {}, [{0x8, 0x4, 0xffffffffffffffff}, {0x8, 0x0, r3}], {0x10, 0x4}, {0x20, 0x1}}, 0x4c, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_mount_image$hpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x5, &(0x7f0000000340)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000080)="d49b892bd72b3bb62324c589cbd475fe72607eb8cb2481ee1d52414762c8395b98f277344f0cc13c3df4904746aa7f7b4e76c8429b674da053f7b0e1e5b83eb4bdb70f680b4ca1fef84eeb149346fe015de45f931364f6433937ed244dda67fa388524727943bc72a1e310f11fda55c86e344950fbba6611752753c6da35", 0x7e, 0x6}, {&(0x7f0000001840)="0ab872691057feabddebb52c903243d71ff17702838d819bb33286a056a0fb295d9df5fcb6a3a2196198662facf2655da7af4a176754c8c8440655d7f9e88ac0f93c4ebd296c3be2c06b9e0d21a2571ac4b0e45835930518f0cedd45bb1b290d15ff016f00a71e0cce55d7e39885dc5249701a158fdd436812c6002d0489d0ec5ff198cc4f8826c8291ed75101c1b0365b6ef15bc1ed4a41c5ffbbbfdd82e160ae64626c22c22ace4bf11973225f64d839dedc1839540cb26fadc0392706b611642b027e6f21dec975cf081aa48de41b68671a3d9ca78437b036a92efa1f355fa1f2d438399fdfe40a8f464a32721387cbb536bb1710fdd84b74ffd9102fc6", 0xff, 0x2}, {&(0x7f0000000200)="ebe27d24987e858e986969c30f65079cb1837dea4c42af5cc6fb58f16b165bda6af4e4d6500dbdec9676d49818bde1d717b20b34f9198a03cc5037e9fb743f73c6729ceb3ba1473f95235322e39f3e6fb4232cc49325b0875c44bf9a899fba0fd8d31b87cf7abe5c8e51fc3c56170da6420fe77312fabf29cfa32c16b63349debed1963a42f08d89988ff9137c0124509eba9fefa5113b30287e06a8c725da5a045628f955", 0xa5, 0x80000001}, {&(0x7f00000002c0)="2113cb2b33a6db512ea0e34bf7118687cf3798f1c23ea030a1de6afe287794a639d476bfc911f4a3a3a4cfbb46a31d3d6261314f0b25341c8f78d8018323e1f28b7be742ad44eade3daaa662948cf274b0a8584482cbf04e50d87261ebbbf3fb9b9d86d19bbcd9563595f7a3b60ac208b3f2b045c97bebaa260ff0da5f", 0x7d, 0x400}], 0x6000, &(0x7f0000000100)={[{',\'-:#l\xd3r\x8a\\\\E)-'}], [{@hash}, {@euid_eq={'euid', 0x3d, r4}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, ',/'}}, {@obj_role}]}) 16:27:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x700000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x2000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0xff00000000000000, 0x0}) 16:27:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xb00000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:06 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB="00b6bab1060000005a56a43d425825cda57e67a123524c3dcefa6e92bd7d1bf08d8090b966e548b6e6154c2a18b03d03708c6962f3c6581b52d3efe9681005e84d60916b88fde3fadb04ec1247fef9be9c277b5d1049d42feb137f889eb6a4879c0bf89df0227b11912fe38e5a4c2b2b7d17723497c8f169d99077d2f84af898ed9d93efa80d671832b7882ed45011313c08043f7aacc705030000000e28615f88d275b2df7da96169a3873d69058811600948c0d7b0335147e9c900"/198]) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000000)='-\x00', &(0x7f0000000040)='./file0\x00', r0) 16:27:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x800000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:07 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB='B']) getpeername$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) statx(r0, &(0x7f00000001c0)='./file1\x00', 0x100, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000400)=0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f0000000080)) fchown(r5, 0xee00, 0x0) fcntl$setlease(r5, 0x400, 0x2) fstat(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r6, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x2}, [{0x2, 0x0, r3}, {0x2, 0x3, r4}, {0x2, 0x4, r6}], {}, [{0x8, 0x3, 0xee00}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x2, 0xee00}]}, 0x54, 0x2) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r1, 0x0, r7, 0x0, 0x4ffe0, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f0000000000)='qnx4\x00', &(0x7f0000000040)='./file0\x00', r1) 16:27:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$bsg(0xffffff9c, &(0x7f0000000040), 0x4601c0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1001, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x54, 0x0, &(0x7f00000003c0)=[@exit_looper, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000300)={@flat=@handle={0x73682a85, 0x100b, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/165, 0xa5, 0x1, 0x29}, @fda={0x66646185, 0x3, 0x1, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x40}}}, @decrefs={0x40046307, 0x2}, @enter_looper], 0xde, 0x0, &(0x7f0000000440)="1a778391e1858b4d3354dbabe6ac0ec3f4d19daa5b2d30e9abeb0a502d0964a1177ca7209a181f9e75dac19e2e2d4a81d21699b17ccff1f7a6cf2c50df03e6d6d670de433dd49a4db8594dccf59e2493062999ad6952d7f4f2c6094aada7649089dec76a55f57a4ee559ded45e016fc720bae2a9e2d83be295215d2be24447f83ab72cd33eaa7b1b1afa1cb22658601cbd96111b35ebe4cb449d7658bf07acdb327edebef53bb33e61f3c4a3d71133cf2a1a6a203063fb988a099ee91c0b495813474f6c3530b3c871290765829583f6ff1a73346144aa619adcf772cf46"}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000200)={0x2}) getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) 16:27:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x3000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xc00000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:07 executing program 4: getuid() 16:27:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x4000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:07 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0xfffffffa, 0x4) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000)) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:27:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x900000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xd00000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe4) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @null, r1}) 16:27:08 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000300)=ANY=[@ANYBLOB="0057f1b2b02e0c6578fee7a75c19d564943dca39ed93a174e143e6f6509ad53a6cac4ad7b011514ef3c0f5d688350439e10a884d6bf083968fd8c4238004d6c805eb73ece3eb12b45f78f450e17dcf85b48b2bee5489a0109e559f548f8caf993be1"]) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fchown(r1, 0xee00, 0x0) fcntl$setlease(r1, 0x400, 0x2) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000000240)=0xe4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) fchown(r4, 0xee00, 0x0) fcntl$setlease(r4, 0x400, 0x2) fstat(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r5, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x1}, [{0x2, 0x2, 0xee01}, {0x2, 0x6, 0xee01}, {0x2, 0x4, r0}, {0x2, 0x2, r2}, {0x2, 0x5, 0xffffffffffffffff}, {0x2, 0x1a8ae6c58a471be4, r3}, {0x2, 0x0, 0xee01}, {0x2, 0x5, r5}, {0x2, 0x3}], {}, [{0x8, 0x0, 0xee01}, {0x8, 0x3, r6}], {0x10, 0x3}, {0x20, 0x2}}, 0x7c, 0x0) 16:27:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x5000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:08 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x108041, &(0x7f0000000780)) 16:27:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xa00000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xe00000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="04080040874622adeb813fed4910fbb98a88ee89ccfb8b3ea20a64016e16b85dc9436c69b90bec5f2b054b658981abeed2a1635b75bc9dd7f3a36141b6614209ca6479dcb915c5ff008bd81092282b6572f65579cfb43fd0c5c53eb863d09c81e1b459963450b20593a8932b41ac4bb8e3705e57e6c5aadf2255c082c9e6dfaf03c766d873b271a4d6beeb6541e4195c41f4eedcb1aaf2a58ba34ea0fd86b9ff57e99deff95146e91a240ce1ae6182246c2bd7026e2aa73a57ae2b00624f0f1134b5bb3992aacd158e063b2014b5170400f09b65"], 0x0, 0x0, 0x0}) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1395f5ffcf3dac982fa85cefeab790e35e39cbac3c8cfe56031233f2dd1134e01d33b221ef2f1b70448fa8c4969a29200b6b13d8afdfacb43b15371c81b4f1782928a18989ae8b56883945a7eb06ca72c789094a25f43dfa47eb0a477e0c2862", 0x60}, {&(0x7f0000000300)="9b022338e646afaaec95293d9b8dcd7dee13c54410d4de46a087dce6901b1e53f74e0b120441aaac63d5e30a4493218f534fa195ba5ff8977ca38c77680b72b52c601341c68965979cc83512e849a9e620bb5832a624418ae58223fefff5802012cc46d2d18d297e3c8237c3f3a87a5f2357ab4118a6c35552cadd26bab02bcecbc6d66f7d8f995a2c7d93e01b61f355e8cf5a5aa4f7d4580017724243209cfcdc371c03c326d23ae4288fbf4eaa6ba83d4f3b72dd4bf71986f64f3a25665539e51f70ed420165ac10e950e07b5eab7c3f7dd127f2224c8036683c5637fca626f517098827804e8233785e37ef8c3d51bf74d8757956c5a733290cbe0aee", 0xfe}], 0x2, 0x0) 16:27:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x6000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:09 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000440)=ANY=[@ANYBLOB="07780212d45ae5296898b9804ef5f14eab6b0300000000000000414d15b98ca404f24419db00321b774177f9590353761354e17b35de8e2ec39478e9a5e92372d6034fbb1870413377ed7dbf5340c8aab8c0d762ae6673c5eb4f225ab13e32bb5ad159dfa2eb98de99fa1a78a9b7bbdc87ca5c6eb6fd80946e29e7d206222e1cf037d6e9c2d0a9604b3da5b2e11fbfe73308592e23abda024fabe8448e994d010d7832f5d6d199647755f35c59b082c5b74c7e6bd2673238"]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fchown(r1, 0xee00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8, 0x3, r4}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1002004}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r3, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x27}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) fcntl$setlease(r1, 0x400, 0x2) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r5, 0x0) syz_mount_image$vxfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x3, &(0x7f0000000280)=[{&(0x7f0000000080)=';F', 0xffffffffffffff6f, 0x9}, {&(0x7f00000000c0)="d1537cf92500ff6db63c0ce35310ac4558d68995757f0b3f8868d9123c0dbb8eb906e22d998a06c17548f02a90cc92f406ebe0b9dceea832e20ad177ec35291c061e1a87aa9402c9c1d9724ad2d542ca1abb6a99aac5a7e6d166bc4d52853a5dce6fb2a46975dbe527672629736a4b0bcc60237b7004de3643e85d1b5e092c2a5a3cf896303308c50d025614f9a9937c268a4f055498bd9e1ff531eed10ebefea5adde2594d7693a259f45d2fb43cb657414ea2be553b2a152241fb5436837604ee6e8b74be4b37f", 0xc8, 0x8c8}, {&(0x7f00000005c0)="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", 0x1d8, 0x8}], 0x8000, &(0x7f00000002c0)={[{'qnx4\x00'}, {'qnx4\x00'}, {}, {}, {'qnx4\x00'}, {}], [{@appraise}, {@smackfshat={'smackfshat', 0x3d, 'qnx4\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r5}}, {@hash}, {@permit_directio}, {@seclabel}]}) 16:27:09 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x80000000, 0x5, &(0x7f0000000280)=[{&(0x7f0000000000)="febde32fd9cc3e33b767b7c04e94dab0596a764cae0ad4acea402046bb21613c37e919ee34b864fa91a08ab93ca19b2a963377308e1854deb176714346439c24a62443a974b2be7ed5e8cbac42bb3cda716e16c496f1948456bd8117ade51c5a2b12bde6809d6fceddc86db696b3eb5835d0096325b324cc3338506630048d6f5b9c762e17bf6fdaa26b69b0cf3730699f63516bde7da88791a028a2d6bac619ae523146b660455b1114b108fdcb52277f5ae0ab3593ce46e20cff87108230", 0xbf, 0x1ff}, {&(0x7f0000000180)="2b10922800c214bfdab3dbc5eac92832159de7539773757922c092af651e1970cad66c0f160f70c5d823628ca1c7cc0343d4d9e3592f75860195b508", 0x40, 0x8}, {&(0x7f0000000100)="a5af2554e1ba292a5b77c2d3f6aab29f0ade821bafd0e95d0d0c3b49d0a741d9dc1504fe8ec69c2a66d28e852b49ec5cdd3d642ec8bdf9f66571ebd06a59b0cc2b0bb582c1d42e13127de6899a3064c526161d268920f60777157dab07968be846b7aa49a37320be496f6da3", 0x6c, 0x6}, {&(0x7f00000002c0)="6c443e0a32de3c02246e89c2bfa5d6fbf52ab1eb976de51b5269248738874104e2549a57ca2a50b5b11c5c56f7f707644a7936a7d9ec52dad7655e0750173512fc88bb95f4aebd50206605d71e9d2e290a00acef35286a56b6648832ef", 0xffffffffffffff79, 0x1f}, {&(0x7f0000000200)="c40480721aac32514093fb07b585752eee835954ae6f6a16d41b3231342b20c10cfcd5373deb1284b68b8297636b7ab36a140b31ef173dff34464f4a5941f2bb5eefe33c1421ff8cbde59aa5754e6ec681cc9b3941655d7081967466b4b9ef926d7b1ee976c66a1a75", 0x69, 0x400}], 0x0, &(0x7f00000000c0)={[{'@]}#&{'}, {'qnx4\x00'}]}) 16:27:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xb00000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x1000000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1826.024442][ T1555] binder: 1552:1555 unknown command 1073743876 [ 1826.030723][ T1555] binder: 1552:1555 ioctl c0306201 200000c0 returned -22 [ 1826.102349][ T1555] binder: 1552:1555 unknown command 1073743876 [ 1826.108858][ T1555] binder: 1552:1555 ioctl c0306201 200000c0 returned -22 16:27:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x7000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) preadv(r0, &(0x7f00000017c0)=[{&(0x7f0000000200)=""/233, 0xe9}, {&(0x7f0000000040)=""/58, 0x3a}, {&(0x7f0000000080)=""/24, 0x18}, {&(0x7f0000001840)=""/124, 0x7c}, {&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/192, 0xc0}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0xa, 0x70b, 0x7) 16:27:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x1100000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xc00000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x8000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x9cb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002200)={0x14, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r1}, @acquire], 0x1000, 0x0, &(0x7f0000001200)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:27:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xd00000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x1200000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:11 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x3, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="f7f1e617ba7c7762a013945ba18c6e63f09115745a202df39f3a4cb55f02f9e09e47c8dc1e9de6f128e1ab894f68ec39721809df7d2f5f87da19ba0112442ac49eded6eca6c571cd1a10", 0x4a, 0x1043feb7}], 0x8003, &(0x7f0000000040)={[{'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {'\x82('}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}]}) 16:27:11 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000500)=ANY=[@ANYBLOB="0500893b3bc417426027d8496a131c02025486e8688a205da7319a68e90b10c3000000000010000000"]) syz_io_uring_setup(0x2de5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) r2 = syz_mount_image$ufs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6, 0x4, &(0x7f0000000340)=[{&(0x7f0000000080)="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", 0xfc, 0x9}, {&(0x7f00000007c0)="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", 0x1000, 0x8}, {&(0x7f0000000180)="154a3739b620fbbf1ad21cec0e5be517057ea6061a038367a276c435d9a34fd9db4a858f4dc2aef7bb2dcff3ae2f63e53122e41e11827d3a6d8198451d8b6bb2f1f7803ba18015897c3b277c0a8f2dc38acae022cea9019cbce70a5ef381e8147a6b7b8a47329e72054a475452c52724a0faba4f9c5f19a2d9b20883014a59db28bcf7e04965f9f7937d84a6a7e14ee0", 0x90, 0xffffffff}, {&(0x7f0000000380)="634adb8202be95db99ea281082f32a6c6c8ecefe7cb5519b7bf1dea1a49d573acab43ff85aab847f2e2a999a890f332c17081c03ebe5660e1913c699181fc464d7989386fb0b98b78abb48aacd45d1742dd82f552061c0b919783df3a7ec5beeed687ccd6ee1ea3237fdebfcf1c6dde5274c9e583cca63883abd4befb51c941aad55b56ce1663801db900e32b854e107d5e5a558b98a2756e8b491d0c7bac22cc0f66c0ef8486d7b890e8cdd7f3cad9ac9c105842430586674ca0de0c35bba314268b2f056200ee8981f49c2d07844053b5df4c58e252de2044f73a07c967f44a5", 0xe1, 0x8}], 0x40004, &(0x7f00000027c0)={[{'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {}, {'qnx4\x00'}, {'+'}, {'qnx4\x00'}], [{@euid_gt}, {@smackfstransmute={'smackfstransmute', 0x3d, 'v;\xd90\x12'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@uid_eq}, {@fsname={'fsname', 0x3d, 'q\xd6@/\x8b\xa6N\x01\x9cJ\n\r\xec\x859{(\xaa\xa1\xe0\xb6_\xcc\xdcr\a\xb1m\xfe\xbb\xcb\xd3\x99\x8e\'\x9ff\xf03\xfa\xabQ\x88^j\xf7v\x1d\xa7\xa8iM!3\xdb\xed\xb1\xe6\xe47\x85\xf5\xa1K\xa6\xad/S\xd8\xbfU\x80mQ\x89\x9b\xc06\xc4t\x93\xca\"\xa7\x7f\xef\x96\xd4%\xe0\xaa\xdde d\xd3\x8d\x88c\xafK\xaf\x0e\xce}\xb1Q\xd1\xa4\xe7\xea\xec}#\xdf\x92\xa9\xbeVB\v\x93H\xa3A\x17\xc0\xc4\x8b%\xe2\xea\n\x1c\xea\xc5\"\x96\x0f\xd9\xf2T\x94\x14\xcd\vd\xbcm\xb1\xeb\xdd\xb3\x92\xe3\'\x9f\ftH:\xad\xab\x11\xdd\x9c\x97\xd4+\x8a\xf5\xad\x893k\x1d\a\xa6 0-\xf5\x8bLp\'\xb7LgK\x8d\x95\x05\xd53\x90N\xdc\xf6\x87\x83L4'}}, {@fowner_eq={'fowner', 0x3d, 0xee00}}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_hash}]}) syz_io_uring_submit(0x0, r1, &(0x7f00000004c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x2000, @fd=r2, 0x0, &(0x7f0000000480)=[{&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000005c0)="82514cc1258cc6315e6279bb74077b8e0138b8a4f59c9d827985ebc77afed88066d9e6a1ba27ad9fdb8f5eee54c262b3301ea710abc6b36dac93ed9d24c8c2807f076cb44d8cc525f37a4a45aa3d66424e01f7fa64e25c92af7cd226728b1154179c693cda2d560a7dd7ecdb60399cb67a5f5f9d9f4db413b4e2be76a3e78ac942471a8160c474a36131c548b54f87157de7b41c3102076687db7ff362b1a41eabe0b76c9d0008ed1e2bc0f71345aab18db2598118fe8dbb350d0330906ec79475098fd664247d7f37e9d446", 0xcc}], 0x2, 0x12, 0x1, {0x1}}, 0xffff732c) 16:27:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x9000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1828.088475][ T1598] loop4: detected capacity change from 0 to 9214 16:27:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x2500000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0c630440464efdd96e96cbe21414f21e36dbbcd31c7b3596b9cd4afc132c12e15e201639fa11fc5ec63d6cb1fd5d1fbb56f52d1656945a7176d0ffc3c8b1ba9a4bed1401cab4c21bbb2cfd51e9e3a6d820d02ab86773e05d757305ef2aedc02e1e8735a40c0ad72a004a527e4cbda243eac606cfcff73dab3e"], 0x0, 0x0, 0x0}) 16:27:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xe00000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1828.352432][ T1598] loop4: detected capacity change from 0 to 9214 16:27:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xa000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:12 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)=""/1, 0x1}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000280)}, {&(0x7f00000002c0)=""/120, 0x78}, {&(0x7f0000000340)=""/205, 0xcd}], 0x5, &(0x7f0000000480)=""/92, 0x5c}, 0x21) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x20800, &(0x7f00000015c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '\xf4#'}}], [{@hash}, {@subj_role}, {@context={'context', 0x3d, 'user_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@fowner_gt={'fowner>', 0xee00}}]}}) 16:27:12 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) syz_mount_image$adfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xd15e, 0x6, &(0x7f0000000280)=[{&(0x7f0000000080)="f8de73c494f2ed5a7f20445bb6d339a628bb59a2a278766c74f3307551d49e109c31a91287b06df3bcffb2c537", 0x2d, 0xffffffe0}, {&(0x7f00000000c0)="dd750660b3f8d4fe73caf920b74deb839ab1e5553eebf3624207ba7dcb2455db52de085145d5573ec509b1b4de8a7568c05b4cd4282f336b3a1464e3a2ae61b2ec2991083e41e8f2da9b4ea089bc0300f39945a22459164e7fc033e61a9a8ab25997a0", 0x63, 0x1}, {&(0x7f00000007c0)="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", 0x1000, 0x400}, {&(0x7f0000000140)="0336f88930a28182b3f96cb86e3d48356f2f7f2abbed863b2798e5974862f0fc0ffac10c08b81912e2137fb59632a73925626d3df322baee5acb7ab28b2053c426af5c8a9fcda327e927a11156cdb54885272b0abaf618892fa3793b79cf49ca38a8ae613437e36876969bc9f9b51a79033f007d26062463a36cef9950db5836f02a8ee364549b0bf3b846143fc0c4abf62da7445296cf1b3ca841ed2133a6a93978f0a2035b0e3d1e1f3ba8e0a4e612b58e964eb7ba31a032c44fddf44779ef64d567829c11b8ba532137fbac0c05de4c8120f0c4122f", 0xd7, 0x29a7ba71}, {&(0x7f0000000240)="e8dcde17832c8c7d6058640d822f4f46bb02dff4b570a32707cf19cb9c2bd7199dfd", 0x22, 0x2}, {&(0x7f00000017c0)="b8291b0583eba503e2363102a615ba85edf45bebc322bb48e173a246ff29fa5412adc17953edb1f94edffcd767cbfe466e954709b4cd91e34471bc7df63bfd8cd7a5fa4c2a100b507a5ee83d63b2e5541b33b0335739b8268a1c3356aac59f928837b227b9dac8e6107e15532f91781c306e562529c02bd0b5f010e251757ffab032f66a48bc349dceeee362088bd4abacfe17a89886083d986e5fb54c33cb274dd8735460dfe78c15827d21018f1b81481073aa53a584ff23c578a8e8223a019fc6645466ed769ca8b1b2d8124b13cabba79002c155d11243549c30937ef7630bc06e978f2758598694c4d96fd30e0fda3a61441d185c115e2607cafc36c1fb516dbc921f23e5780958a6ba3842e1ef0adbcf52c15076a685aeaf12eadf74f67febc97db44cef41c4e2e2cee7e27adc844cd36237cb4b3fb2d8f885e031aac27b024d290a9b3233a3de3ba22141b615f452b3d24f610995811de06af15d1e9ec3597ce6a286b9e2e178a26f7e43ab37daeb28af36b49bd5efc997273543102db263168f4b8c2e68c4d7aafe3c1def3285d086ba91f819be3c9b910a4c2f2ce50279b35f2ebfb212f88e87e9e4efad07a01d213d8c088e48c04c66e698982be57bfd2becae92a5012529eadb4c5411d3517b1e9a45917c5900fd4dbdcbca92270a7b6b3cf9eefc1565d924b86d3bc0e5853e6617d10817fb5ce2a201f88e0eb6f07f2073f9abafabc91958a8fdc0859fef99e6acf6f58a68151b10610e597adc9c16e0ae9f4271676b97de9490efbe90289e99b36bd634cc20db650e5a6442d24191ce03b17d874e1ea68e6928083879dc479e7800243930ba1bbdf38be9a56f3f0f5836bdf564eccbb21f867face20c921f453f085ecf9a5683bfa1997897bee49c647b9ce8aeeab5eca1fef3348a7fc3f96ccb5cdd6f73da8054a13a3aaac7d8801cb1cb9d48941d25d9f4bd32844719b2ad0a99e6e53c2e2ce531af8481353e5245db1855ef9ec7d59f957710b45c54d12355adda635af2350b3c50cb4fc20648e66657792e4b48e35f55489f753e26212303c2012c9484c58e70ec39630ebdf893c6f7b8942c7ed904a491141056c7632973187eabd27141c140ca37c2256553ed4d9a6d913319c7f322ac212435842c19a2037055b4bb07c871138853ca50963628dbc430bb60e4b4d5e169741d0ca2d6ec1b0e8fe67426718a9fea048ae799d9be9be69d438861d6f5356dd9af4b0e621987349bea9a7ac50a66f3a262f75c9cf98cf8a0937c3852a68413541c0ab7ff9b46e82860c3ae7182309df70681102276668f101351152276e2f14f9e1a8c526c12d432c9b1fd8fca51dbd047a09599509053c9c7b5d09b63755abb5c2166017b90b32bde685ffdd5d9883e66bf6a616fe1dc4327319c34485940fed5938c03785e71376be6d9eeab84758577b8d98151c3751324230bae73609940032cdf361fcf85015579e4bf9c3cbcf98b54f250d706be7fd1fc5b1d0d95dc0b14a184ee32de16c792306685beed3e492eb0ef681291ff85bb8edfc035add36dd808b7ad0830f3bf8c9d03e6ad64f01f649c2d15cf98cbb958ffccce6e4b258af323cd45d0b4254eb35e99c2e44eaf4a75c62cbd015cf89b0682780f56fa2584ca00901007d0c0c5c16ee247ac0ac7e696aed9bbb118cd36460751189a8a6917d34d2089239b9fbfcb2f0f08ae6088608ead73c3106177c0fd7cd1830f7634e76266e6d5a1af5fed1f4b747235dc0d199ff985e19e643e9ee1cb095ef009630701602b35be4d514f1da8863e6f820307d755b03dcf15a7055590c0cdabdd08bd9e2a66e41b38a9b14150083d5df7e2cf7e5671bb4e75be24c82b197a37acf1184d5d7847fdb16918720608986dd9e49f115c87ea46ac0d610f7590bcce5d637d6f4fd3f32b13be9409801d50ac6e10e22bd09b7ea5c1c5203d66a1a877c17447e7c7c6a12e4e449d2b9ac00c99a60d4aef47101bdf3d4658687b51bc6e0572e4cea2dfcfc071b2ad570e4be922de4defd56037b9ebcb007b26a623b829157ee4f33884c6d6bfa7b3ab6d79dbb7848ef3fe6c27df240a39e2482c06043d1c3937ac9d0f8c4a44fc615b7842dbea031996dfbf03df619a50f36a589d1af74931292457f82128878c9f618f3c8b8e8e0069891282a29c4d5d65a132cbfd2160d2a12263a81c4fa44771b652208b1f87ae505d34c3b6746e01706612ec6cb2b8b33ff0e557ed4b02a09d8c2728ee53bfea57d7b8bee829d9f4914a0e3b51f1add8b9329d60ff49b7e47948e8633b4043e3db3649d125b6a026e2b7152f90b045ae130e0b07bb4d2bc21a9922263ee434ba009cd9179ea8ecce159a87b7cea276b122eb733643f9f604d889cf0110aaad4fa194bd0af160c0f76d3b37ce8196f64b26f88c0e40eade8b8d19298dd01d1935e281214e545fa27900b3773ce826dc0e8217ccb1f7934959ed40e1eeea53ed66aefed85a11e842e003e3d38798d50f88e39770cf0bb0225f11614d9f4a25be2fc7d7fd12aa39f6bed3a6b3a7d616f7a5d4b7a99ba63d3b0c2894b03b795da9c1604f9526b87ec66545ee87d63002536f11b7440a6566d45c20bbdb852148bfd1533876c6f6518aa08168968519f8b7c7ecb703ed7c357b29123ad14daad3f5b5af0fe2db2f15f0bd390a09b60f19490081059c2dec5d5f526833c0528c8892142d6980c655310b4f8b46b29c5debd64c085d142115501205401ca21f25a88615c27e735e7def0758134e198bcf6d0d2bbef168b136051f5501ee58877befa7d877f7940bb401b0fec9f4bbd1049291611caa48c27ca2a33fa59a7384d58e3427feca27e79034daa2c168929e5df0c6d13550dda71b839bf037112fbdaa7623fe5d44cf2abbd7b19d85b88506c95fa3a323ff5bc4e969e1aa69401f8e5f5ba4eba440de88bfb0771e54559bb5799696e16dfe5f2270fd7b28c0bd3063c0331bea4ed0bb236bffb6c8c67959f57c6b79e8f6aa3197ef7dde290211a52114a8f82151fe3aa58ac993e0ca4505ce6e0ba696d812b7ff2ad35d62748b2a94d596c79a5eb6c953a25a5ed0b97b202d04453bd20512c16d1257d1a8dcb36fa1f01dd62d24c01bfd4bee45a3504f57f310d380404760df73a735d380a0fbb255cc1351e86107c28d67d62b020d161de938c09ebae682fe5058dfc3ca98eb1af9b6394c92fdf6c1e66b6970b8da2c5242264b3f561271016be18739b22b9169a2480a406866f35bcf08dc7a082b6fe0b054a0c249f7ea520f1499623fb6af455623e3958624444db0238be3e15de17c07b53c6a270270f2d51c0909645f3643850966fc45df4659700bb3dd7e0c9345c839cfbbfe81bfa0c6d48d5fc7291419a31b3a9a40c0f3bddbd0e53bb1cfb5b97c370c4eccd8fa99e1e3c5d6bb757b807f2b17cc07e56e386f7ef138a250fc615b962906d852a2c02eb977b67f8b94014275c3168f0a7bd9b7bf9cf8531172388899a7e5c2e528ae9832c61857de219c02c705892f4f2a3b0e8898f20d8aaab2c16f1614d3eefd34afeac6299435ce68aa71cbd5cc2467485381642f4f114b8878e48c8655ef1218d6367d6fb0d57d4b77eaad6002d586d07e5be9df4c01451c39105635fe59cea492d427317bf683f75ba0fb7839408bf50610c4982c3371804ae8b544b2306c07ca52c7cb887cd1665296ea6369f12a58820af7accbccf1d4a076d0383195bdee75f3a6a315903b51ef3e5cce194250e95b9d852be480af1ae203beddbe401bb8a745b290a5f2ef4419d7dcf7f20db78359915ae42a111030f915c1f93a054490a96df919f860805f218eb11454a90dc62c2e6f3f7df8e58a7eadefac0d393c12c8359dc5fb65b6944d3192c936c020cd3861c5a6e39ce3ef0a0d6e9c6142062965e2e5fa6698b53e885837b07389b850d70a4997e21056fb6defad9ddbdee6d45bab530d0b0280ec7896bbbaaa150b0f63c57c20bfff2c705c4a6beda862b4f977b32f697f48b39ae84c613f97061b5b0b6900293f92146c301c3eb65fbc3edc4ee6d48f30174e6b3783354742a8f2537233c27fa5b5ce148d9ed64176dbf2963a0944aad85c36941dabb6389e24f18cf6516eaecf8471eba59001a5c5039560fdf400c4e294c5063dc5984502038dcbdc322994ed866ff7fa554204f963ff8da0629bbe436154963a601206d8815fb59b5d4a78258ca64999f04ab0961449d39aba8d3769921288a5b848306c01f717e3ae714f95b01f32cc597f5fa2305a01b0fd37811b5e1d631a22da7582cf7b76a7571b884a62f910d5b25e1002154ae7094ec1c8227612997030063ca856b89d94f7a4a71e7e3a0985207b7da0d2c3a34229ddd4ffe19b2f3862d39b3cd29ec3810fa63cf32afb7509fe60342e943bca45d292955f0dfabedefbf10bdbc604925db21523a07b9fc650c4098a3754c0c88aefa27354230046fe3afed816fcab71f123e991ab1d796fa574e1b5916cc883611e83e9a5537ccc8ba1093ae651f99c70c28c2cf753150feef30a4a766f0a571ea3feb211bfecc18de5b9abf624bc8298970f678b3536f50c0a98449c966fd4a84101600961de9587f5be63f3e6fda4711fe572b718acf58b6496077088b99e5d953f164185f53809a850726c59b4b3930be262922b8f1678dc1b147bc65f24e3a17014e9cbc21b9f86c6b3b90fdc7716798d3ec10801904660dd1376e46980d331bc9f0cd413883a18e9b13ec0a0fb0508d0c170e2d0a63ca6ff34dd43fc04a6670a0dd4a96983cd40afd3bee6e512d58e6975a5b60868ae8c99cde9c19b603eb0bf20252068185d0b7eb4a04364248e0610627281935d906a27a73bcbf52224208d69d95eb762bc06b378bbadc7d4ed6148c27bbac0ace8ca5769f6242d48824452bd4446bf4c92243a4cf368c27d8be022a467dfd3795f63263086e9baf68cdc41e7c4c2c953a0c34236698e22652516f0d1e57a4c8326899b84678946fb9972e4c7067c1eeabb23a9990afe5495d186292d9cb07cf08e4cad4ad56ce655162fca25c3e7c1c9778be3f496da7cfb822e1996a08f145b0ce9375cc702e37731a4b0f6d0d390a6488f9049146dfc4c2f448152502c06dfe1b9778ce298c250f93d8aec208d45ebc9171b810458b9a35bc1f0556fceb93e352c50b2e909ceef6096578cebb74f7998b4c84223a15e2f57e257de9f6029ee39d8881e8663e6a74e6cda0f430eb1ccbf64056479d98f7732cb5d8193d5d3c1611c3be10df7780da77ff6a7d076789ea7dad5322ffbb78afa9867f239e40d0f109cae71a1b4304c6c2d5377c76826d2b45e3c3c2c325aab1a756dec043d316ec78178d4a332128484a90096246146d8242fc381d56126b7be269fdc1b1c8c0dddc56e1f0814567238cf393aec89720ad547f8a36e92ee7eec2596555af9dcced40fcf808a05ae243c848e23f77e259c51cb4c2a43c5a755971717670f7dc91b0adf9600d2cd0c59e16e5ac2d746641088312be3e5964c565cdb9f1d17afa4bec8e52b9748647d9d45ccd5d92132ea58c5fcdf09c1c680e468eed51994ed4795d976c73f268c223261148264b2b2e864062389c6df275fecb01f2d4bf213b4ed72be99e2a875de35df3dd8312afc58a10210f0fac8f3094d9c10f49c5dd8de272a41a7bff3cb5bf53bbab98d13a1fd6a1a8f504eb506d8bf537d90c6f95bc5b63cdc06780822557fcca7de474bbca0ed757bfa34816a06ffe5cc6c7c50e40d2fa27c98baa603a9a8fb10e3e422da681f3118126187ca92", 0x1000, 0x59}], 0x50420, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=r1, @ANYBLOB=',smackfstransmute=qnx4\x00,\x00']) [ 1828.697097][ T1624] binder: 1621:1624 unknown command 1074029324 [ 1828.703480][ T1624] binder: 1621:1624 ioctl c0306201 200000c0 returned -22 16:27:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x5c00000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x1000000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x80, 0x0, &(0x7f0000000200)=[@release={0x40046306, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x5, 0x1, 0x4}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x1c, 0x34}}}, @enter_looper, @dead_binder_done, @request_death, @register_looper, @exit_looper, @free_buffer={0x40086303, r3}], 0x63, 0x0, &(0x7f0000000280)="8342ae0072b7a0a00e76ca2a24f2dbea2caf6f1670aa7ad613185e0ff7997703963d024fedf09d684151603317156cc734b25a1a5c59a250b2f75f1ac4454b5b26d58f850d1b0f2e474b8ccba300aa27126f81799a787c0eb2bff55aa7bd8bf50f758f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:27:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xb000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:13 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) close(r1) write(r0, &(0x7f0000000080)="1f", 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x4, &(0x7f0000000000)='\\$#\x00'}, 0x30) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f00000000c0)=ANY=[@ANYBLOB="9adb429ee7fc9a6d1367c2c4bb364a3ad352c0d7104495db5af913f26a02f2967629d4cbcc18a1af598078c670cb01e31884b454c3503111ddb36f7de2959f9c49524e9406099ab1253f148cbabaa997b57e91bf69ddaf629acb00b4af5c3e0061eeaad3c3991149a9706620d9c3c4112c399a849f9cdc316d816834551068da893f7f6c81ee0a08d89c0fd4a49b04c131387d955ae40d52af739bf07cbc523a3069e33f261b649fed1f110ce46bb9e2cce9f3031f3947a923b579b08f98b9c83831a20735"]) 16:27:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x1100000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xfdfdffff00000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x5) 16:27:13 executing program 2: ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f0000000000)={0x120000000, 0x1, "4c716e1053073715ba4454b8fbc2ee253343ffe869e61bfe92728d066476c6a1", 0x8, 0x3, 0xbf65, 0xfffffffffffffffa, 0x1, 0x1cc, 0x81, 0x9, [0x80b5, 0x20, 0x1f, 0x3ff]}) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000100)=ANY=[@ANYBLOB="00182d5334da520d81a418b76c813eb62e66ac685f26a0054ea85f1ba4da143037747ddb232dfd818674219c542044235c09d714b13c49a4666160fbfa626fc2b3a69f644aa24cc6cd0a585af4423fc73bf01f5a76a26481c8d554cd1763811872ea481f7cc867f4830db5071675b15b958501e68e2934d5e492fc2637099f741520e1805bad5028a261217f80559ba2cd9ed532dc20910c7933ffcaa8ad6a4b3594b9eb727c025a02d76ffeec5def0d04f84fafd3b2b2a79c71"]) 16:27:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xc000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x1200000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e87084026cedb1660a1f8995a63c4472650db8601725ebdfb2acb717607adf5fc458a2cb740be7066a206fa787a95d011ca32acca801e4fb748d593e280e7a1aef67e80d669b5b16321700853919b18a0235bc3cdbed2513c5b990fc77adac81bdd82e789a6f92960a1bec13786e3e66c95a6ad5ada2ec8f8f06ba31c52322027879b97542b28c07d6da8229d7e3110061e48d62937de6d3313e7dac38a846c34bdda591c27db910e7530b68e4d63"], 0x0, 0x0, 0x0}) 16:27:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0xff00000000000000, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:14 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000002c0), &(0x7f0000000300)=0x40) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) syz_mount_image$ufs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000080)="18baa29c616446f80547a7943593a8ed516430617fb1b1525c35d9438172d6c16107605fc15addfba0255eac04193fa93ef7f37b98679c18d69f439ff91edf6d84ed6311ba61e75c0561e28675f194a50aad1b959a0d1c1b956a6e8497f92ba345e29e46440da5", 0x67, 0x5}, {&(0x7f00000007c0)="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", 0x1000, 0x4}, {&(0x7f0000000100)="b00c0b25ff39113f1b89bfa84d026ae14071729b9ab3c45c93c6fd61f5b27833452cfad35a104386d2fb6e24cd637d8d182aabe8b8baf395ae65197a4eba432e64cb63f8c2e5336fd2f5e935c54a393bbf109201c417a46286d53e81cb805282367750d59e92d7009ef2089be9ab6c7aee48ae2ff02bebd119f1b2924696f396c5562cded9", 0x85, 0x4}], 0x2220020, &(0x7f0000000200)={[{'#,).'}, {}], [{@obj_role={'obj_role', 0x3d, '_'}}, {@seclabel}, {@smackfsroot}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@obj_type={'obj_type', 0x3d, 'qnx4\x00'}}, {@dont_appraise}, {@measure}, {@fowner_lt={'fowner<', r2}}]}) 16:27:14 executing program 2: ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, &(0x7f0000000040)={0x3, @sliced={0x5, [0x3, 0xf6e7, 0xa0, 0xfe00, 0x6, 0x7f, 0x9, 0x3f, 0x8, 0x8, 0x20, 0xd449, 0x7, 0x1000, 0x5, 0xff, 0x5, 0x5, 0xba7f, 0xcaf8, 0x6, 0x401, 0x4, 0x3, 0x9c, 0x6, 0x9, 0x81, 0x4, 0x22, 0xfffe, 0x2, 0x9, 0xfb, 0x8, 0xff, 0x0, 0x6, 0x8, 0x800, 0x4, 0x7, 0x7, 0x5a, 0x3ff, 0x6], 0x3}}) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)={'exec ', '\x00'}, 0x57) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000140)={0x6}) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) [ 1830.775033][ T1681] binder: 1678:1681 unknown command 1074300782 [ 1830.781356][ T1681] binder: 1678:1681 ioctl c0306201 200000c0 returned -22 16:27:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xd000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1831.005982][ T1691] binder: 1678:1691 unknown command 1074300782 [ 1831.012370][ T1691] binder: 1678:1691 ioctl c0306201 200000c0 returned -22 [ 1831.083184][ T1688] loop4: detected capacity change from 0 to 8 16:27:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private2, 0x56}) 16:27:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x2500000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:14 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="00d8520b47c5a99affe62ce16a2f0e516745867c9278ce979a407cfc4d15d3f148cbef94ccb79b498d81af94709302a3dfcca8e5"]) 16:27:15 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:27:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xe000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1831.672310][ T1714] binder: 1709:1714 unknown command 0 [ 1831.680254][ T1714] binder: 1709:1714 ioctl c0306201 20000600 returned -22 16:27:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000200)={{r0}, "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"}) read(r0, &(0x7f0000000040)=""/97, 0x61) 16:27:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x4c00000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x10000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:15 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000280)=ANY=[@ANYBLOB="59d7a648bcb9a60776306181040aab118dbf0f5384ec601623403563617136787675495c338c9483b92dbf461e4a5a105b59629d7a3a26966e66c7308995af3a2f54cf1357093dc150376be497947d"]) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'team_slave_1\x00'}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)="90a5988790ed882a3fc94596256663f6f4045e94b7239950fa48c5b4824c6de7674b1b977d38a37bc877453d2358f09076aefaf9402026e2a65b237987b597ede112c09f3feeb37887d994f3a3f9342dd55a9087aa0577fad7e58137b16cb87ce6e59a5cb6d1559bca518b995344252f0d2bc8dbe0292ff4155080531437c85f92bbcdd07f81871cf5e6aaa60b0d54a7df5b416b295beaec8ea7b27c711a4e696d0905dea6dd087f3e127f77627f51f1ea02f60a8c7fc11fd58f2b1cbacfc4", 0xbf}, {&(0x7f0000000140)="20ff1a1e41d324f2b75196bb15c8b0c7750221d1eee23f925ca9a2ae4c4a441e000dbff19821647eba84ea9ab9e88c35d23554670f68414c86c133ae21e808e83103cc29daaa993d7dbd1342a51bb2f26c06363b716967afdb90a00d5605511249e6535b3bc932ebb05bf5647bec4fe596f7cd4a1102e3496a23bf81dec3579648da43db04957acf1f5ce80f81994feb8e62fc53f257d48147", 0x99}], 0x2}, 0x4000) 16:27:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:15 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB="01"]) [ 1832.255540][ T1729] binder: 1728:1729 ioctl 5000940b 20000200 returned -22 [ 1832.343306][ T1735] binder: 1728:1735 ioctl 5000940b 20000200 returned -22 [ 1832.493016][ T1740] binder: 1734:1740 unknown command 0 [ 1832.500581][ T1740] binder: 1734:1740 ioctl c0306201 20000600 returned -22 16:27:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04630440b62ba8e5a11715cf2279fb974728f3444860d97f17296c207287d68c362086124c30801b717de72461599636a0a41f2aaca703898fc7c3e6c2ea4d7222aa7a2b8942a616dfb62f7ab278b0d2302a14c582e2c1150da4fc10415c9eed8f775787c496e6a74c9c0e3165bbe3771823ab52f7452416efc5b1870f86f73ecd90e90f"], 0x0, 0x0, 0x0}) 16:27:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x11000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x5c00000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:16 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) write(r0, &(0x7f00000000c0)="3bae960e1ec13ea3fda9a1f4ce75a1e933e7388792b0d878158858f143f711a6f1d31fbc9d1790eed4ec973fa2e0d6c4e4a3008b88e8675082581e47741cf126c4d275bf89376f8f9a32a3c440fd637b38512a353837699a74f36fb59c90fabbf99eb4eee230d7b96a3f955be680bfa07d436be8156bb796d8f2d6480c4c3410f097c6c0a5b1410e1096a761ab3e575ff9c2c2f4c321d5", 0x97) 16:27:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x12000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa, 0x2}) 16:27:16 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x7, 0x3, &(0x7f0000000200)=[{&(0x7f0000000080)="8b057f326dfce617115c6187077df001da5cf909e18810da424f11b621646bfca3aa463cf1171fcb49c069465e7e255e3f18c5611ec9a02d", 0x38, 0x1}, {&(0x7f00000000c0)="79bd9b04f5c1619693", 0x9, 0x4}, {&(0x7f0000000100)="975330e8471258246026574e2426d21a48d9b4d08a4dff851ec88ce65395971713ab05b72032e5a2ab9f96d71fca16cbc991f5b09e8a4fc7c03cce0cfebce28a356b23f9c69abe0cf0de7bd29cf9570c25efdf8a70cc0820f35e4466836b16c483abd5aa91d90d146f3f42f106c1527d14caaf1d94349a7f694062c341b5ee060597a9c2040e57593543f04cee37be3c698fce7368b9ca56d6f4c4ca4b2d89a6c75044a7daf5e51c0b111d44231c1d8a5171f2494974c974d9fd1ba09a3c5406456911697287247457f1bf20ee0d3ac399dfce643fa035b86f3754d4f8943c0b88f7596b62f73845ecfb64b9", 0xec, 0xffffff12}], 0x1000, &(0x7f0000000240)={[{@hash_rupasov}, {@balloc_hashed_reloc}, {@commit={'commit', 0x3d, 0x4}}, {@notail}, {@nolargeio}, {@balloc_test4}], [{@audit}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) [ 1833.400901][ T1762] binder: 1760:1762 unknown command 0 [ 1833.406725][ T1762] binder: 1760:1762 ioctl c0306201 20000600 returned -22 16:27:17 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f00000006c0)=ANY=[@ANYBLOB="f8be1cb0ece1caec34b3e2316f82"]) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000780)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000b00)={{0x5}, 'port0\x00', 0x22, 0x101801, 0x6, 0x1, 0x80, 0x3, 0x3, 0x0, 0x2, 0x80}) fcntl$setlease(r1, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fchown(r1, 0xee00, 0x0) fcntl$setlease(r1, 0x400, 0x2) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$hwrng(0xffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000200)={0xb, @raw_data="34e6e5888c7168f5829ae54e300187a8a35d0a417a38f2eb3c1c995884b69bb04d869282177dbdb85dc1f6739dec5d2da7d9ba6ea97bea794ab57579f38b2666bb9aea6df704fd73b16bf0c346dd836f563ac14229c7ad0ab4ed2c16ea96a0ad06aec37f7b5a526ebfe30f462bac55e3c479df6c294615288e2e8fb06290f85b052036e0347562e2d7ad97811987081e4352196024a953a25cb0b53853bbd0d7987f944bbe76c5694b8f473539264b841b23711ab6b177d9cb31765893499fab012e6d0c6ba61b0a"}) fchown(0xffffffffffffffff, r2, 0x0) r3 = syz_mount_image$qnx6(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x6, 0x3, &(0x7f0000000600)=[{&(0x7f0000000440)="6966f6aef5f9b8b6cc44094ce5f29bf87ce410d22d7079efc4e0dfac9a37124aa365471463cd21d6cce1d0767cabfb46251eead925bf73bf4cb8c759db12", 0x3e, 0x5}, {&(0x7f0000000480)="4d15dbcfeb9294c4fd991021358cd294cac8201b8450175b08a0f6a974ddc7dda062e6a30c4037dc524bb8071b9f84d0d21bb13deb73e3fafbcfc99696e70c71cf8e674316c0a8a461490633a0932852d5d700744206a50c308c217533e8286d319059fe036b09c472f652e2319dcbd4613f28413b364d0825c63d620431e9449d036158b936a6c97e590d8a40a1", 0x8e, 0xfffffffc}, {&(0x7f00000005c0)="5474d7a9d052008c7fa8d7814a1fd72c83071495e0828f7d0758a49de759e5", 0x1f, 0x5}], 0x44019, &(0x7f0000000640)={[{'@:*]'}, {'autocell'}, {'/dev/hwrng\x00'}, {}, {'^MAY_EXEC'}], [{@seclabel}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) write$binfmt_elf64(r3, &(0x7f00000007c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3f, 0x7, 0x80, 0xffffffffffffffff, 0x0, 0x6, 0x2, 0xfe, 0x40, 0x40, 0x7, 0x9, 0x38, 0x2, 0x2, 0x100, 0x7}, [{0x7, 0x4, 0x3, 0xffff, 0x5, 0xffff, 0x4, 0x4}], "70e99a0bb7cb21b9d15d8cf03994444e6e6ce88b31cd9ea6a98c4b4611d2cc9311bb4a2e01cf9f90edbeb6034d121af948bc862773b82ac23176aae021058836827392fc5a9f932a2c40064371a333e51c920b79948fb01b93419af717a54672f124f00435424ccdc7bd85ae0e924a3bd3e6051cc3ac36340b543b1ee841f1e4683372ec8d9d6a5618b2ca817951f1ddac7fc6484fed5326d60136cac180abc6776cdfb08b8cab3c2153671d629502639c0897a4a2f1f16063aa80d464", ['\x00', '\x00']}, 0x335) syz_mount_image$afs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000080)="bd76f2698a5ef243e40f2726605a7217f9939a93ace7b87e72cc1ca9c05bdc8f28016800040d3bdae8b0663538e65e56246dddf25156080dbd33b3e9", 0x3c, 0xfffffffb}], 0x4000, &(0x7f0000000100)={[{@source={'source', 0x3d, 'qnx4\x00'}}, {@flock_local}, {}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'qnx4\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ')$/'}}, {@subj_role={'subj_role', 0x3d, '\xa2#**'}}, {@pcr={'pcr', 0x3d, 0xe}}, {@measure}, {@euid_lt={'euid<', r2}}, {@uid_lt={'uid<', 0xee01}}, {@euid_lt={'euid<', 0xee01}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}) r4 = signalfd(r3, &(0x7f0000000700)={[0xffffffff]}, 0x8) bind$802154_dgram(r4, &(0x7f0000000740)={0x24, @none={0x0, 0x3}}, 0x14) dup2(0xffffffffffffffff, r0) 16:27:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xfdfdffff00000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x25000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1833.814048][ T1768] loop4: detected capacity change from 0 to 264192 16:27:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x2}], 0x98, 0x0, &(0x7f0000000200)="1d1a00f54aaca6aba83261f83d46391d78716e1a901c2d82c941119b8f84c86fb5513259b29ab74d3d31084d818975178db8c98552cb0e0353072a2cc31182ba51e48aed1903b31b1637142917dcee456ab6bd259337fed639c4bfc014c21486847f7cb530b796997397491601d6308a2ee36d6c51819fed0f91d745cc83ebfd3cf87e4b4810671e9b07cd42880f7995d4b5c624233bb299"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="04621440314502fe4ed336f29ba37c60b9c681d5af9f0cf5c31afe6d171deca060d30627c7a2732c7d91d835a3f148a17eacbf7127d4788f6eada7983595d5368249b04daef8ef44f9a635fafacd74b3fc"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x1) 16:27:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0xff00000000000000, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:17 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000280)={[{'('}, {'/proc/slabinfo\x00'}, {}, {'permit_directio'}], [{@permit_directio}, {@fsmagic={'fsmagic', 0x3d, 0x1}}]}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fchown(r1, 0xee00, 0x0) fcntl$setlease(r1, 0x400, 0x2) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) fchown(r3, 0xee00, 0x0) fcntl$setlease(r3, 0x400, 0x2) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x1400, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x1, r2}, {0x2, 0x2, 0xee01}, {0x2, 0x4, r4}], {0x4, 0x5}, [{0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x2, r6}, {0x8, 0x1, r7}, {0x8, 0x0, 0xee01}], {0x10, 0x3}}, 0x5c, 0xf4ddc91815c72d36) 16:27:17 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="d42f622de4f2ef5ac50b1e2335061c8b4d2d2734c09dd924fca9710aa3a494760197e17e655cf9"]) [ 1834.291208][ T1791] binder: BC_ACQUIRE_RESULT not supported [ 1834.297413][ T1791] binder: 1788:1791 ioctl c0306201 20000600 returned -22 16:27:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x5c000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1834.473181][ T1794] binder: 1793:1794 unknown command 1075077636 [ 1834.479912][ T1794] binder: 1793:1794 ioctl c0306201 20000040 returned -22 [ 1834.590349][ T1795] binder: 1793:1795 unknown command 1075077636 [ 1834.596903][ T1795] binder: 1793:1795 ioctl c0306201 20000040 returned -22 16:27:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x44, 0x0, &(0x7f0000001200)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/4096, 0x1000, 0x0, 0x23}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x2, 0x19}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) 16:27:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xfdfdffff, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:18 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000040)='qnx4\x00', &(0x7f0000000080)='qnx4\x00', &(0x7f00000000c0)='(\xd4\x00', &(0x7f0000000100)='qnx4\x00', &(0x7f0000000140)='$\x00', &(0x7f0000000180)='\xef%(!\\.\x00', &(0x7f00000001c0)='!\x00'], &(0x7f0000000280)=[&(0x7f0000000240)='\x00'], 0x1000) [ 1835.417339][ T1815] binder: 1813:1815 unknown command 0 [ 1835.423244][ T1815] binder: 1813:1815 ioctl c0306201 20000600 returned -22 16:27:19 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x12, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x41ccc16b4b1f1ce1) [ 1835.663108][ T1825] binder: 1817:1825 ioctl c0306201 20000000 returned -14 16:27:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40046305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xff000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046304403ed7fdf4cb5341a6637e9e2f03aa0984cbe26102f864b9036c372c9b5dc59693282e21e49281b387a768629d8098"], 0x0, 0x0, 0x0}) ioctl$KVM_DIRTY_TLB(r0, 0x400caeaa, &(0x7f0000000040)={0xffffffffe397dde4, 0x6}) 16:27:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:19 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fchown(r1, 0xee00, 0x0) fcntl$setlease(r1, 0x400, 0x2) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) fchown(r3, 0xee00, 0x0) fcntl$setlease(r3, 0x400, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000005c0)={{}, {0x1, 0x1}, [{0x2, 0x1}, {}, {0x2, 0x4, 0xee00}, {0x2, 0x0, 0xee00}, {0x2, 0x6}, {0x2, 0x4, r4}, {0x2, 0x0, r2}, {0x2, 0x0, r4}, {0x2, 0x5, r5}, {0x2, 0x5}], {}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x74, 0x1) [ 1836.204484][ T1833] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1836.250344][ T1836] binder: 1832:1836 unknown command 0 [ 1836.256379][ T1836] binder: 1832:1836 ioctl c0306201 20000600 returned -22 [ 1836.350248][ T1842] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1836.429228][ T1846] binder: 1837:1846 ioctl 400caeaa 20000040 returned -22 [ 1836.550567][ T1849] binder: 1841:1849 ioctl c0306201 20000000 returned -14 16:27:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:20 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0x0, 0xf, &(0x7f0000000740), 0x8001, &(0x7f0000000180)=ANY=[@ANYBLOB="64654c636f60746578743d73797361646d5f752c61756469742c670000000078743d7506006f446e66693a174f1e8caa77100ddbf08bc3438e121eba991756495b8dc112c541f636430b87c1534bb950eab914adce6b89452ac74cf62ad20ec4d768043be393c9648b46323cfd7ee6059033891650b8dd20310b03a1a33e863add16108d178f7388f03d7039028b910bbad2ebcb646babeab7cc919998e37ec699e9e07e939ff7b0cfd3ed79f46f19d7f56128eb56ff1450f541b77978b14bfbfe2f98f91110bcd6f8c2cf79bca6e511df8d57fcaf984542d9624923e5a638c96f4b14286ce4f330e10d629cf453d016278381ffcdb86bd45699aa7b7caa17531079188dc165"]) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x260800, 0xa) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='io.stat\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000000c0)='qnx4\x00', &(0x7f0000000100)='./file0\x00', r2) 16:27:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xfffffdfd, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="046304403686b4d59c7e5468048948991fdb89018c4b9a21f026607fb6d7b5baca80efae8c74d18a0b5a1dd4cae1b8b25b9a1b707959f702aaf99a2dcdbeae37a6753d2afe842a9bc5dd09eb3942fd7a97238a7a01adc9bd29aa65ea36aad36ab707627ce74462f5a31349cc49e4728ab8163249cf9dbc143e62ee7413797bf92e1d783af1fbe4fadab793a3a33d11ac8fe0237b4ee34da57da0800c6d1d56c8492abd962a951d45496f1f5080a154ab58c4bdc325e10d8ecafb058113fcab919161e3758be5d565f463ca5d58b209704a916a2d52bb16fba10d23aec530df5a2dd56933e3207afd009e6cda3f8dad408b00"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) close(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r1, 0xc04c5609, &(0x7f0000000040)={0x0, 0x6, 0x4, 0x800, 0x8, {0x77359400}, {0x2, 0x2, 0x4e, 0xf2, 0x3, 0x0, "765d59cc"}, 0x1, 0x2, @userptr, 0x8}) 16:27:20 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fchown(r1, 0xee00, 0x0) fcntl$setlease(r1, 0x400, 0x2) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) fchown(r3, 0xee00, 0x0) fcntl$setlease(r3, 0x400, 0x2) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {0x1, 0x5}, [{0x2, 0x2}, {0x2, 0x1, r0}, {0x2, 0x2, r2}, {0x2, 0x4, 0xee00}, {0x2, 0x4, r4}, {0x2, 0x0, r5}], {0x4, 0x3}, [{0x8, 0x5, 0xee01}, {}, {0x8, 0x1}, {0x8, 0x1, 0xee00}], {0x10, 0x4}, {0x20, 0x2}}, 0x74, 0x1) [ 1837.137196][ T1856] binder: 1854:1856 unknown command 0 [ 1837.143033][ T1856] binder: 1854:1856 ioctl c0306201 20000600 returned -22 16:27:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1837.519597][ T1875] binder: 1865:1875 ioctl c0306201 20000000 returned -14 16:27:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xfffffe00, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:21 executing program 2: setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000004c0)=0x97d, 0x4) r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040)={0x18d001, 0x6, 0x1}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x9, 0x74, "c529a269f4ef388c910eaa98d6153b607d59cf7ae68eca222468b74f15cfda5f4cb298c79ab35a47bae362a984d0806d8aa4b78914f9864ee80e3f0813f1846802e46be0fca9fc78c7c65d862d1f657acd4d2179efb1f1cfb405bb165fb6bfb7ad67c87bd5f7f789f9ad5a1fa08defce54b1f27a"}, 0x7c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x8}, 0x8) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000580)="9452f680d857fcd5e71e7547a7d2cbb2e042d3658c647dca95a78c20bd6064a9079d495921497f305b6965901be6f27cd250207a872fde5df5bbab81ba1677dd78c57d6b1a88c73aa01bb5623001415e133fa4302ff1ee9eb0695a7210d239071b642ced3440ed7deffc5e088c1bae25d21be8", 0x73}, {&(0x7f0000000600)="567e04072689171c1041463a46d8b3c3c1772e4ee1f0947c6d3d3a9ea68854413e69fd70ab64b8187231c026e144295ad7d0181603df8e5aca49078f652e73221a5c1399a68e4cad9c8c7c0d67d3a9a62999b1592451b36ec68ea3a6a3d708707392728611cd830e89151fcb8946f34ab7e999c6445d90afcb3dcf926178695acaff83ea6e", 0x85}, {&(0x7f00000006c0)="85358c89ff5536a0cc87dbcb1f35945e69059c905dafdffa97c1232131b6a810b15061e763f5377e5ce441a5f525011a2ceff77268a9b7c7f040f2b5f72963eed3214de277662525abacded662827e264180521dcf815caa067452", 0x5b}], 0x3) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000140)='./file0/file0\x00', 0xfffffff8, 0x0, &(0x7f0000000740), 0x88001, &(0x7f0000000180)={[{'qW\x00\x00\x00\xc3^\x06E\b3\x98Z\x014\xb5\x8az@\fX\xc5\x1c&\xf4\r*\xa4\xc8N\xc2\'{f\xdcR\xd1SL2\xa1j6\x98\x0e\xe8\xef\xc5\x15d\xa5\xa3\xe0\x81\xe3d\x9f(|ATn\xce\x98\xd73L\xbd9\xeb\x1c\x9f\x88\x06\xe0\x82W\xa5J6\xac\xedY\xa0\x00\xca\xec\x81\xcb\f}\xba\x92\xe6\x82V\xd5\xea^\xcd\xed\xe1\x92\x18\x9d\xd1\x97#\xca@\x0f\xc3\x8f\\z\r26\xfclf\xd2\x84 \xc9\xbf\xef\x99.\x04\x06\x9f\x86\x04\xb3\xd6\x87\'N\xe1\x03\"\x1e\xed\x1e/D\xd1zC\xf8!0b\xd63p\xda9\xa2\xf1\xcd%\x84ktt\t\'1\xe5\xe6y\xc8\xd1~m'}, {'^,\x91\x16(\x91\x00\x01\x00\x00Vv\b\x99|\x03\x00\xba\xb0\xc7\xca\xa1\x89Y\xa0\xfe\xe2\x9d\x02\x19\xd6o0\xbd\x00\x003^\t\xd1\xe0<\x93\x8c\xff\xcc\xe3\'\xdcwK\xafk\xf9\x97\x8eeJ\xdf\xa8p\xaa\xe6\xf9\\\xb0x4\xaf\x02\x89w\r>.\x13\xb4\x92\xbdl\x9a\xab\xee32\xbf\xda\x1b\xedc\xc4\x84AR\xfd]p\xd7\xe0\xady\bd*g\xbdL\x8d\x92\x19\x1a\xdb\xce\x8f\x86\xb62\xee\a\'\xb4X\xdcD>\x9b\f\xe4A\xcf\xbdnn\xfdZ{0+\xd6\x9a\x96`\xc3\x1b\x98\x91*\xab\xfb\xba\x93U2d\xfb\x86\x00Q9Y\vX\"\xa7\xdfN\x93\xf5\xa2\x18\x8b\xff\x05EN\n\xf5w\xc1\xcc\x9ai9h&KP\xbbT\x8a\xb8\x9e\xfb\xe2\xdf\x99\x99\x88*H3x\xfc8s\xaa\xb0%\xff\xaf\xfb\xe8\xf5Q\x01\x00\xe0k\xa3\xb0\xff\xa9\a\x00{p\xa5\x9a\x83|\x9dp\xd1?\xe9{n\x93\xe8\xb9G6\xef\x81:}W\x10\x1bHQ\a\xb3\x84\x0f\x05\x12xzq`\xe2\xe7\xd6G\xdb\x86\x91$\x18\xe91\xe8\'\x0e\xe3\xdd\xa9\xa6\x9c\xd9\x81\xc3\xc8\x82\x8a\xbf\xcfa\x05\x0f\xcb\x1d\xff\xd8V\xe8\xac\xd3\x00\b\xef\xef\xeex\x97\"\xce:\xd6\"\x83\x9c\xf6Np\xc7\x7fn\x88kd\xd5\xbf\'\x12\x13\x9eu\v\x82\xaeDUqL2\"\x81\x80\xda5$\x90\x10\x18[+\xf8\xde\xfaF8.\xd4\x99uPzVE\x838\xbay\x14c\xd0\x18\xf2\xc6\xa8$\xba\xf0\xa9 \xb3\xaf\a,\x00+\xbd<\xcc\xe6F\xe1\xc4i\xbd\x86\x15\xcfw\x80\x1cyU\xaeb\xc0\xb7\x0fY\x8f\xc3h|<\ae\xba\xa0\xa2\xb8\xe8\xa9\xb6b\x9a9\xf9W\x80\xcd\x1c\xfe\x95h\xd8.\xe4\x88\xbeT\x1b\x8b\x97|\xc8\x94\x94\xa6\x87W\xfet`\x9aC\xfd\x9c`\v\xdf\xaa\x1a\xadjVR\xf9!\xf6\xd2_d\x88\x9c\x97:>]\xb8\vy\xccS\xea\xa1\xda\n\x92=U\bB\v\xfa*\x94\x96J\x92\x01s\xb0\x97GO\xae]\x05\xe8\xfe\xd4e8v\x1a\xa0D\xee\xa0\xbcK\xe1\xb2\xdc3d\xc0\xef\xf9!\x1fmk\bg\xee\x96\x97B\xd1\x89\xf8>\xe1\xb7\x155\xad\xe0\xbe!Nd\x01\x11\x9b\xdc\xc0\x84U\xc2\x87CE&\xe0\x9f~\x7fo\xac+\xb9y3;C\xf0!\xa2\xfe+\xa7Xf\x91T\x9b\x97TY\xbc\xe1H\xeeY'}, {':\r['}, {'qnx4\x00'}, {'$+'}, {':[#,^'}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {}, [], {}, [{}, {0x8, 0x3}], {0x10, 0x4}}, 0x34, 0x0) lchown(&(0x7f0000000340)='./bus\x00', r3, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xee00, r5, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r6 = signalfd4(r1, &(0x7f0000000740)={[0x7ff, 0x1]}, 0x8, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000780)={0x0, 0x4}, 0x8) 16:27:21 executing program 4: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) shutdown(r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0245629, &(0x7f0000000040)={0x0, 0x1, 0x7fff, '\x00', &(0x7f0000000000)=0x1}) preadv2(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000000180)=""/231, 0xe7}, {&(0x7f0000000280)=""/194, 0xc2}, {&(0x7f0000000380)=""/174, 0xae}], 0x4, 0x20, 0x0, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f00000005c0)={0x0, 0x81, 0x9, &(0x7f0000000500)=0x6}) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000480)={[{'^[}'}, {'/proc/diskstats\x00'}, {'qnx4\x00'}, {'/proc/diskstats\x00'}, {'qnx4\x00'}, {}, {'qnx4\x00'}, {'*!,'}, {'+^.)%/],:'}]}) 16:27:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001200)={0x7c, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x1}, @increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x2, 0x0, 0x9}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x1, 0x2, 0x29}}, &(0x7f0000000100)={0x0, 0x1c, 0x34}}}], 0x1000, 0x0, &(0x7f0000000200)="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"}) preadv(r2, &(0x7f0000001500)=[{&(0x7f0000001240)=""/29, 0x1d}, {&(0x7f0000001280)=""/223, 0xdf}, {&(0x7f0000001380)=""/23, 0x17}, {&(0x7f00000013c0)=""/31, 0x1f}, {&(0x7f0000001400)=""/160, 0xa0}, {&(0x7f00000014c0)=""/32, 0x20}], 0x6, 0x80000001, 0x95) 16:27:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1837.823697][ T1879] binder: 1878:1879 unknown command 0 [ 1837.829281][ T1879] binder: 1878:1879 ioctl c0306201 20000600 returned -22 16:27:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x1000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1838.376479][ T1890] binder: 1885:1890 ioctl c0306201 20000000 returned -14 16:27:22 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x200a41a, &(0x7f0000000040)={[], [{@seclabel}, {@obj_role={'obj_role', 0x3d, '#**]\''}}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) 16:27:22 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) r2 = openat$cachefiles(0xffffff9c, &(0x7f00000002c0), 0xa0080, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f00000005c0)={@id, 0x21, 0x0, '\x00', @c}) io_submit(0x0, 0x4, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x6, 0x0, r0, &(0x7f0000000040)="e9a8e171f2da6d9dd67d7cff59c119a1655be3466df76bf47224c6cd8b7c27aaea14dc35039b0a66c05134aa55c5e29cd708cc5954349fb3d43ee401b400465d03e2b43acfbdfc2fc26f44576f0fdfdba688a985888749642680058282aff15124ee4052733de6cb513ffb93", 0x6c, 0x5, 0x0, 0x1, r1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0xac, 0xffffffffffffffff, &(0x7f0000000100)="5f83bdabf86406e7dca2ea6c4096e5481875c612a616e1a6596c2569bb694c618612342e4947d3c3bd52b4029532e13f28e67be6cfbe1fdba0d46abf8950cdf4d53487d0536e54edc25d734afad63a2df21bdce0642819c4b2dcc9ecfad0186d9f265197acb07bea8f3b274e4c5c761e5861fa10ee1abcb5558c5ade", 0x7c, 0x9}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f00000001c0)="2770ec7bc8e8507dcc3232654766dd8c78ce0c525a57a172682480a41f040b37646af3f52b12294e71545ab2bb6b7b1eb986b45f983be44caac6d9afd47a9ff2faf4c62d14bf2b5b83d92b4717bb90b77ca3dbbeef3c572fd5b35ed97135db3b7deac187af95336ea66143e1a694c32f490ae3c58fce1005d12cc51d2a9e9709e6a0b2d61e01f70771e23aae026130e2043ec92ed0421ee2fb812625769e8d75b538cc0cacce57afcbf2ed2c5a322b5efe3a7b3d4ffd1b9e61d4aa069f2e28d2707cb65b5413d41142b99d5750", 0xcd, 0x400, 0x0, 0x2, r2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xd3a, 0xffffffffffffffff, &(0x7f0000000340)="0a600ab18bf7a8e905571968eb47ba991b17d0964c98a1056476437e24d87ad3a9c6e9955a7c794669b32245adf268ca29208cd8a25d36fb44a4a010bf2a2ec9ea969c6c63f06760a854b75b47daf8b30decc5ebec72db7c6f511cc020daabe90ba4dbaf51edca32297d91802c5e5d0c7ccad9e6f5c0a7ed4c707dbaa06eb1801112243011410094dbd346f66a87207338223aac5b5441250f0e8deec78889605635e54cba6e9a83536d38b5d97863efa853e2cc4c08f6c9e78feef11895b74ef24cb9f816a486980ef4766e7a7a211f80a36aa51505755be8f6f2395bed8608cb436e31f8b1a45b3868d64265", 0xed, 0x3, 0x0, 0x2}]) dup2(0xffffffffffffffff, r4) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYRES32=0x0]) splice(r0, &(0x7f00000004c0)=0x3, r1, &(0x7f0000000500)=0x4, 0x80000000, 0xe) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000640)=0x2) 16:27:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1838.825413][ T1903] binder: 1900:1903 unknown command 0 [ 1838.830911][ T1903] binder: 1900:1903 ioctl c0306201 20000600 returned -22 16:27:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xffffffffffffff5a, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x800) 16:27:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xfeffff00000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1839.247161][ T1910] binder: 1904:1910 ioctl c0306201 20000000 returned -14 16:27:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x100000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x800) r1 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) [ 1839.680558][ T1923] binder: BC_ATTEMPT_ACQUIRE not supported [ 1839.686738][ T1923] binder: 1921:1923 ioctl c0306201 20000600 returned -22 16:27:23 executing program 2: ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x8000) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000980)=0x1) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000040)='./file0\x00', 0x0, 0xa, &(0x7f0000000680)=[{&(0x7f0000000080)="dcdf99530f4bec911b2dffd8ea9aba60b57bdfbdda3b779b279789de847c4003c47872fc864982434114d17d6d27aef08631359ba12d043cdb68dbde5c238808ee06b517e5aefbdb3eee3e17218c3ad5a9279ca6c54c2b7e3ab8b378167824bea3eeacc596eacfd5774e98989c1ecd5e1e0e70a8", 0x74}, {&(0x7f00000003c0)="237cc74cebe744ab528db1e4005b662dbff0ee885ded3e7619606f9c86b5182fc87212ea855196ca5fef", 0x2a, 0x9}, {&(0x7f0000000140)="28406a66dca5962224c7c614256f7e88aea9c0f919342cf6fbc1126f7c0eb9901761c628f44510ed24373c181e596fbc53a08077fc8b6f3fb145426ce718f5db59b588dc22d410a92335566e2621e2b09074c55d0bb5fc8bd187922264b52947b7eb951ddade71bc02fb57399d7ba1bfb5ea81bf190e", 0x76, 0x2}, {&(0x7f00000001c0)="8bdb2cb1d2cb6b6dd61f72e36cc0bf40df728f610ba983c7d3e1de5f264828afe24a33cf6ef45fc1604ff78b164d7ff5ad374cd195919ed124aa", 0x3a, 0xca5}, {&(0x7f0000000200)="d45c2697b708d12dc0f9fc6e2ac7816ace65bcdb62bf1033dbf42be9893fc80b42b8b4c470d2adefef7696500bcd184a81de542fcd4f9b166f3960de886fe7aab189051d7620f25b5b58aa1d0002000000000000309f6d50b71a8d76d833e580ccb3cbb1a51d5c05a8bebc8ffcf00f9652da4e5dee9cbfdadfc98a43f20d63d99b81c80cd0526306811ada920fdfb0ed888a9ffbd346b597fbd505215b00000000e05472eddc9f722d2857df5f4d4415a938845308aa98051b2b29", 0xbb, 0x42}, {&(0x7f0000000880)="3b0d68d2b834f60e838c161aa1b8193c8ebcd95fd465b34ff56e4392e9f67b660887495e1e638050b8534cd6c0f79c06d5eb691b6da6b1123b02dbb3fea23601c605d35a23d1235d7ce1699d0fe3a81329d336d005ab93b6cedf426028a9a133778a5799125f706bed4db83b08c9013707b2e67f6c5d9e444192fe4ee5230b586ba8b777f5cc5ce9e77775c0fcbd184872dd936fb68eddf1ef379e74daaaccf732066a5996727ecd7c607ea9b5a58021afc5ab87355bf9ac29a95163b5762ef835cb879ca1702afde1277df724", 0xcd, 0xb}, {&(0x7f00000007c0)="cf67b37b4a9b93bf0672767796b4a2b4989da6e08d090e3d2edd657b4fc9bc08812ae5ba65f6d43c11037805cca5038bfb2e716c4bc4863aa7c33c7bbfad15251b0e035fe5cba27ddaed4d37df0eb6428bd432a6ba65bd4fdbd9f77a0a5e947b0089dae757a5d86f762b653819efb5ab4c86422081c742e6db4d6a9c48fdb5bf3a7c3ffe6af3a597e6f99fd68388fd3e787057f22401cbba5c24c91478ae9c7afa1cfdfba3d4a6f7efb633198112c4429c0181", 0xb3, 0x7}, {&(0x7f0000000440)="9358d1f140c83679ff0a376bded17b7792ed6572a7432cb3fbb7c534bebb44d59d7346c54d0caf39a8933c687a517f329bb6a291c5eb73285e414e09ab70741556ea7de13a0f53b5201d262f678b6186ff3dfdccec524b7b8d6394e084f53003eb15", 0x62, 0x480000}, {&(0x7f00000004c0)="1d2355cf51430b5468b3fc08b970a16dda96862eb6423a454ec15c070d456bc061696af0f35cb59bfecbac047a42f3d3410aa5fc47d1e2f6d5014eb26dec0c566271f3dfbb6c23699c19", 0x4a, 0xa2}, {&(0x7f0000000580)="041c94f3ba4b72552da3d09da060177d3b53170ea39bd30b6dd7c7c8cf70bed91049582fac85a6d6c0804cfbb20ec447be10c1744511fa20305f883ef5505d2f603a147f81e46be3b492f343cd017f86836b3df1d60c6cf1830e0e1f542a47ea22e559614248a8f324d7007a706c8cf7523d6f2c7abc5c8f3c4fc334f581b6df3b0bfb8a084415e1e16cf02b45841279fb5fb509e1628ac7a702f6de1dcc6e614df01aaba37dfe8e4d574162371686bb36d7463992522b5043dd88412ec5367ea2871411fffc69cbe7fbd1c9167bcafeb90d", 0xd2, 0x6}], 0x8001, &(0x7f0000000780)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000009c0)=0x8000000) syz_mount_image$romfs(&(0x7f0000000100), &(0x7f00000002c0)='./file0\x00', 0x52, 0x2, &(0x7f0000000400)=[{&(0x7f0000000300)="c42771e0d7a80e4ae78b7bfa0d715deb7e66fcb9bf", 0x15, 0x2}, {&(0x7f0000000340)="2dca2d684a0ba9c8a3438cf482c4cf36e8db2060160ee812b5c4ecc23f2635206caeefad117523f882d91816a1c240a8927c86e4fab0c4878ebbfbee89f0750a94dae14ad2e06dee24f93d3772553a4baa167c71cda8f13beaa902", 0x5b, 0x80000000}], 0x40, &(0x7f0000000700)={[{'{'}, {'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}, {'qnx4\x00'}], [{@obj_type={'obj_type', 0x3d, 'qnx4\x00'}}, {@dont_measure}, {@dont_appraise}, {@hash}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'root'}}]}) 16:27:23 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB]) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = openat$full(0xffffff9c, &(0x7f0000000140), 0x8000, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) fchown(r3, 0xee00, 0x0) fcntl$setlease(r3, 0x400, 0x2) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x1, 0x4}, [{0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x0, r4}], {0x4, 0x3}, [{0x8, 0x6, r6}, {0x8, 0x6, r7}, {0x8, 0x4, 0xee00}], {0x10, 0x6}, {0x20, 0x4}}, 0x4c, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f00000005c0)="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") splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x4) statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x2, &(0x7f0000000040)) 16:27:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1840.028499][ T1927] binder: 1925:1927 ioctl c0306201 20000000 returned -14 [ 1840.062439][ T1928] binder: 1925:1928 ioctl c0306201 20000000 returned -14 16:27:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x200000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x2f, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0xee01) fchown(r0, r1, r3) [ 1840.561709][ T1946] binder: 1941:1946 unknown command 0 [ 1840.567526][ T1946] binder: 1941:1946 ioctl c0306201 20000600 returned -22 16:27:24 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) fchown(0xffffffffffffffff, 0xee00, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000080)) fchown(r3, 0xee00, 0x0) fcntl$setlease(r3, 0x400, 0x2) fstat(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000240)='./file0\x00', 0x100, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000002800)=ANY=[@ANYBLOB="0200040001f701010000000000a6c4c2000004", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=r2, @ANYBLOB="02000000", @ANYRES32, @ANYBLOB="02000000", @ANYRES32=r4, @ANYBLOB="040002000000000008000700", @ANYRES32=r5, @ANYBLOB="080000001057feafefe9cef6b5dab7660a574e1ae35a0ff832b197463f783a2e99d917d7f4f169d68f0991f931453fb6e2be10fbfd30c76eb443380e5ea2e2fbae3d36037068ab65cb3ae057abd1e092be714f32fd1e19772f0b4bd081d64a59dc9fb94f9368c07c12a1d3285579907d931112dd1626730a533669af83dfc557cf2fa0eba137b7794f654845f19ae89cc84e802b83524fed12b37670c60afc6975dab49cfe856f597fa44997b882eca80d75392a7e2efcd803c644e87829f746f204cf6a", @ANYRES32=r6, @ANYBLOB="08000200", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="08000500", @ANYRES32=0x0, @ANYBLOB="10000300000000002000010000000000"], 0x7c, 0x3) 16:27:24 executing program 4: accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2c, 0x9, r0, 0xb, r1}, 0x10) 16:27:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1840.947906][ T1952] binder: 1949:1952 ioctl c0306201 20000000 returned -14 16:27:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x300000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1841.129709][ T1956] binder: 1954:1956 unknown command 0 [ 1841.135566][ T1956] binder: 1954:1956 ioctl c0306201 200000c0 returned -22 [ 1841.253751][ T1956] binder: 1954:1956 unknown command 0 [ 1841.259258][ T1956] binder: 1954:1956 ioctl c0306201 200000c0 returned -22 16:27:25 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x19001, &(0x7f0000000780)) 16:27:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1841.474526][ T1965] binder: 1963:1965 unknown command 0 [ 1841.480143][ T1965] binder: 1963:1965 ioctl c0306201 20000600 returned -22 16:27:25 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) execveat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000040)='qnx4\x00', &(0x7f0000000080)='#*#@\x00'], &(0x7f00000002c0)=[&(0x7f0000000100)='qnx4\x00', &(0x7f0000000140)='qnx4\x00', &(0x7f0000000180)='qnx4\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x1c#\x00', &(0x7f0000000240)='|]\x00', &(0x7f0000000280)='qnx4\x00'], 0x1000) r1 = openat$adsp1(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r1, 0x8010500c, &(0x7f0000000340)) 16:27:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f00000002c0)=[@increfs_done], 0x5, 0x0, &(0x7f0000000300)="859657492a"}) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x60, 0x0, &(0x7f0000000140)=[@increfs_done, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000040)={@flat=@binder={0x73622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x400}], 0x55, 0x0, &(0x7f0000000200)="e52c3e20c4508f6ba9666674259b08c74c3dc016918bcb46a966283c3ac4b02c0db497d7ce18a173a761fd59fe73a4d7a05fca67d07bdf70edb067ed9ccbbceef4455f398f125f4ba2207285062a6a43ffe96cfe94"}) 16:27:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x400000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1841.938316][ T1976] binder: 1971:1976 ioctl c0306201 20000000 returned -14 16:27:25 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = openat$pfkey(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) connect(r0, &(0x7f0000000080)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) [ 1842.135401][ T1992] binder: 1988:1992 unknown command 0 [ 1842.140992][ T1992] binder: 1988:1992 ioctl c0306201 20000600 returned -22 16:27:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0xb, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x500000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:26 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="004baa8cc3105baf217bb41296d8cf58cd68e398e3c5bd5fd0fa553681b5874d1bc8453ff5a2022decf7a302cba433c646628ee59d1aff685cefcb17167869703611e32644e32e022f72f3a8b5c7cc880bb23b78fb5874b1dfdf0f9c29a5c2d95883c0a950de7e457acb7f43da2d281825b358b2416ed1d238ab9d6efd1dc4ccef0c8ee00c5304e430aee044ad686b996133ff5a3929f7d5a3c46e6ca6b8b4af019a65f938b482d85500"]) 16:27:26 executing program 2: setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x20, 0x523e, 0x6, 0x80000000, 0x1}, 0x14) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) [ 1842.851462][ T2004] binder: 2002:2004 ioctl c0306201 20000000 returned -14 16:27:26 executing program 0: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='skb_copy_datagram_iovec\x00'}, 0x10) flock(r0, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:27:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1843.105040][ T2007] binder: 2005:2007 unknown command 0 [ 1843.110582][ T2007] binder: 2005:2007 ioctl c0306201 20000600 returned -22 16:27:27 executing program 4: sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x18, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0x10) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000080)='./file0/file0\x00', 0x800, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="09031ccf09f12c315c95322b00"]) 16:27:27 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x600000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:27 executing program 2: ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x807c6406, &(0x7f0000000000)=""/241) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) [ 1843.819802][ T2028] binder: 2023:2028 ioctl c0306201 20000000 returned -14 16:27:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="056b2448"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x1}], 0x55, 0x0, &(0x7f0000000300)="11bde0b0305540a1c17533ea171c0fa15fd5b1b5ee99f01d9ea3b498dd067fc984dc52b77732d81c8d4cbd4414e1decc8fcfbdc3f99e6b3b1bc30f7794b81c15198a9b9290b30f408e5f21e58bca159338ee5d61b5"}) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={0x3, @null, 0xffffffffffffffff}) r1 = syz_open_dev$binderN(&(0x7f0000000180), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/snmp\x00') ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000002c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000200)={0x1}) [ 1843.986666][ T2033] loop4: detected capacity change from 0 to 4 [ 1844.032163][ T2044] binder: 2030:2044 unknown command 0 [ 1844.038111][ T2044] binder: 2030:2044 ioctl c0306201 20000600 returned -22 [ 1844.056164][ T2052] binder: 2051:2052 unknown command 1210346245 [ 1844.062435][ T2052] binder: 2051:2052 ioctl c0306201 200000c0 returned -22 16:27:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0xd, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1844.163848][ T2057] binder: 2051:2057 ioctl c018620c 20000200 returned -1 16:27:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x700000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:28 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00']) 16:27:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:28 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB='L']) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000680)=0x0) r3 = getegid() r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0xee01) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0xee01) fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x3}, [{0x2, 0x4, r1}, {0x2, 0x0, r2}, {0x2, 0x1, 0xee01}], {}, [{0x8, 0x4, r3}, {0x8, 0x0, r5}, {0x8, 0x5, r7}, {0x8, 0x3, 0xee00}, {0x8, 0x1}, {0x8, 0x4, r8}], {0x10, 0x2}, {0x20, 0x1}}, 0x6c, 0x0) syz_mount_image$befs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x6, 0x6, &(0x7f0000000480)=[{&(0x7f00000000c0)="bee011276268fe72fd0ec613c7ef6df1", 0x10, 0x6}, {&(0x7f0000000100)="1c9ed616ee7d07da92dbbdcb9f8ee686e4218ac672f8bd396f50305e2f", 0x1d, 0x44da}, {&(0x7f0000000140)="618e8563d47c7ff0545f2860504f0e8bd9c6208c198b806a923ac2466ceb2bf910de5ca8d61cdfb3845716be889b86979f8d53bdfae44306ec612048cb6373bb338d65c3ce0d5646eab0a2ad8f97074b4c803e348c81caf8363d33cf2051d0c135c8316d8eccbb90531c87cdc05ee2451a2402f7a45ae231d7b61b605c63ef683011d7c2780698a47df5c37d1ace153fb95f052108367ed2638536a753ac72a0649727e7", 0xa4, 0x7}, {&(0x7f0000000200)="ca2fbb37a9aca4bdbc21d63844eaf01635b394c42c78d199d768221f27f3c97b6cfa32982db9bb90c1a4e5d3b8316f1b283d43d23a3d736d5149f002ea6daf069693001edb03e8544d4832a0f863fb48fed1c52e26e8f330f6b6fe57d91b36caf63fbda399ea53296e009ccb001bd8b2784d620384fca0d01cf58f66350690bf32a0ec907490c8604951e49118de038613968c61cb7f18b64a03ede8127117e599311965e5cf48062afa3e981c3339f4143dd6af84c7bede963689288eba5e2a1eb3bc", 0xc3, 0x72a9}, {&(0x7f0000000300)="501ce0b69733aad1e6d9ba6d754a51a73d2e57ad0b6137bfbb0d9d8f83e8e7adf21c863b26321f454c5028f848015665642ddc2ea46874156457df9ccaa6f20025097072541f37874593b47281fe4e98cd08ede6b1e7c596ed4e964515680493733459986af54357225dbce8272e7593c9ca95e846612be9eb6c3ba6ae8df3bcce0832c4acb391537f5249c77d2192dfd240287fc42fa11ddd5fa4d8a7efb1ecdccb32548c1fb458cb6550d0699a3dfd299ec63f3dcff51b0391e47f", 0xbc, 0x3f}, {&(0x7f00000003c0)="c622504e94ffd7376a763a69caf80b54c5d11caf77e6723c1d7da5b0dc53d782bdc67455acdba77a2eec7c5b9a45644b62894ae74bf722b7f3bac87da5970adfb58fcec325495036b0d29ed30ea47b3c2ed33724a3d39fb17c37b2c785f9ba20c694c4257edcabe6c9d398509fac1e42727f9f8480dda9c240379399344d2eff669d3c47d1e6ac575bf90f87f3cace559a395c8a3c370e54b3d605b42e6451d61a18d76db0c69d", 0xa7}], 0x1800000, &(0x7f0000000580)=ANY=[@ANYBLOB=',defcontext=staff_u,subj_role=,obj_user=qnx4\x00,dont_measure,rootcontext=system_u,smackfsroot=,,func=CREDS_CHECK,uid>', @ANYRESDEC=r1, @ANYBLOB]) [ 1844.584628][ T2064] binder: 2062:2064 ioctl c0306201 20000000 returned -14 16:27:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x800000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0xe, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1844.897545][ T2057] binder: 2051:2057 unknown command 1210346245 [ 1844.904056][ T2057] binder: 2051:2057 ioctl c0306201 200000c0 returned -22 16:27:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x84, 0x0, &(0x7f0000000100)="f62344b637509bbeb51a4719d32ddedb6096e466817f8e4cdbf10b65c9d9812aea0bf826383204cc4872afe0af70607edcbcfc7820ea9bdabf98cb9f8f68dc5911b407a96f7da66c42b3785ba3376fe60b4a05c0aff36102955740ebb4a59f97d9e62ef77c1768a2d78499a94e1e9b5dcf204f750266d10e0af99a99e904ee656f5dba3e"}) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000200)=""/4096) 16:27:28 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000500)=ANY=[@ANYBLOB="8c020000e95ca196d74d00000000000000"]) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) fchown(0xffffffffffffffff, 0xee00, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0xee01) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0xee01) r5 = socket(0xf, 0x0, 0x1) socketpair(0x22, 0x1, 0x4, &(0x7f0000000380)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) setresgid(0x0, r6, 0xee01) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="02000000010006000000000002000700", @ANYRES32=r0, @ANYRES32, @ANYRES64, @ANYRES16=r5, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0xee01, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="7315ff", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=r7, @ANYRES16], 0x5c, 0x1) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x6, 0x4, &(0x7f0000000300)=[{&(0x7f0000000080)="07fa55cfa1bbb1d1f69e4857e3ff9d19c1b8b6318eec2bef2e92519056680bc7a079e03a33d4518d7d856ff6137982a6dc629be0e5c13aed55a16b51f142ae2a31fd5b676e5eed635ac68ca7b6909061d856db99d85d74574a622289f17a077be6f89f21a69362a17721a4189e7b3b88ad82d105bb2210fde56c15640dc97cb52c307317d0126f6cf7c6b7fd5d63fa105ecd393564c195ff8b5d579f953d5b2118ed3207fae82dcab0bb9b556df4e385e57b4e7eae76ba5387036ca15867ef1c2430a57ab98b6c7e8ad4999083ad5d53f57232c9cd769200ad72bf1fe102", 0xde, 0x13ee}, {&(0x7f0000000180)="ce9b4dab99265e8f99a129b907b82ba38f1b84ca5003257a6859e5860137b30380eb20d5464f0f59bb0deca771137e3ad9362b1ca15f6e1416ee38e7153a47b774d247335996f7be447bacde679a97f00b6a0c1112e2df95a77ab2584f3171fe38c8af352044dd9d25a6112f3ae6f815953e88002a426f41e7f3043f9b37cddb0b0c73687ff84df6b278e3fbd3bb7bc62b7956590d4d0ec1591f3f03d8e7dcedf2fbf67161cd61e6da10b7c4387d08cd2ac51137865acfb3233ca6dc1d76450025c250d84ac0", 0xc6, 0x4}, {&(0x7f0000000280)="77b40f419deea0eb1f5c024e40bcaa609d9e07", 0x13, 0x7}, {&(0x7f00000002c0)="b101971b8d7b7bb129f3dd9cac52d94e8026cec7fcf873966ad9c7f7e24a9c73d04255118893edcb4e628d876fb72f", 0x2f, 0x20}], 0x900010, &(0x7f0000000900)=ANY=[@ANYBLOB="696f6c6861727365743d63703934392c63726561746f723d653575f22c73657373696f6e3d3078303030303030303030303030303030342c6769643d", @ANYRESHEX, @ANYBLOB="2c63726561746f723de674a9772c747970653d05fee81f2c7065726d69745f646972656374696f2c7569643dfdf737a9cd66fd2a77f8521bfca405baaa820912d8bf", @ANYRESDEC=0xee01, @ANYBLOB=',obj_user=,dont_appraise,euid>', @ANYRESDEC=0x0, @ANYBLOB="240098a0b60cda61128d0f289605a8d9e623154c6c76982f15ab6219bc3e1c76494bfab65bab9acfc40248e9e011be3884f0eef8b54d08fc3941aa1c20f4643bcf34fbf78298c9a62667e0156704b2a174a2a8e327699a80c4d438d00b3df887"]) 16:27:29 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00']) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1, 0x1, &(0x7f0000000140)=[{&(0x7f00000007c0)="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", 0x1000, 0x80000001}], 0x4000000, &(0x7f0000000180)={[{@utf8no}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@shortname_lower}, {@rodir}, {@shortname_winnt}], [{@dont_appraise}]}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) [ 1845.425929][ T2089] binder: 2085:2089 ioctl c0306201 20000000 returned -14 16:27:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x900000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1845.623577][ T2090] loop4: detected capacity change from 0 to 19 16:27:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x10, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:29 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB='h']) 16:27:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x803) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:27:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xa00000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:30 executing program 2: ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000000)) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x1, 0x0, &(0x7f0000000740), 0x19043, &(0x7f0000000040)={[{'qnx4\x00'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '\a'}}]}) fchown(0xffffffffffffffff, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0xee01) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0xee01) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0xee01) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x2}, [{}, {0x2, 0x2, 0xee01}, {0x2, 0x3, 0xee01}, {0x2, 0x2}, {0x2, 0x2}, {0x2, 0x0, r1}], {0x4, 0x2}, [{0x8, 0x6, 0xee01}, {0x8, 0x0, r3}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x4, r5}, {0x8, 0x2, 0xffffffffffffffff}, {0x8, 0x1, r7}, {0x8, 0x2}], {0x10, 0x4}, {0x20, 0x6}}, 0x8c, 0x3) [ 1846.409112][ T2120] binder: 2115:2120 ioctl c0306201 20000000 returned -14 16:27:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486313, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x11, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:30 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB="0f"]) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r3, 0xee01) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x180080a, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@permit_directio}, {@context={'context', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}, {@permit_directio}, {@fsname={'fsname', 0x3d, 'qnx4\x00'}}, {@obj_user={'obj_user', 0x3d, ',.#%'}}]}}) 16:27:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xb00000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000200)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x201, 0x3}, @fda={0x66646185, 0x1, 0x0, 0x11}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}], 0xf7, 0x0, &(0x7f0000000280)="acb525316e3a4ebd252f23230b1da07a3352b09b084354496b06f8d2c3cbd3cce8f562496cf4821afca582ba4bdbebb91055e6d95370c6f1d3b52cd993578246caaac6e8828a42831be187c19bb4109c82ffcf997c055d7145384a9cd06b4cc1c973751057ea1837dc551de586884a3ac46358f11d3b7b0bee88fc298278db5a8f15794bafd1e2b78459a2d21841e3e64792e307013c08120d46348db32436162ac430d7943128a573bee51921c26cae2be594dc75d70bf6bcfc397e852747137d4c476d7b80a4b3a02ef4d15125286fde2a8d3df3434595b342fcec063d1832be01a501536fac5d0e52e037f516b151e8ac806c0fc6bb"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="046304404bb39da9569d53f4fa98bc1881000400007c61020d3d416f59cacf53ce080000000000000033a73b6e7ccc56831d2ab78dcc54341524d6b40cbf06ed192ebb35f3a262d983e88b14d1d081eefac1502a3f7006935e251ba63c7f84136a627b5070ab65d1ce0ff9ca12c53d3bf3f8e0200000000000000063958c1d4c", @ANYRESOCT=r1, @ANYRES32, @ANYRES32=r2, @ANYRES16], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) accept4$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000400)=0x1c, 0x81800) 16:27:30 executing program 2: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000005c0)="f5e5bc0e8d3f3620d796e0a97ac2ecbe173b2a7c75c837d001db749b9bace6cce9cff025530420029d0a65e4cb1d39756ee20f1b37bf4f7b6a8c65d28eec668e83bd9fe42d3600de22c07f7a562b3bb3fa1516f5375003a0f023d6345d02daac3e868955276ef01837696fd5279681fe202df87ee72d6d34dc5a2e7acc4a9e98fa73ac48f477e437c01f897b1feecbaa06b3143853d7f30e2087a4fd1bdf9d09189b5aa63d7cbdba3d4198e39eebc5a1204a33d8656795af5a9aee7b91026049dbe350ea38f43369d26071cd664b81ace0c4036e4b76a9afe99cb824cc1b11170ad1d054790bc2647429108d4823909da4eb4d9e7a2edea238bbac327a99709c679aa8c5c2f251196c38f27c32dbb7cd1a51daad7e6ba235361abeab693982af4f55e15f1dafbd6e8aa72a3417846656face8638d7f6a9aa3b2104a9bfdbc1cc8e0ae40b93125efe60bf24a314bb68bf4e173a31b5f79883590184c58bca440925193a0dfa185d5f43673d1efa25444ebfeedfbdacf92023725843e95f11a1c402c88520a69c9a5d9fa42471e2efcc7d80235244a1f998dffa8f94bf15bbbe517fabbe7ab561eb1a6f4760cb79a134a8e2377734a89068ed00f7f7834a29921d56ec32882d67b78df78957838a4f2e92835182024d2594e4cdcd536eea34d6a78f8ac99a0312767d458e9d9a028ec43181d6a00c741fd5983829204a527e52e615d21b3902412e13074ed387b532f0b0c0288a93e9aa4448a31245d4b806177a2d404cdb982b327a9527dafc526bcb035536bd4e3b14b0a01ea791ecda434b7d6260df141b0ecd525f46b118343ef744ca9f82067869f739580e736b3c209e5da50a25c870eb176f1939aafe8878895b455096afd631e85f3bb703d9cae1f12d1eb01433c2cdfbbd2ed73d0f06998610a711e3bcdff51804ea0477b25d487e503a1f07807aa2d7baa07a0aeaeb506fb86795a1f6cbb902db3e467bbdce534d722e6b8c9fa398a8a05670cd1f1acc27b34a4e6b1ab59a9c94e8260424cd28e728062f997779325c54045748725cb6dfdc5ba3c31c72f6219604e98bb8799f97dcccdb7cde8831d913d9d00dbf36181f733149ab81a097f088adf6c9658a167bcc941112c3881d1317a914e0ab1f3ab2f73e30af975241db1c164d4ca6176383d6d4258a3659fd7824ca2f35da0f6be0f068b0ff5a43f9b1050d0b782cb2a5db5ede736545f8c98264714a8ba546f3eeb9af7fb7a43412214d8ad8e514380b28d8b126b0b35f949f730765ec1a5d3038ecfca4e9eb296c7736de3280fceac865141b8b1d77cf3ef379c40ea78c6ec608cc677550bd77122531bb244096b5305a95d1a2a39b0e281846427b6476e212a10d600e293998c3bc1af899592c30bc902a7bcf6f11b74ff83b390d97e7149aa6684c59743b70111157e498165d2e1a085e87191e787e5d1191dd65b50459ad4779144410246ef11eda0ad05458e8c835756063d1d8e95825e812057953b4b8a9fe1d171360e81c01e1e4fc82cbe0f5e1428207cbb3aac8bf20aab4e74e34db9404ac7532fe562f95b04eea7987586251f5c284e9029c710cb954e1932e5ea3559c8669064fef3d122676b71f44ac5e6e1bfafb5b4fcf668db67564d4377f040e7d0e6e74ebc71034be1b9851c65ea9ae9b4cdbb904faf7bed77d904bb43be20c30b49e9195e0c7784b87387ae4ac0c23aed78d3ec1a98e823f6b6623c80e3e8c9fe5675279ccf78754fd45552f58d33fbfbd7541ec069381eaf235a960c6b7cd383b5e8c4e07cf54e23fb1c0f43092eae18753d9eedd48ccb2d1ee8302ad9dd36ff32810ea31803950d759228358a72075e5a1e3b3bd1692754ad7f06f24107b80c4cc7e867385ec0e0e162a477c9be1af2eb78e8d92457005382c6edf81bfd23de645243daacc5ec309356c61edccb861e02953bb3030426f815ca9afa077d6823e6d068a9a8cfab9af1d461e44da6fe9ae992c8e6c0354bb3a57633f7e5f55ad4ba993ad91aa82a304c20bec9b03dae2a398a5cee83f34feed507261323e9a174b4c36fdfdabfdcbe3f5bcfd591640eba319e38a5f632bea9613ddc1d79bc5d22e8f3172d3cadb0c18507a5bd336163dc5951bb10d6c6b8fb9ea60b26090c03b64a7606b587eca601d723293282bcce8c359d55b8dfa4818f0e73d2eba395f5257d8115001027a87d6118438320732a51296c41e124ac67bcc3cd00495f9b480840fda7b7779318b0ea404202cb53af75033de35d66bc0261ba5fd3ee123032d09a2f2ff9fa49c559e4e8a9cfa891d595705bda39bbc5d3c28bf39c60e3546cca5f04ec1ad4e0a4d40d5b49278d6ec36e61046f0e3bf750dbf2871fad6eed98c00c2fa14ab6de439b8bd22433460a1d7b5165c3e7550ca2d57ec1140c730078757d697fbfe7ef083e967d8cac383345c9b354ed26f0a6551ad77241ba0afb3c754aa68d2c87189a2a1b5578a1f46b6bfce89df01d960815171ec88fa60e1b424ab3a81e2c1422a86270bb1bf5c0e2c0d171eab5b62165647f069276d76355b808655efb6230546d0516accea3adee736e0959abade8442e5eefada9376bea7180d641090169a9ec4c1216b28d8d5b971f6c5fbe10ff96423c1b804cad8f9ed7655dd82e5052a4d00d7db9a2dd0cc048b81e291cf486c566e4321513839cdf9118267efef24d40c35954b42916d2eab2c6d89a40bd83fc355253045d8a2f456b1026497b975d0cd8323e96fed96b89e07438f508c591c731c66269ca302069d871dda54070ad414d462c44dff0c8091e8b1aa91c72b41ee71df93177941990673caa2bfe85e69c4146ef39569f5109961618039d5d51d2dc3f904f4d5e975f30169613770ab5c0486137cd823fd3bc458bd50096a22f64117d7996ce3fef62577594d1ba90660e2393dac668184b620ff9a6ae04e194eefdce42f2ca38500b115c611086e85ba915a366856aec98dfb6cad28151efc812958af22d4cbb999111e195631535fd9598196f34c2cf6a4e2b0d02b3910e04d433ee815095567301f5c64923293d2c2f32d80c85a83406c730ba84686023aea50d9716550d88b21af2f3b48041c850acad2f92a51718dddeba7e4e09a6d2436f6e8292127511199e5a7aa358eef31f671126bf0c3972d2060f58cdb7defc368103c939c8b5c34534c37d8ff6c3e16368e2f4794258f4f2ed0ec841092a2a7d476833cdfed6c57cf9c9a245b95e443b956e6811b4729368b4ca818c6a0adc176895c7224bca05305c21b2e554c07e812792a7fb06330673253c1aca71f8ab46bb190b162c80731377e75a9033ca8c0a2f091923bb94bea3cc07f9fa513e1cf070c0247bf62b68f7eb1a7a72f0bd6602708516460e130dae5a6283cc5b2936ab62149eabe60c26251256906bfe15c15261e94a9b40043344e67fff2fe4d111714a8e2285b5cd042e7848070b8d79c9cd8af12fbdd8e28ad4593a6f537291415e92d8b8afdf4296b7b54418467c69f977236cec4c44ff81e152567893c05d65b8865b433bc28fd652632e35c7ccaa1c4cf9da687d62ef88bdf80bac07c0a447eda8cb35f8d6cc884a5dfd3511bca077275579a6caccd8424f5d7e02974e7ee00b7d5bc0c1dbf4a30d4126a826dcdab82d54aeb20bf24c920e5ed74c6c01c7748d78459bd9629a5ca6da61d636c8f7ef47880208346cbbe18ca99dff6e3d812c5ee66e9958711a2c0dd3e29e1d716be3dd38d207e1fe25ff153d66ff8b0992dcda13ee0ead143e026ff5cff76586eb8f44def5ff65140e5788350c0d3e60dfbaa050202c3d5588644e5632d11fa6cd2cca96fde4a7e09265d3e5432a886d6d41ec6315e34cfa947c1be63acfd268a89ed6e6ac47ed62aebce4e2c246cbd77a6eddab11fe3cd19b6283d728af9bccfd7994fb5e67d8d3f6969d832da2ae27e048c14a90f0cd7aeb91a3b0ebc02c5998f4f48ad86ddb1fffaa66f4dc4b4ec88ef3e695e81bc94fdde1e0a9d8116b76419e572c940add0b5ed6b91c99f45005d90139212de88ac1c581d6d1cc57332ff33aed706ccede32678d49b5a2a2ef50e36526bfcbd0071b3238db464bd3a8bc81ccb1bd4e705ddb0472d0d8657f08184d734c72fff453bc03665b46f05c544b8824047ccbe904e01aa1279c009a696e22324a5dda0c1bf59711cf6f8fac3108fce9d9b97953e7c2142c2046403d224dc3bdad9abb69dad3499a40fe5fb61b35c37fb271796be1600832d68e7a071afbaf53f0fb85582df998c3cf4b732e34e1a8dcc0c6e5ad3e4114d048f3c648947cee7ec4132de41d95e8250ee58a393017f1add3b26a4ed9a005cffaee104f32cd9ae797cd43784d2db6a75fab0d12b7a8c1f62743722450c8d1bf4437227be1b8ec0a14b27fdfdd6cd1a139d74251c0fa12160b0399ab4b6a4a7379d28dd427e777d0d3b8a66595aabaa1eb36eac46f9fd81acaa066869cef5d71964958d32227ac9d3a1d8e105c528e11c407709c4bd2c07ac7fb250bf6904e01c522835c5e1bc0059c5a08954baf3cc18b99724753515d79ba5c661e78d7d713bb6d6efde9c2255bc04852c1c4f1fe120002e45dae8e3190f67f92ad6800d26ed7b7fddacfae12ad83a07026702f627838a675df8e068ae432f6eafa6c2c4110f8db48b19f149c493cf0f312f2c6a553368bd4e5ef61a9b905b207c5c4bffbcc0a42001296ad59de10f9a5b7396e2c21a635bde2a7eb5c71de341530eaebdaab9a21e1d8fa3207afa13931bef5fc2b55966ce6ce48df327105631a48b3d3f37f346789e089a142e3609c045726370bfe346592aa3db0ec6c6bac16817585551196b782298cee83cea0a2bc2fd67ad13e2b6e6ac45963b603b9ce285b1bab29372e5e0bc09214e3f9abe5e3bfcdcc1214d39189c68c4156bd75f918e6c7a33c76772e4c61a846c68439762c6d29ab00a26a074107ba6b8ee7190ec8b0acd974cefa7571ec75fc018e03f673e6596b772db5c804422647c2171a4f8975069ad09a143930df4db048d5420d02f6e0034e1080888789ca9bfe7602a644dad516f2d59986c8f723a31f4743c12be2991e4a4cca59f81b486a1d0c4f9a55972731a0f2a0203cd8de474f4d6d538c333a73bfa9e71d4026caa30ed86686d67ff00adc74595cb57b3b275df694235737ee9bf8f254be90ba087b4f26a5dadaddf72bf6f6ec44a4c577d8a87439af2453bf3c3cb4bca3da49d25ee4ab0222c71cf8a83a15754dda4c7d356dcab6299df5c7ed5c631e70afcccab43aef0d35913f1a183f9bf75175b1ae04222a662c6ebe91824517bd61e2abf180518134900cc94c872c96fbc2ea633f66f8c904972f15032aeb38d66b01cdcf3666d97939026a76a76d4c503924626de64d6e7112e4c524335c5c33867084309b29f321a81b7bceb717098dff86614befe7bece557819dcc328f2e88dd47785554415b6d66e83f36b7d11f4c834b7c96b0790accfb0c5c699b9d999260fcaef693b7234484df86f7b94b8853fceef3b66fc3bc969a9d946a56e03002e4294dcd4e063b8abe91be7ea67f33454d12767625960204b82144c135dad2c9a375cb0c44a76a84ee01f4f99d7c6d6ae8cd47bd9fe85d443d1bd09140dc0825c0c132bafb6633dd06241c9bb5c80da9851296e1d979b8b018cb766161674018a0ba3728a608dd67cbde433e693ebdf3f8b7f8a754f0223e0cfd3341dc55805568733c6e56aa2873cf23ac02c620986e23ba3e2a33002bf6cf8d02688bc40ddd9ffa0a3c493c3678a09bc7850b9c38a7ff82", 0x1000, 0xc3a}], 0x8001, &(0x7f0000000140)={[], [{@appraise_type}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@pcr={'pcr', 0x3d, 0x30}}, {@dont_appraise}, {@hash}, {@uid_lt={'uid<', r0}}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'qnx4\x00'}}, {@euid_gt={'euid>', r0}}]}) [ 1847.199186][ T2140] binder: 2137:2140 unknown command 1078485779 [ 1847.206058][ T2140] binder: 2137:2140 ioctl c0306201 20000600 returned -22 [ 1847.230293][ T2143] binder: 2138:2143 ioctl c0306201 20000000 returned -14 [ 1847.393469][ T2145] fuseblk: Bad value for 'fd' 16:27:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x12, 0x0, &(0x7f0000000080)="a221ac63"}) 16:27:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xc00000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:31 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@private1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe4) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000180)={[{'qnx4\x00'}, {'qnx4\x00'}], [{@fowner_lt={'fowner<', 0xee00}}, {@uid_gt={'uid>', r0}}]}) 16:27:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 16:27:31 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)=ANY=[@ANYBLOB="01"]) [ 1848.008467][ T2164] binder: 2161:2164 ioctl c0306201 20000000 returned -14 16:27:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000080)="a221ac63"}) 16:27:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xd00000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="046304402de9cf78b8edf7a554237c70ae7cba8d41416b3795c510dca94e107a82516874fcab42443dffeda8808b3ee315af70844e96ff9f4b29edca80de59f6e67e86cd5d56f78f24f45c48ad9cec2a5fc79f331f853ce74e975f74e03d5a6566d5367c791e99202359cac293c15bad3b7061dfed3f56f788b09ff0f120268947409dece8c6bc4dbf64f63d499d38a4470e2f40e4b8ab98d59bca52a0303f6a64f144c566745977a29f8d1d9dd676dfeb74794548fadb6d31440ef158ac7359dc1f5498bc08fd5b0e00c7c50a863379104806a103315d971a48f741111c4e1f7ddefd9a9b3ff6db7fc9ce03faa2ffb7"], 0x0, 0x0, 0x0}) 16:27:32 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000240)=ANY=[@ANYBLOB="068d966c03d9de8e0acca5ac8babbd2f509677de5917ffc6f55ece7b5b26c95e6bf982acd764f0cc9c2703b0c424ffcd962cebaee035e50679a4e77da22b7991af033f92b856beed04b7ad501831f7432c62c0b7f2adcb3b87ce4adee94d0180cc89c92daf4951d58fa1542462e6147b5b8651b864e39ab49f0ebb7f5acdc06cbd47081b8c9c3cf561f246a3e6caffc8e4185ae0aba1ce39e8"]) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r2, 0xee01) statx(r0, &(0x7f0000000080)='./file0\x00', 0x800, 0x80, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0xee01) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {}, [{0x2, 0x4, 0xee00}, {0x2, 0x1, 0xee01}, {0x2, 0x0, 0xffffffffffffffff}, {}], {0x4, 0x1}, [{0x8, 0x0, 0xee00}, {0x8, 0x0, r2}, {0x8, 0x0, r3}, {0x8, 0x0, r5}, {0x8, 0x7, r7}, {0x8, 0x1, 0xffffffffffffffff}], {0x10, 0x1}, {0x20, 0x3}}, 0x74, 0x1) [ 1848.816660][ T2184] binder: 2179:2184 ioctl c0306201 20000000 returned -14 16:27:32 executing program 2: syz_mount_image$qnx4(&(0x7f0000000000), &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x6, &(0x7f00000008c0)=[{&(0x7f0000000600)="043adb5d43346b6e2b204a78d6045a2c0b26591a0a20b69b58c270f825", 0x1d, 0x10000}, {&(0x7f0000000640)="5ffc32624f4cfcf7c7294d752747672bf8e84287ccdc4e71395ae9ee522892665f0d833635f95b51d65dbda12056825b980be13d9c", 0x35, 0xb0}, {&(0x7f0000000680)="307ccc627ed49f01c698fae82dfad8", 0xf, 0x5}, {&(0x7f00000006c0)="701a3149f4255af0566882a83ce6a6f49585df88862f34e0d83d7d5ca1472c747b9c4463f3b3da836e475e18c3cfa7857b5e61c171d0ddf6d416948e1459dc2326bb2da79b276e7c9953d948190cf83f13c4dd8cf4fb2d2047e92689f4465ca3a9940c1dec7952ce0e60a7bc1c50f2b6ec6f6325843b1bbafca035110871e6bb0b001e9b1d56f3930bbfb4d3a9bcd7c3a5a8a0f1e158dd89e8e0627f9790141cd579bba04f3928", 0xa7, 0xff}, {&(0x7f00000007c0)="423965c74a387a21684d5684", 0xc, 0x5}, {&(0x7f0000000800)="db8f5bbaf76dd21d3545cddda611bf011ffe94ddb103fcdebbefff42da79731c3179f10a1fea24dc737dd15bfeeec2d429843b267ac634b8a2fa741d9ad42bd6b3132ae9876bde2c806d923e567965c5a102826c9b47550ca4c332742df25cd2e6495d0ec8b45de62144d0e023c06ecfa4314a682ad114ca310ff6b4353b6fbf7aee3ba4f52868828e9a19ca88d1f98f6138ad2a5a2ff24670848d34b58aaff1a2a1a8e828a325ab59cef8faa19c37e632416d165931954f", 0xb8, 0x600}], 0x8001, &(0x7f0000000940)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\':{.t\x17%}\\.+!\']-\\/{[\\]^+$'}}, {@euid_gt={'euid>', 0xee00}}, {@fowner_gt={'fowner>', 0xee00}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@audit}]}) syz_mount_image$hpfs(&(0x7f0000000100), &(0x7f0000000140)='./file0/file0\x00', 0x7, 0x8, &(0x7f00000004c0)=[{&(0x7f0000000180)="7325d3c702981746e98fa75e2b955ed160dcd697315a3f011b7da34821a930f43bed", 0x22, 0x1}, {&(0x7f00000001c0)="51cbac3d1c7d598572d37d7474a79a65a96850850edc2bda14f7b5269a4bd444d6655df83e36", 0x26, 0x9}, {&(0x7f0000000200)="c1b0eaa3cfad06d10609b509fb9796dde7f204124fb0db87b7e333aa5df93047934b020cc2522ba282c9f707a36bf06582d923d48509c0", 0x37, 0x80000001}, {&(0x7f0000000240)="4d5eef9efc638ab4ebd7867357d2be9a92c8853f3860761cc53765543fb223697b593db87ecac094fde8a789e7a282980da505c911e95336f5cb6e96bfe6b78414cf9f334d4fb68fabcf36754936e35e8a52b5025aab31de512b71a14c77e057952f8ab444a280152192c53856e40bacb8c01d30a935881fda7442bfa91f4398499151b68ab4ba9430fc6bf33cd24527edf625600283cf19627c7c8fea30610be73b67bcec6840a7725d8a8856fdca41c2aed5ef67fa0e03b55b5e2062092b9cbfe2d6498f87a1ba7310a499cfff31047c681b6f91d0a2006e83", 0xda, 0x1}, {&(0x7f0000000340)="d05049506a806dc794ec596b1f2beb43fa7edf13e76fc7584bd6a18db602d13ffb91d4ec507f2290eda263dbdf70e381553c5769daa7c81e2a957a6c0fcb66ee83ebc44c3594b8f91ab7babcb2ef92bf2682b188a276c35a1e8015aca1e0adcb0ed1fc989eecbcc2bad94c36baf1f3cd500518d4e9163b9a4807de74", 0x7c, 0x9}, {&(0x7f00000003c0)="e4aefe9ed4ea3b7d91bf84ad05043b6325a6f1b42f43c94bdefb8b441aee41e0dc76b380c96da1e2504fcf3c506ab05519d62ac4076cde989390a9f7aad5ce19d4f5638af225d08d5a83", 0x4a, 0xfffffff9}, {&(0x7f0000000440)="56433e22d6271bad61490385f12239501db125288132e764a243e3a9717da7bb1c008bd4ec7a30005a700698e6bfb7b37ad2f4aa", 0x34, 0x10000}, {&(0x7f0000000480)="1bf58d87fdc74d06c0d6df93d385a8a3e72f99f64cf23360cd57b4504da683d2f7", 0x21, 0x7}], 0x4000, &(0x7f0000000540)={[{}, {'@]'}, {'&^'}, {'*+#'}, {'qnx4\x00'}, {'-{./-'}, {':($@'}, {':$'}, {'\'@:'}], [{@subj_role={'subj_role', 0x3d, '/proc/capi/capi20ncci\x00'}}, {@permit_directio}, {@hash}, {@subj_user={'subj_user', 0x3d, '/*/!)&+$[\x9d\xd0\x93#'}}, {@appraise_type}]}) r0 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000080), 0x8002, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x40) 16:27:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xe00000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000080)="a221ac63"}) 16:27:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:27:33 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) mount_setattr(r0, &(0x7f0000000240)='./file0\x00', 0x3000, &(0x7f0000000280)={0x0, 0x2000f2, 0x1d0000, {r1}}, 0x20) syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x9, 0x1, &(0x7f0000000140)=[{&(0x7f0000000080)="ccf6142abd54d66623669a69179e2cd66de7d1229edc60a010cfd20a2468b0190b33c8d6fffcec71bfc4dabc6bb24768aa274eaea84306fe2f1f36b87e2c260d7ccf68bf236609cdb93a019197948eca54370108b9631b357c89c2175d1976c03ba202428486939e80c3b29b83562a82c93a6a3878d2d689c06521824ca1fb6c763de19bd9e61cf184a090ad1359baa6251e8a", 0x93, 0x2}], 0x284081, &(0x7f0000000180)={[{'\''}, {'/2-!'}, {'qnx4\x00'}, {}, {}, {'qnx4\x00'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@permit_directio}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@seclabel}, {@fowner_lt={'fowner<', 0xee00}}, {@smackfsdef={'smackfsdef', 0x3d, 'qnx4\x00'}}, {@dont_appraise}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@permit_directio}]}) 16:27:33 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x100000, 0x0, &(0x7f0000000000), 0x8001, &(0x7f0000000100)={[{'1nx4\x00s\xac\x8el\xca\x03\x86\xd4E\xef\xc3\t\r\xd0\xa3\xd5\xefQ\xa5\x15G\xe9L\xa0\x11\xf7\xbe\x80\xc2\v\xea,\xb2\xb5\x90\x1f\xd9\xd7\xde=r\x1f\xd6\xa6\xc0G]U\xfe{\xca\xce\xc4\x1b(g\x1e.\xa3##\xcb\xe3\xd7\xc12\a\xaf6\neF\xe7\x1d\\IU\xdcT\xb6O\xa4<\xbfG\xad(\x82\xc5\x1cj\x81c\xf9\xc4\xd74^A\x8d\x02\xc3!#k%\xee\xd0\xd2&\xf8\xc5\x8d\x91\xd8\x95g\xf6\xd3\xdeH\x83\xabl\xe4bt\xb2n\x82\xdbw\xf6\x1eA\xfe\xf2\xdf\x86\x98\xe3j`3g\x10{_\x8e\x7f\xce\x19_F}\xf7\xcf\xbe\x8e@C\xa4\x88)\xb5\x17s\xa19'}], [{@obj_type={'obj_type', 0x3d, '%\''}}, {@pcr={'pcr', 0x3d, 0xc}}, {@smackfstransmute}, {@dont_appraise}, {@obj_role={'obj_role', 0x3d, '-\'./'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_user={'subj_user', 0x3d, '1nx4\x00s\xac\x8el\xca\x03\x86\xd4E\xef\xc3\t\r\xd0\xa3\xd5\xefQ\xa5\x15G\xe9L\xa0\x11\xf7\xbe\x80\xc2\v\xea,\xb2\xb5\x90\x1f\xd9\xd7\xde=r\x1f\xd6\xa6\xc0G]U\xfe{\xca\xce\xc4\x1b(g\x1e.\xa3##\xcb\xe3\xd7\xc12\a\xaf6\neF\xe7\x1d\\IU\xdcT\xb6O\xa4<\xbfG\xad(\x82\xc5\x1cj\x81c\xf9\xc4\xd74^A\x8d\x02\xc3!#k%\xee\xd0\xd2&\xf8\xc5\x8d\x91\xd8\x95g\xf6\xd3\xdeH\x83\xabl\xe4bt\xb2n\x82\xdbw\xf6\x1eA\xfe\xf2\xdf\x86\x98\xe3j`3g\x10{_\x8e\x7f\xce\x19_F}\xf7\xcf\xbe\x8e@C\xa4\x88)\xb5\x17s\xa19'}}]}) 16:27:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x1000000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1849.766339][ T2207] binder: 2202:2207 ioctl c0306201 20000000 returned -14 16:27:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01001158d5eec40da76aca0000009a8c3235ece091f0250000"], 0x0, 0x0, 0x0}) 16:27:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000080)="a221ac63"}) [ 1850.165974][ T2216] loop4: detected capacity change from 0 to 2048 16:27:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1850.281556][ T2216] loop4: detected capacity change from 0 to 2048 [ 1850.300251][ T2221] binder: 2219:2221 unknown command 1477509121 [ 1850.306800][ T2221] binder: 2219:2221 ioctl c0306201 200000c0 returned -22 16:27:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x1100000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:34 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe4) r1 = getgid() r2 = getegid() r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r5, 0x0, r7, 0x0, 0x4ffe0, 0x0) statx(r6, &(0x7f0000000380)='./file0\x00', 0x400, 0x20, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000640)={{}, {0x1, 0x1}, [], {0x4, 0x4}, [{0x8, 0x4, r8}, {0x8, 0x4, r4}, {0x8, 0x6, r9}, {0x8, 0x4, r2}], {0x10, 0x5}, {0x20, 0x2}}, 0x44, 0x2) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x30) setresgid(0x0, r4, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010004000000000002000500", @ANYRES32=0xee00, @ANYBLOB="02000300", @ANYRES32=r0, @ANYBLOB="02000100", @ANYRES32=0xee00, @ANYBLOB="040002000000000008000000", @ANYRES32=0xee00, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="08000600", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000600", @ANYRES32=0x0, @ANYBLOB='!', @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=0xee00, @ANYBLOB="10000000000000002000010000000000"], 0x84, 0x7) r10 = getgid() setfsgid(r10) 16:27:34 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x9, &(0x7f00000005c0)=[{&(0x7f0000000000)="1e1c99bbab5f61d624e3ddde2b472461d8e04783d1eb7826134c92333569d4c72f087f6126a06e465694d8d2a0746231aa8cd3946760c5ebec0617b634f88671d708444e9a7d7ea1e6a7763c38261ed2d519378b78aaf52061ec50fe998715abf48db9bc56a619e1f66b9c18863f483a872c1d5615696da6f7383eacfc726ee540bd0114c02ce296b5a2901cfcdd313519036aaed9b52e5cf902762e02263569e406431058d6d19326f3fda25338cc1ea70196651b153b1c39250b019c633acbee61b8794b8f51fa5195d3204cf1683909df41e8", 0xd4, 0x5}, {&(0x7f0000000100)="369895b952dd7904f3ebfe542759f76c9bc183da9b5c26f13be9557a8f3f8785761d0445454a559d3b174aad7589ec7ee423a88d2521209d6645748c111f76b96d7f7f6b8648ec5ba30923a4dd09ad003242f1e92e94ef743ca92ebbfbe3928939c4e61748fba955b7adc140708cdb3fffbbe918e4e870222565318c476992dc93bbfef3c5f685ed390bcdd11ddf5d52c969aafac2396157bc422beb08a4ff796cbb5c2f9adf9d7307a2b67b646478fa4997282424755f96d9f3fd9f016d5b63d87952dbac00e7c8", 0xc8, 0x5}, {&(0x7f0000000200)="254111dae76871933c4e769fbdefef7049daf60a88715a6648438e9e", 0x1c, 0x9}, {&(0x7f00000007c0)="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", 0x1000, 0xc87}, {&(0x7f0000000240)="ca563db65a5a8538adf0a0954a98a121b141c4221f5189bf5935edd00351a02165512307c5cb01c73d334da05df03d531733db0d3695d2e752137d455d230ff2d14e0ce53b1c4b26e87e9604802ead1fcd71f69103c75f0f25aef839c36242ccd0950acefec331a2817ca913e5eb549c0dd753bd1f1df93d998f950f88424f230ba325c061f4ec7c0f0a5f1559b68f7f46df3b", 0x93, 0x6fad}, {&(0x7f0000000300)="f73f131c8d60defd925e4936d56980dfd121ec0fe9f7af61a05645789aeb410429cfd4d90b0a149b3545d80b9cc56bc09b2c8a0f70ddcc2d803492c4f775e3b7e4", 0x41, 0x8}, {&(0x7f0000000380)="69d7872aec4ed385ef38d7ad375f0ec365bf3cc59104823f98631aa9fb154602ec1e41b93100fde19dcdc3bb67419590fef7dc495cc1f24dfc20dd1d7bd7728477", 0x41, 0x6}, {&(0x7f0000000400)="890bdb589b3f1cdca5a79fc6b1f0ecc78ddf3fb6207dbe7e8c79115afe42f8411343cb23cbe870d0606cd8ec6cbc56cc06d48c2f929d822b5fc5bd21b2e30d8da3abb4d190a9adb00cbb28f8f17d5805e429acdd1d641922", 0x58, 0xfff}, {&(0x7f0000000480)="8712fabb1e8f199525bd630966d51d82ea016732060f5a462824f84ccdcc5c7faa37bc29534449c397b5bd29bd99295120c637d1c52874044a50649b55404690e8ce040f4b2a113e1a8aec3cc8697bd55dda0bf2a9dbffdaa8e6addee9e2fceb34c372799cbd42e2ae428c51a48e18a64098f787a50e107eab2699b8f1e1c150673e041af5e075a8fb", 0x89, 0x5}], 0x8001, &(0x7f0000000780)) setxattr$system_posix_acl(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='system.posix_acl_access\x00', &(0x7f00000006c0)={{}, {}, [{0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x6, 0xffffffffffffffff}, {0x2, 0x7, 0xee01}], {0x4, 0x1}, [{0x8, 0x5, 0xee01}], {0x10, 0x4}, {0x20, 0x3}}, 0x44, 0x2) r0 = getuid() mount$overlay(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f00000017c0), 0x85, &(0x7f0000001800)={[{@index_on}, {@index_on}, {@index_on}, {@index_off}, {@xino_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off}, {@index_on}, {@xino_off}], [{@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '\xde-$-*{]}'}}, {@euid_gt={'euid>', r0}}, {@fowner_eq}, {@uid_gt}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, 0xee01}}, {@smackfsroot={'smackfsroot', 0x3d, 'system.posix_acl_access\x00'}}]}) 16:27:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="509a70db"], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 1850.772637][ T2229] binder: 2227:2229 ioctl c0306201 20000000 returned -14 16:27:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000080)="a221ac63"}) [ 1851.159250][ T2239] binder: 2237:2239 unknown command -613377456 [ 1851.165766][ T2239] binder: 2237:2239 ioctl c0306201 200000c0 returned -22 16:27:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x1200000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:34 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000080)=ANY=[@ANYBLOB="00821529425d356a13d00d6d37c21d74d0356089a4dca08118440b086b8688936bc1f47b"]) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 1851.281925][ T2242] loop4: detected capacity change from 0 to 111 [ 1851.477124][ T2250] binder: 2243:2250 ioctl c0306201 20000000 returned -14 [ 1851.486576][ T2242] loop4: detected capacity change from 0 to 111 16:27:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00'], 0x0, 0x0, 0x0}) 16:27:35 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) mmap$snddsp_control(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x83000000) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) syz_mount_image$befs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x954, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="cebdc26af02e06303abe53dc37072a8324707dde3dc538a8d3223d7de8f9f9f5ff41c95bff6762cf334a233c378d9b311334768b53586d2ef23b9cec3cd45d294b7dc51a77b390ae6ebae2bc11e5ef78f864575cd295416d7794715b590d2969da279865da3cb1532a37bed779677640780bbf92e0d1857e38e1c735bfde9def6fbcba89a0e93ff3f3a2cdb9dab0753256b394531eaa2872f3f7c3ef2c30bffddc052bfa54488fa0ce1514a9b00158181b0b12faf94916a58a4c2c0b63b259593e1475353db3bd87cf544492267086aa94d71620ab5a74", 0xd7, 0x7}], 0x5, &(0x7f0000000280)={[{}, {'qnx4\x00'}], [{@fowner_lt={'fowner<', r1}}]}) creat(&(0x7f00000002c0)='./file0/file0\x00', 0x41) 16:27:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000080)="a221ac63"}) 16:27:35 executing program 4: r0 = openat$autofs(0xffffff9c, 0xffffffffffffffff, 0x800, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000018c0)=ANY=[@ANYRES32=r1, @ANYBLOB="ff0300004000b80650c79b48196a0f10bd579c58c97fee945a020034288e89003e9dd3bbdd21d0eb38d72332143d05db29148d17733b157d0f148fd6523a4e0c907d21177b974713548ad53b4bb12e51d7b302e4fc826f1cb038107b31e3a54683caab8473bb7ba417a15ce756e90fd58ffbd58000ca224817ab0cfab728c015c54086f3"]) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) r3 = dup(r0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(0xffffffffffffffff) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x3f, 0x9, 0x2, 0x401], 0x5, 0x80000}) 16:27:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1852.038797][ T2262] binder: 2260:2262 unknown command 64 [ 1852.044597][ T2262] binder: 2260:2262 ioctl c0306201 200000c0 returned -22 16:27:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x2500000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1852.118680][ T2264] binder: 2260:2264 unknown command 64 [ 1852.124530][ T2264] binder: 2260:2264 ioctl c0306201 200000c0 returned -22 [ 1852.276191][ T2270] binder: 2266:2270 ioctl c0306201 20000000 returned -14 16:27:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="34aedc04633e00e73d4ecee20914691187f327043bf90a526a4df54d2613158c5776946c47ac14b8574516b7e74340a005cab41f724398e29b62e87511fb4ee4dc9e77e9e552cb309f57b1d689578ffa832dff0f0000a527a61b61d2bcdb02a21d85e49331b84d5cb99cf051606c276e215a67d2e36d4a6bf07a91f7f97acaba1bffe2ed93164f16bd697bf9525f41b638b2f896d6e4a2312b9a42bd825e4d441ecb6186156b8bf7da"], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x800) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff50) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) dup2(r3, r0) 16:27:36 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000280)={0xe777, 0xff, 0x2, 0x1, 0x4}) r1 = openat$autofs(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x80940, 0x64) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x120, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8b2, 0x5a}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x5}, {0x9, 0x7}, {0x1, 0x7}, {0x4, 0x1}, {0x9, 0x1}, {0x3f, 0x5}], "d8c49565b17faf1c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x8, 0x2}, {0x1, 0x6}, {0x5, 0x1}, {0x6}, {0x6, 0x2}, {0x2, 0x4}, {0x3f, 0x4}, {0x7, 0x5}, {0x2, 0x5}, {0xff, 0x6}, {0x29, 0x7}, {0x7, 0x1}, {0x0, 0x4}, {0x7f, 0x3}, {0x1, 0x4}, {0x4, 0x2}, {0x3, 0x6}, {0xd6, 0x7}, {0x7f}, {0x82, 0x4}], "be67e8dc43a2c978"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x0, 0x7}, {0x6a, 0x6}, {0x80, 0x1}, {0x8, 0x7}, {0x20, 0x1}, {0x0, 0x4}, {0x5, 0x6}, {0x9, 0x1}, {0x7, 0x7}, {0xff, 0x7}, {0x0, 0x6}, {0x3, 0x2}, {0x0, 0x1}, {0x7f, 0x7}, {0x88, 0x1}], "c486811b824aa264"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x7, 0x3}, {0x81, 0x6}, {0x75, 0x2}, {0x3}, {0x20, 0x6}, {0x4, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x4, 0x3}, {0x7, 0x2}, {0x5f, 0x5}, {0x20, 0x4}, {0x5}, {0xcb, 0x4}, {0x5, 0x1}, {0x1, 0x2}, {0x0, 0x3}, {0x3f, 0x1}, {0x1, 0x5}, {0x7, 0x6}], "d65b645415df2076"}}, @NL80211_ATTR_QOS_MAP={0x2a, 0xc7, {[{0x1, 0x2}, {0xe9, 0x6}, {0x1, 0x3}, {0x3a, 0x4}, {0x5, 0x5}, {0x3, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x71, 0x2}, {0x1f, 0x3}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x6}, {0x60, 0x4}, {0x40, 0x7}], "5411307a79e335ef"}}, @NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x7e, 0x7}, {0x4, 0x2}, {0xb0, 0x4}, {0x3, 0x1}, {0x0, 0x7}, {0x1, 0x7}, {0x2, 0x2}, {0x1}, {0x3f, 0x1}, {0x1}, {0x7, 0x1}, {0xac, 0x3}, {0x80, 0x1}], "817bfd130aaf12b5"}}]}, 0x120}}, 0x40) 16:27:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000080)="a221ac63"}) 16:27:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x5c00000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1853.059176][ T2280] binder: 2279:2280 unknown command 81571380 [ 1853.065596][ T2280] binder: 2279:2280 ioctl c0306201 200000c0 returned -22 [ 1853.169491][ T2280] binder: 2279:2280 unknown command 81571380 [ 1853.175971][ T2280] binder: 2279:2280 ioctl c0306201 200000c0 returned -22 [ 1853.276312][ T2290] binder: 2281:2290 ioctl c0306201 20000000 returned -14 16:27:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000080)="a221ac63"}) 16:27:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:27:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xfdfdffff00000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:37 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) quotactl(0x2, &(0x7f0000000000)='./file0/file0\x00', r1, &(0x7f0000000040)="b7ae92bf8fbc675d8c7164046df1e92d864fa3881ba02718d37260231d9b01ebf8384721a0d1beb6f25762e833608ce6272e0d860fdadb768bbfac8c49fb3f70235374adf46a33a8af783474b86a7adc30884f24e2a1fe8dc4432ff86caec0a2ddb32f2e4754924da7814d62b3c90c6e683cb81a0f178723fc6fd8d2b37a3c0da14dfe568980d2928b51de3d7ee0dd6e1f32d526181c24c66f50a06a0cd9d73bff929be8db3a782546") 16:27:37 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYRES16]) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) fchown(r2, 0xee00, 0x0) fcntl$setlease(r2, 0x400, 0x2) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r6, 0xee01) setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=0xee00, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="040007000000000008000300d22aac4cec5e5b40e9a3278b89e6fe51589d0ac33d557d92af003c1cc84b032b935ecf097973bcf575ae59059e2f3dcd46813837f8932bbdf25089fede0400c765aa2853da6d3367afeaabd9331bee9d98fd", @ANYRES32, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="10000000000000002000010000000000"], 0x6c, 0x2) [ 1854.024226][ T2300] binder: 2294:2300 ioctl c0306201 20000000 returned -14 [ 1854.075435][ T2298] binder: 2295:2298 ioctl c0306201 200000c0 returned -22 [ 1854.137616][ T2298] binder: BINDER_SET_CONTEXT_MGR already set [ 1854.143946][ T2298] binder: 2295:2298 ioctl 40046207 0 returned -16 16:27:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x9, &(0x7f0000000080)="a221ac63"}) 16:27:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6b000000f4fb9c1617acd1b1af3eef97d1ddecf70f212f85dada"], 0x0, 0x0, 0x0}) 16:27:38 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x81, 0x2, &(0x7f00000000c0)=[{&(0x7f0000000080)="a0f8ed3c8319fb36ae2ffcefa377cc62a05687a12fd53824a78e4f", 0x1b}, {&(0x7f00000007c0)="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", 0x1000, 0x5}], 0x2000008, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@discard_size}, {@quota}, {@discard}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x5}}, {@nointegrity}, {@grpquota}, {@usrquota}], [{@hash}, {@context={'context', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, '+.:$\'/#%'}}, {@fsname={'fsname', 0x3d, '@\\@)'}}, {@euid_lt={'euid<', 0xee00}}]}) 16:27:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0xff00000000000000, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) 16:27:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:38 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$ptmx(0xffffff9c, &(0x7f0000000200), 0x82802, 0x0) ioctl$TIOCL_SETVESABLANK(r2, 0x541c, &(0x7f0000000240)) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x88, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x8, 0x4, "f7f21f10"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_SEQ={0x10, 0x4, "fadfd00024c95c6abdeb4af1"}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "8e5a21"}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]]}, 0x88}}, 0x4004851) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="03770c3854"]) [ 1855.065461][ T2323] binder: 2318:2323 ioctl c0306201 20000000 returned -14 [ 1855.118068][ T2325] binder: 2320:2325 unknown command 107 [ 1855.124280][ T2325] binder: 2320:2325 ioctl c0306201 200000c0 returned -22 16:27:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000080)="a221ac63"}) 16:27:39 executing program 2: ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:27:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x630b}, @increfs_done], 0x0, 0x0, 0x0}) [ 1856.061967][ T2345] binder: 2340:2345 ioctl c0306201 20000000 returned -14 [ 1856.084477][ T2346] binder: 2339:2346 unknown command 0 [ 1856.089972][ T2346] binder: 2339:2346 ioctl c0306201 200003c0 returned -22 16:27:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xb, &(0x7f0000000080)="a221ac63"}) 16:27:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:40 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) fchown(0xffffffffffffffff, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) fchown(r1, 0xee00, 0x0) fcntl$setlease(r1, 0x400, 0x2) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r2, 0x0) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0xee01) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r7, 0xee01) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r9, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010000000000000002000700", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000500", @ANYRES32=0xee00, @ANYRESOCT, @ANYRES32=r2, @ANYBLOB="040003000000000008000700", @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r7, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="08000900f007cd2cefe3da3949f89854ae9e9e9cf2d287baa15f82efdc449ee1d8679deb7fb35eec772e981c6562822ee55c953676a8e75c01c73acf5561c2b25bb333df4a1493f25086b9caeb543c58010bac4b8122f60d38079f94879f51c692e720baf9d961f3cb5bb2c37d09beca10ece79574a78c1273507197456a7263d2", @ANYRES32=0xee00, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r9, @ANYBLOB="08000e00", @ANYRES32, @ANYBLOB="10000600000000002000020000000000"], 0x9c, 0x0) 16:27:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) r3 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)=""/239, 0xef}, {&(0x7f00000002c0)=""/55, 0x37}, {&(0x7f0000000300)=""/37, 0x25}], 0x4, 0x3e, 0x8) fchown(r2, 0xee00, 0x0) fcntl$setlease(r2, 0x400, 0x2) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r4, 0x0) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x4, &(0x7f00000000c0)={[{'-\x18**\\\xcb'}, {'qnx4\x00W\t\xe7\x94\x17\xe2sU\x8e\xe6S\xb6`,$q\xf8\xe4u\x8e\f\x8b=\x85m\xcfH\x1de\xce\x13Z\x85n\xda\xbf\x88\xd7\xc1\x04\x8d\x88\xa5\xab\xabG\xde\xe2\xb4\xb7(\xe6\xba\x92\xe3\xb0\x9b \x9f\"\x85\f_\x16\v\xbe\x013\x85{z\x04\xef\b\x91\x9a'}, {'qnx4\x00'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@euid_eq={'euid', 0x3d, r4}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_role={'subj_role', 0x3d, '-\x18**\\\xcb'}}]}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x3) 16:27:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x630c}, @increfs_done], 0x0, 0x0, 0x0}) [ 1856.898046][ T2361] binder: 2355:2361 ioctl c0306201 20000000 returned -14 16:27:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xc, &(0x7f0000000080)="a221ac63"}) [ 1857.190011][ T2369] binder: 2368:2369 unknown command 0 [ 1857.195661][ T2369] binder: 2368:2369 ioctl c0306201 200003c0 returned -22 16:27:40 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) fchown(r0, 0xee00, 0x0) fcntl$setlease(r0, 0x400, 0x2) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(0xffffffffffffffff, r1, 0x0) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x1000, 0x0, &(0x7f0000000740), 0x8001, &(0x7f00000000c0)={[], [{@uid_gt={'uid>', r1}}, {@smackfsroot={'smackfsroot', 0x3d, ',.@*'}}, {@seclabel}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) 16:27:40 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x200, 0x21) 16:27:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x630d}, @increfs_done], 0x0, 0x0, 0x0}) [ 1857.660570][ T2377] binder: 2371:2377 ioctl c0306201 20000000 returned -14 16:27:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1858.098677][ T2387] binder: 2386:2387 unknown command 0 [ 1858.104764][ T2387] binder: 2386:2387 ioctl c0306201 200003c0 returned -22 16:27:41 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="b20000006f4d9025f24d4dac1638fe5ad1f8aa876654e9aa1dcd6b93c92f14ad7861282126d917ae182f83af7ee4c8800c11baa4097a6935c3a7028a7d45c84f75bf428b352ebb303c2f2fddd60c7585ba7d21d8f5255295f219f1ac6de157f34908512b7659824b2ac1bdf8dfcdeb260ad8b5bcdf50d4d22577eaf6f4041f2b6483772823132183ee29cfe312aa5dc60997a01fd346e51dea70d567865956aba7863fe5f2697510a2ea58a98840faaf728d970b751b"], &(0x7f00000000c0)=0xba) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], 0xd5) 16:27:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xd, &(0x7f0000000080)="a221ac63"}) 16:27:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:42 executing program 4: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x6, &(0x7f0000000400)=[{&(0x7f0000000080)="69343cbc", 0x4, 0xffffff01}, {&(0x7f00000000c0)="c36bd4a6c5d42e980ae75b27ed8fb629cb9283c0aa02c20743fdf82617a460058362207d18580ae689df7d876e1a45ed64ec4af2af665bc6b94b4d03cd37ba0e8aa7c420d93c1ee32337bfc1866a57cd71a6ab8f27701e7e656641c7ccb8ed86f4c430c2c123b6fa210b40ba2176f9b62ef1794bfc39d8ee0e2148c7fb4c64be4a8e8fcecdcb56da78dac40b275248452f666769aaa5f08b23189192678153989e35dcac8d", 0xa5, 0x39b}, {&(0x7f0000000180)="888f6b99adfa", 0x6, 0x4b}, {&(0x7f00000001c0)="b9dda2b53b388bae19c906cb3c41b22f065566edfa05caa90de53d680d78fb07be2c89b43e23a9cbacf1d701eb6c15f9361c239bdd579ec813590eba996c9bd68114f6e56b0720bc6faa44a91f1963aa473dd4a8c869dd3c7d16f50cae96f743f178db2745b6a0f51756fa9384b2f003f89c5e846dcdc89a7a01f3c2e61d1cf5ba97b4f6d36aaca83fbcba85a700", 0x8e, 0xa}, {&(0x7f00000005c0)="abb54de4abf596873158ccd5ca3143d7e0ac7f94364fc8d593dae98bf5c7bf929cac244c2d042e07d16ce91c0163db98a7de419b6a5b0b5f3f0c9ac8da614df4d097d4925432bf8189475502761ccfa04367714a4c56c33ca73cf590a7944841d8ecf0950a5b312230d073ca2636af12ccd3d06366f4b4754aa4e0e1ceb452a248955d7d6fdbaedf6eb995a84b783cf16c0c266cb5b27fcc3348a8222ee0d8731cc85fc7b386f0b0b3978a085f2a7b846bc40a03fca2ebb7159ceb44a6c92af817b02cde078c41b16ade2578bb406c29fc", 0xd1, 0x200100}, {&(0x7f0000000340)="8a31984f6e1bcbb5a1a744bae0102c6ccf8514a826a958dd8fba4b3b31e94de234cf79604987b80886dacd9cb29f0258aa5242a1ac9fa2baf84bf55b423dc3096aaef909205cc4a0295e8b6f33f074d1e6da1786430e9aee933cde6de05a930bc89b1d2b1027f80071ad3bccece481ef03e4ad415980e3e6ee9251be74c00ff5a05cb40482e36f86d83448eeed373aef0e57e73cabf4b60bd60d82b576ecb2d780eeadcd470d390755b6a80f2c76c7a85381256e", 0xb4, 0x5a1bbb98}], 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="ac5966a62851b5dcf3f3103fb04353431fa17870cd9c2df2423533db0e99ce0600000000000000040f9a30f721eaf4b56db8f4a417729868f10c4952c678351de1dba5b9157c613c81977cb104b3ba827ade7f98"]) 16:27:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40046302}, @increfs_done], 0x0, 0x0, 0x0}) [ 1858.653385][ T2396] binder: 2390:2396 ioctl c0306201 20000000 returned -14 [ 1858.828842][ T2400] loop4: detected capacity change from 0 to 264192 16:27:42 executing program 2: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000040)={0x0, 0x4, 0x6, 0x100000001}) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000004, 0x110, r0, 0x46c21000) syz_mount_image$gfs2(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4, 0x8, &(0x7f0000000740)=[{&(0x7f00000008c0)="f120b338eabbda0b1db7dd42079de810bbf2f87209f88687508ba73d36341037c7390401849e67764956ec5b268c833b72f12b454c42a9abadea18133180b8ccce7bb43dfc3c5316b033fe7bf124669b862039690cc53b845af9074a354ada17066eb62869978e374ffd9db5b90f20c310063e7806c8d11ab1669a8df9e78aa1896e18456f03b4f490510834c39410048e832d8fd6ac0ee2fa07a45add2b711779e82b26a0104c44fdbd82a6565142bf0e7fe4a4f68e494ad0385a5e01d35ed8e0bd5663b8cb5caf613a4c35ae870e2808e47095e60aaa8a0a42e4eaee895c135531b11a7b90142c5ad1d54d6987b73fb27886d5e66cbb8f756edde476eb29cf69af1286fb0454d65f8450d06fb493f900"/286, 0x11e, 0x7}, {&(0x7f0000000200)="66ae59958a5c643eb3b0db97249426322d0be9c454773c441efc5a76918ebdcd30ec0a763b5d87799bf63b77a59e1b4248c4c318a3621cda246a82d1bba2895433ae36aee24aaf62d9ad82678cdfba3f25c2d929c6b23b76d986b80f1b8e3b7e9065894a845727e106e1665628503d017dd109779d3b845af6a3b7ae9e9fdb02969e5804e00ea17a66b76963ba57133596913d89ec102d8b7615a9a948b22f94db57b70a0f3f0d3ebc5689801edeb4a3af05d243f2ec", 0xb6, 0x5de}, {&(0x7f00000002c0)="49110319a22c19e87a99f03783b65cf3cf151aa1ffa0e21c716b6be310bdb4ec94dbcef42a7ca24f5cc4b3c1be4cb317c6f0eed725614576d50f9ec50edc9f2a640b1b86e62915b4f4b37dc93bd5c3d2e57f7b3b742b4f61a230ecafde1ca847e41369b0372330ceb5538f2409b3956f699af5fbf973df9926ed9c740e58389795f74137d95f134673bf58f89c6db129c4ca658b3dc758da270a2bd73f319d52576b4db8fffe1f1c30e0d0ea336984eb923714c2855b381902b91c5012025b5bb95b131115864b3f4cef16c0a725262b8d3edc8e39f045", 0xd7, 0xf2c9}, {&(0x7f00000003c0)="ed64156f4ca07da15af5ec4a3abfb6f46ae88bc70bdcba719486ecac489144175b77c8b79a0a09a5ba4919333b8b523b356ab4284c5252865f2cbbdeaf643d0560f6b9050f9845da02fa1a5fba51a14d13a49f64e66b21444e544a2c65f987c9a4e268776a7a3a6a20a253910a2e001019fd80edcd7092202495422301ea73f5cbbf", 0x82, 0x375d}, {&(0x7f0000000480), 0x0, 0x8edc}, {&(0x7f00000005c0)="b26804c70af82835f7a45c339ce9e172224b3724eafdeb2b0b23d0991242718e6e8e53c52317d81d60f0e7a2060b8b03a2506b6664cb5d4030a2303b433e188a576178f036b4d79dae50200cd4d40f3d31c1ef2d45a4207c73b774316070aacfc0d16230795adac4ecbed9e8531f1736d245ccbc60f31f65acb31650e6262635b1768327c8ca253f", 0x88, 0x1}, {&(0x7f0000000680)="20c7bcd629aec5634e8ff8b24c1191aec15458e8f435d12aab3f167855a2b309bbe91984ce1345f67b8e4c07e79186adee834bac4af396a8595822e3ada2a2c1abc46d33ffd014fe5a0d96ce7cad9af82f6da2aae168543f0429bc2999d6480a8257a84b9f16d1ff8e97ca601b4e1f6023d88268724a94290c66872f23c2d953844a70b5b8ded0e8160c1c05a2aa72f87f383028d64e4e0806b1f14de54e07f5ef57aa63169808965358d51b3703a93b78b2806c14ae48dfc7f068c56009", 0xbe, 0x3}, {&(0x7f00000004c0)="60a04fcc99a8c3ffa6fbc1acb2", 0xd, 0x9}], 0x1000000, &(0x7f0000000840)={[{@norecovery}, {@nobarrier}], [{@pcr={'pcr', 0x3d, 0x30}}, {@obj_role={'obj_role', 0x3d, '*'}}, {@audit}, {@pcr={'pcr', 0x3d, 0x35}}, {@dont_appraise}]}) 16:27:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1859.064411][ T2404] binder: BC_ACQUIRE_RESULT not supported [ 1859.070319][ T2404] binder: 2399:2404 ioctl c0306201 200003c0 returned -22 16:27:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xe, &(0x7f0000000080)="a221ac63"}) 16:27:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40046304}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:42 executing program 4: r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x18, &(0x7f0000000080)={0x20, 0x22, 0x11, {0x11, 0x23, "2bbc0ded81a8a51d08592c8e0b8f4f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x71, @string={0x71, 0x3, "64d7e4ecf85245ece5a0980c627bc5b08bd5ea8842ec4c682fb80b0f86c83be95261ffad69ff89704e6ae1216cd93a825e006ac3b3cda8543e00f215ed823b036ccd93d253314437561c33949de54424f16c150ed236400e1dfbf157d02e7918c75b8f9208334febc61be18050da60"}}, &(0x7f0000000140)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x81, 0x5e, 0x8eee}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x5, 0x2, 0xfff}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x3f, 0x8, 0xfbff, 0x1f}, @wireless={0xb, 0x10, 0x1, 0xc, 0xeb, 0x5, 0xf8, 0x2, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0xc, 0xf001}]}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0xc, 0x1f, "aa39a5e5", "8e14e24a"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x0, 0xff, 0x81, 0xff, 0x0, 0x7fff}}}, &(0x7f0000000700)={0x44, &(0x7f0000000240)={0x20, 0x1, 0x59, "ecbca2b4246081e18125472fbb0cccb24ca77d14df5e8b6af2ea5f82cd0b09524c4ffcb9384d663c4eb34cccd14fe8b21747cd89b0f07b0ecc2fd2c32429b1c39548f7944ca8d4e40bf71c799e1d296965ba936ef5c6758002"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0xe1bd4c37fac6b092, 0x20}}, &(0x7f00000003c0)={0x40, 0x7, 0x2, 0xafb8}, &(0x7f0000000400)={0x40, 0x9, 0x1}, &(0x7f0000000440)={0x40, 0xb, 0x2, ' 6'}, &(0x7f0000000480)={0x40, 0xf, 0x2, 0x800}, &(0x7f00000004c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000500)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "16dc"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x20}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x21, 0x1, 0x70}}) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) 16:27:43 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x3, 0x3, 0x2, {0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)="52080ff916e4c6903a1af0379435b15678111f6b634f9f68c1b49f45a89cca711972a835a420638f5cf6d9b25abbb42cdbaa22e209bca42a72ffe2fb379fe3f8bac298129f5605029df1934dc6b6bf0644f06b515ddcb9e66957a662d903eeec71beb9180bb5f5bd30b21dfe3c980f329c8b3d3db286100b5988", 0x7a}, {&(0x7f0000000100)="f2c5beaaa2fe2284efa48e9b3d7e5a864772c1015dfdbf82fab89b981c5587cc0b5821115b7b06b1612ceb512610501589fdddded7098ffd67fa148dd132fd025125995dd61b2916ac359e48956e895fd865a88afbb43a994ca409f267e41ef7d320d257e0ac3ff301ab63583abff1d7e7285fb66546bd1ec31c9de1be79abaedeb7ec6ad68f064a776cf071ba8b03a7d90d03970554ed6cf60eecf662909ef255e1a57670152701424c68ef5d30a17a90e60d6e651f1becf28cad80111e3aa27c08e43ac8642e679c", 0xc9}, {&(0x7f0000000200)="f47d190a190741b9b37cee2bf43426affb4cef44be61fe313a831ca86d88cba5f90c7c41eaa8b4b04e4e28f96c576b23b20d91a63b204cf7f2020df139692bda7f787443fd88c11fb9d4a6e0de7f29d91713857ada5de056d1cafe5bd11d3a1fd5c250c1323ef779abf4f1dfc4c3eaa1", 0x70}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000280)="a7ee992699e1faed3935839a2ec4c3c9760bfa3ad8bc78593b9d80b83bf6fd2235e6e6fa33f717b1bb324a62fd6ce3a9ffc5a7915a74b6ee4791fb60ecde4d071ae98128786fdc6a2dd4c7db6b65fdf06bcb5738a8ca4913dff9de2620a9e4ecb954fbb29a7a5a4f534324359de88f2f581a1701f72ade7012832585f0983d8d57da5871cfcf4d6dfb88142cf019657ab123ef9c1000140c2abc1035f43df523a621aed030c50aa1c7c0757f1fdbe389edaa182b22929eca025eb4cae95a058ff43c478a939d5f0116ab2c23935b4d4463adeaaeed4a8aedd966", 0xda}, {&(0x7f00000017c0)="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", 0x1000}], 0x6, &(0x7f00000003c0)=[{0x1c, 0x104, 0x792e6a73, "8afe4d7990dc7799cae2ce294bac"}, {0x34, 0x111, 0x1000, "28098a92360606b5db9d40b4539c723aa5b351271de640f608bb821fa05dfc044982d6a333"}, {0x38, 0x10e, 0x5c5, "833626d209cb3959bb711885b0dc25874f5a6ba86392c29008555b6e4cdd4cb32a950bf44a9e47502085"}, {0x78, 0x107, 0x6, "6e15572aa234f05e04778c288ceb5e5114258c97f44bd3003cea6d16a35b7bf7d9b84b331289e21d0277ccba6ff3b789e315422989f8f0820843d48ae82b463d4b11093cf5744c9c0e2076e085252fb8515cbf76dc5019d86980c18e7e79dbff89bc2d43cf3ec42f06"}, {0x28, 0x115, 0xffffffff, "e7ed8a35097642129c50e6f52e5610d817eccdb41efff10086633f"}], 0x128}, 0x20004000) [ 1859.577802][ T2411] binder: 2409:2411 unknown command 0 [ 1859.583592][ T2411] binder: 2409:2411 ioctl c0306201 200003c0 returned -22 [ 1859.681539][ T2414] binder: 2412:2414 ioctl c0306201 20000000 returned -14 16:27:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40046305}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x10, &(0x7f0000000080)="a221ac63"}) [ 1860.072886][ T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd 16:27:43 executing program 2: ptrace$setregs(0xf, 0xffffffffffffffff, 0x0, &(0x7f0000000000)="afe567c2c18b9d3d93503e8d6dfde0e3e625482da13adfbb234b731fb3b43863a40322cb1f04f22df5344a3deefe871ba0109fdd9a6c51acfaac37fa86f547c4776640e52b666683c5bc7ecd5c03f45bb95e952d6ddc2f408d6f1383e302c5cc4f306db00c43097625cb046d0d10808e8a005cd50b00ec3178073a25c147b57ba94e62b8a7c3d34960ae08097eeb38619cec958256") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x8a, 0x4, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0xfff, 0x3, 0x4, 0x2a8, 0x96, 0x80, 0x0, 0x6, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) [ 1860.237789][ T2426] binder: 2424:2426 unknown command 0 [ 1860.243653][ T2426] binder: 2424:2426 ioctl c0306201 200003c0 returned -22 [ 1860.421018][ T2430] binder: 2427:2430 ioctl c0306201 20000000 returned -14 16:27:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40046306}, @increfs_done], 0x0, 0x0, 0x0}) [ 1860.626022][ T7] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1860.635485][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.645132][ T7] usb 5-1: Product: syz [ 1860.649480][ T7] usb 5-1: Manufacturer: syz [ 1860.654531][ T7] usb 5-1: SerialNumber: syz 16:27:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x11, &(0x7f0000000080)="a221ac63"}) 16:27:44 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000001c0)="862c6274f29d1f9911ca9260c294837516a4c4554c6f84bf97652433475163c6eff85c9b6dc3da77926fa30c07164c105963c918eed471f6776ad3c1fbf1990a489082ec812f606780722125f36749eca69a73e4bbb0f45b52da07e51193654b90ae564023d467d0e73da948e683f8720ea1a072c7e6e8eb1780897cd034918b", 0x80, 0x7d}], 0x4000020, &(0x7f0000000780)) openat2$dir(0xffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0xac240, 0x183, 0xa}, 0x18) syz_mount_image$affs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x6, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'[\'\xac+(#],$&'}, {'}/!['}, {'qnx4\x00'}, {'qnx4\x00'}, {}, {'qnx4\x00'}, {')^]-'}, {',\\,-'}, {}], [{@obj_role={'obj_role', 0x3d, ')^'}}, {@measure}, {@fsmagic={'fsmagic', 0x3d, 0x5ce}}, {@measure}]}) [ 1860.828692][ T7] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested 16:27:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) r5 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r6}, @enter_looper], 0x10, 0x0, &(0x7f0000000040)="aa671b5b4afe602c3d141ded1ea8d7f4"}) r7 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r7, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000d80)={0xf0, 0x0, &(0x7f0000000c00)=[@increfs_done, @acquire_done={0x40106309, 0x3}, @enter_looper, @increfs_done={0x40106308, 0x3}, @clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r6}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000a80)={@fda={0x66646185, 0x5, 0x1, 0x100000a}, @fd={0x66642a85, 0x0, r7}, @ptr={0x70742a85, 0x1, &(0x7f00000009c0)=""/186, 0xba, 0x0, 0x1b}}, &(0x7f0000000b00)={0x0, 0x1c, 0x34}}}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b40)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000832a64080000200000000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r1, @ANYBLOB='\x00'/12], &(0x7f0000000bc0)={0x0, 0x18, 0x30}}}], 0x6b, 0x0, &(0x7f0000000d00)="42c1d636e878f009957d0ba3d532549e4ea6b072707a98e62d0303f841201cd9643e4ab05c888cb718a23cc30a91a836d593e2c7016f3d18d2767704679f2f40fbfe7b0309977fd144ae2e38334f22cfb41e9117ab43c24a990f8ecbf33f923abb6719ff334b2070b50671"}) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000880)={0x10000, 0x10001, 0xff}) openat$ashmem(0xffffff9c, &(0x7f0000000500), 0x4000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000840)={0xfddb, 0x0, &(0x7f0000000600), 0xb2, 0x0, &(0x7f0000000780)="fea1c262f838b2a2bcb251891be770f1012fa0e5455868d38028c904431dcc9c7457f2e88b618572d9b990e142c9fc9a4c59e4e9c637953e05ff372685329701803458878888b7d2888c1651d6349d5bf85ff92c09b92a0d946edbae58ad11a369603e8c8a2e46873bd75f5a6ef33f24fb19a60f2404b66ab89d674c6b8dd435c96428dce0b7e810630773fd752b21103652bc04ceed241c461909d817d8397ed6ad00"/178}) [ 1861.088613][ T2443] binder: 2440:2443 ioctl c0306201 200000c0 returned -11 [ 1861.110479][ T2444] binder: 2441:2444 unknown command 0 [ 1861.116273][ T2444] binder: 2441:2444 ioctl c0306201 200003c0 returned -22 [ 1861.137934][ T2447] binder: 2442:2447 ioctl c0306201 20000000 returned -14 [ 1861.158517][ T2443] binder: 2440:2443 unknown command 0 [ 1861.164295][ T2443] binder: 2440:2443 ioctl c0306201 20000840 returned -22 16:27:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1861.264883][ T35] audit: type=1800 audit(1625588864.907:4): pid=2449 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=13905 res=0 errno=0 [ 1861.292842][ T2443] binder: BINDER_SET_CONTEXT_MGR already set [ 1861.299014][ T2443] binder: 2440:2443 ioctl 40046207 0 returned -16 [ 1861.537625][ T3129] ieee802154 phy0 wpan0: encryption failed: -22 [ 1861.544325][ T3129] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.573895][ T9902] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 16:27:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0xe600, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x101) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) 16:27:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40046307}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x12, &(0x7f0000000080)="a221ac63"}) 16:27:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x802) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x2) close(r3) splice(r1, 0x0, r3, 0x0, 0xf9, 0x0) r4 = syz_open_dev$binderN(&(0x7f0000000180), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xa}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000340)={0x2}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000080)="1f", 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r5, &(0x7f0000000000)="672b5064774fda68d86a7120c809ef7084e294de4dabc806661a1f5dc673e880539fbcfb601b70691a"}, 0x1c) r6 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, 0x0, 0x0) splice(r2, &(0x7f00000002c0)=0xa6b, r6, &(0x7f0000000300)=0x6a, 0x83f6, 0x9) openat$pfkey(0xffffff9c, &(0x7f0000000240), 0x240000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000280)=[@register_looper], 0x0, 0x0, 0x0}) 16:27:45 executing program 2: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f00000005c0)=ANY=[@ANYBLOB="b367d7ed7b0500e4e90043006a23da65df44429ec3c9045bbefafa7e5270dfa9bff3202e9ad825db3130fcb4e330f56ae1ed6ff45229b3a606957ee3d0cd717cd1d1999d6ebd96155dde9303f9a7799f11dc692b51152aa9bc49ef9908306f2bbd3966bd82bf5f2fde19df486ece78ff59f39bef8f5fcbfaa58cb1c8193ca513766c1c6ea5"]) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r0, &(0x7f0000000180)='./file0\x00', 0x6000, 0x20, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r4, 0xee01) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0x47) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'tunl0\x00'}) setresgid(0x0, r6, 0xee01) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r8, 0xee01) setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, r8) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000400), 0x10) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) fstat(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {0x1, 0x3}, [], {0x4, 0x3}, [{0x8, 0x5, 0xee00}, {0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x0, r1}, {0x8, 0x4, r2}, {0x8, 0x4, r4}, {}, {0x8, 0x4, r6}, {0x8, 0x4, r8}, {0x8, 0x5, r10}, {0x8, 0x6, r11}], {0x10, 0x2}, {0x20, 0x1}}, 0x74, 0x4) 16:27:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1862.041283][T11059] usb 5-1: USB disconnect, device number 2 [ 1862.257450][ T2465] binder: 2459:2465 ioctl c0306201 20000000 returned -14 [ 1862.301118][ T2468] binder: 2460:2468 unknown command 0 [ 1862.307062][ T2468] binder: 2460:2468 ioctl c0306201 200003c0 returned -22 16:27:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:27:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x25, &(0x7f0000000080)="a221ac63"}) [ 1862.642767][ T9902] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1862.650020][ T9902] ath9k_htc: Failed to initialize the device 16:27:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40086303}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:46 executing program 2: syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x3}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0xba5130cc1a4e143b) [ 1862.705837][T11059] usb 5-1: ath9k_htc: USB layer deinitialized [ 1862.987541][ T2488] binder: 2483:2488 ioctl c0306201 20000000 returned -14 16:27:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0xe600, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x101) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) 16:27:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) [ 1863.246479][ T2494] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 16:27:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x4c, &(0x7f0000000080)="a221ac63"}) [ 1863.294369][ T2495] binder: 2493:2495 unknown command 0 [ 1863.299863][ T2495] binder: 2493:2495 ioctl c0306201 200003c0 returned -22 [ 1863.351775][ T2494] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. 16:27:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:47 executing program 2: r0 = geteuid() syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x0, &(0x7f0000000740), 0x8001, &(0x7f0000000780)) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x5, 0x3, &(0x7f0000000240)=[{&(0x7f00000007c0)="af27058211e3d1f3425b254229ee353828e70d8875dcbd94e07161ea86b2cde0825d25195d2bc4713e35a43850ae04e504e22c915b17220ee3fa17a401111cc510be47ab0d83861414a114517046e0669c0cefb1b77a771cd9d3683cfb95623e60a2ffa5e6128db77e0bf2767e1bd1bc462e9999e12f8ec7dfc516c29d64fa43f5a5ff5fee4d2c252a2c6788afeacf742dd924a990d674df3575648130bd3b52786f8ff224137e4b34ad981736e721a5111f71f2a40b2a1aa9f3caa204f0f7b33976c6a83db795674bd9ee52afc7eea47cb4e8bb6d3abd24d19eaa928b86e232a39b873b353db6cd90cd1eed547b1e80645d4d5672202cbf40d7e7f8f58b31e2a715b9c34ddf67d8cf87a098467dced6450d501477b3b8b24609b87d8c43e815621042863fb50e90933fa80031c85bff111bac84d312a0878fadc41ec4697e79427098eb83332de7be7ce6a724171fc6685d4336247185f943910e2c34bec4e55ce9a84c3a78e2caa0321dedf0483ff40b6bdbe189afa873160a67aa1bb678194a5471f81ea1e5cca648837e5e344e663c8813de3322a68c5c65512775990bc53cd538ad1504c472be9335b769cde69da3d29fae937dc6bda1288ea1955be03157fc5c3707e3f1a1679b498bdf076ecadc886635c6c8ca2df9ee8a61cd1a3d1e51542de03403ca13d9062704231745b11bdf5421e320fdd438f449cf26f1a26d07072b238be966c2b73d083027f819ba00c0559d8ab3157897c6b681f38ea640b770acd4983ce7c0acc8b22c6eaf40120d8ab205f87e9506bb3c3ef00b0cdc5646ded1ad0e8364c1f142d29338d5365f828c75889ea65284a7bc5c5af26addceee6ee05419f564c85468d3371a6af6edcd69711d28f80dc23b011ca3a0bd29c1523084380c4d21e6a8ba43b858209c7dfb77e6cc1040b0c8c6bded858f7bfa5f2483342061b937bb2d70b6c16d55ffa8d22b87ef278c209e4627d0304ccb0c4640a37886c0203545c9949f0dbc67182760f0953e6796abd1677d5de7efd94a6470dce85582f3edf55961763a4b9d8f6af776febdb7a8e2ff893d8757c15f6abe21aad27835626b3282d10b7fb64897b48d79fad02eb50410b681e00c211eab5330c66993541f1a615286186649e23222f49f2c190f5660b95e575b3eb351e2e3ae95c6e742af4c25d4d929936c298d41b4943444ce3a42a498d83bc71e6ab7de753b4fc267067e220b4854a2d8c04122dc3e825808d1a7aad10de65f7a037f59fe0ff0b1d33788a001e3024e6bfbbc3addffb5584aacd5b0946cd90822d69adfed936269ff3d276e45ad64129daf4163bc68ba5891e7b27a4c3c9deb80313a5b917a77c2680956c0d06415c0798cc017b21c84013668934b50303ebbc43580627bd1e8b4e04c62511aebfbbc1b3e4087ed83ba1b78297f495aaa88ebd35662cb40302413c27b1ba192bef5f125a7fd0e90c05965f6fc1f0d5b1072a1db967aeeb0eab101b320576bab000dbf1490e987dc97fb305c1f4c144fdde7e581860084772280601cd96939bf855b7e56f902fdc302b7a9074084841a1da950840f979548dfb7c02e35fdfae2a00962bf3824b89fcbd8d9767c7e16e9c2c948317e01f89388121a94ef915473843a540eba168de3b015e92f683e44dd40d40d5b48520318afadc4dcaf6ec6f367ff11dd59361c6c621c001052c2cf2ba107567c7a7e2fd19dbdd34df6af07e31f73b755771f07c50397a0ba76cc92c2ed07b67ea34e13483754904f584f3b0693e896db60b27cda619ef8f49015280f08718b37169d640a21a41bd5b0e4adba116cf640d3ff35f7c7204b9fe21962c963ef42bd31ee3db1084719862b41e8a2fa1d2e08f3bddade462818975ef2bfe809e7fc995ef55964c4ed7e234914a576c617328210f1f8fb75e03809ffd8f37747dd1cddc0b724a8957bec0c73720655259d5f981cc3250e42b0e6753246b47cc2ad2b806b8b557e095f2df990ddd19c0128122b63a1f598bfa22170f5a9f0abcfc2eea5f09ec423aa9757987b8e121e06d34037e98906984df37cfe1f54069f2e2f1e7b9537ac58bc2583078e75cd178044df17bd9d5a6e53f5c5a4f5a18115c97feebbd5d01d17b5b56bd74317ce75c43c73b13bdd2b12fe8f9f3d2409e4a8df9b0b6d7540a0103ccb9d361cff5ad6731a0e3a79795acdc4793503882a31ea57fdec287b2f90af6e898855f6a3eac6df2369ce7d49a059350a7d8219779219e0b6e164895639acc6fa0864f9b00daae4c6023ad9e5e3dd1ee065a8a3936e50feb1eb89e5dc32291f89a3b425a16bb26c3803c4dace48e501fb72e92c81ce17c7c779f6130a740fbf436307cd9df2b48981c1bb69f267ec7a39bb4c45a52cae84e7a9992ce818181920bffbda2f6975064d18e7a8ee61c7da539e981d00a830c756584fcf7fd1e6500e21b1fc1936a7a991ee579f4dd77831969bff86a55e90e0c8755e18b630e3806e8ab4364a15054f1d8ea9d262b4cd2d9fe4d31587f40e4ad297bb043ef6dbc0c26b4eabebfc4ba8f07964a492ac022c3ddcf0f8eb2afcddca9789b8a84af78a98c72cb38f0d505e0f53644783f594470f44ff218865d7ce95a10c1c9191d7aec559d5d2557d25027791421706309b4abfef997a22bf151c6ffe19d83ef004813ab5158c514e7fbdf4f2bf881ad3f9496a2985cd876bcea1aef534b2187f502c1a819e2a1523c835f6cf6cb4ede9bb38d8dbc2f98c86fc9b861a20b1c3572cd9f95d0560eb1bf2c5b66aba8a24e38ef95129bfd3cda7b153232bd99fcd96f642c760120b2456cece26ef7413f48e1496368353f7b095f854d41159e2f5cce0d85e8f2cdd57425fb8f3f4d9ff0e4ff085a2df805e26f5e4c83dc37f4796855e658538606228a5fbe28a0a81440ad744ce3cc18ba3b18a2b7ac76c0e9c51ea6827b0446a65c603aa40bce2542613169eed4f3dbdcd34a4d7d04ccb2834649baa49b2e78716f0fe2a134247ddea48a48f674d027edeb6fe5dc10de50783b7166c66e8f50b98d4f833302aa97792320bb57eb73d3d40be3ba57daa1c6eee19ca4283d2c02029b84e4af10b7c737e5372b55baa9d9b15bd2e047e175b59c3ed9ab0b6413cd47207376ac29ec1f40594a1750c3fa10198cf3c1aa4b1405096bc4e02189c054e603e7f13e956e705a7e7b297f2b5b08c93d93b1d95471d027f87044d57fa3d51f1ea641f7a16907b4c4ae1461993aad4d10905c647628c20c117276910459db9b0c89cfc31e0256c6da85e60b2031d55600b596c513adad90016f02752f0eebda4d95933bc691e0c5b73c91bfec3afca10c356e473b61bfa0b57f6970c78047307e23af4f55ef59d8be932c84a2e86fc0f0afe48fcabfd4b1ce1236451d29cae69db02a64e3a7289992fb943a942d8edf7c3d1d5fec7b36220dd2a954d46e3f1cd4e0f99b5d00e64f2e3ae1251c8d1e2a88f8f1ce093189904102b207ab47f70f193e2317c105a725ff389e46fa5dbb6f6321d53dac1b79932f69823afc2552e52e64ff90f9770c96b69b6976d4122d3d6cc0c21c2df8b9a1e2738deb27453dba2b7a2701465b3d1f068423d2632bc37de78e600a59537413fa377bb4077990ac0edfccb7db21c1745a5a620bb3a0471875779f0205cb9c439039fa12712162879b6da279341afedce8e2a875ed644e56e3ad2ae08cec301012753a1798eef8c2152230fd7678f1a085b477c3aebf8629afdc60231b9dd3c341147974d828ee925b405e1d3062c4255f326f2a1125d405ff4067c6eba490eda8398e1f3eead3eb3fb6e1292e01cda75377b17e58a03b0267125dfe681f943c98e8ef8c53850e7d2a7b9a35e277003e2a89f926e7d325e26eff0a43e6117dd297660efcd65b1738bef654d7d84394acb3eab17dbed0095ec8e8ccca32c065fe335ac3a6a2d614c8c2416fe2d3f5209ee90dc93884f0f6898d0bc208870bf76bf8a18f87e62072f3e15e2a99e66893cd5e01984fae27831dafc08a17cbd02b2d393a7bebdc08965b0076a6346076261abec9a9156d79faa01b5d4706fb1432f75d2dc82819b2835d0d3594dc49849104ce36e6d352362c19627186b716488513130c458c1d8a5a82b37f9f8e256254ae59271fa9b6bd7eff47f21571cade02d59461b79e28fd00219b828c2e68cc6a481a49e97a4a3b8be010adfe1c8adda28316bcf8890e9fe0a9360661a3ddb1e842cfc56d9264c355ff2d0efb64f5c728de4050df1650b2c9c3929963edeb1eab00de3b90932a653a9375cc4631531e65a27f6d3f95dbedecde3fb28429cb290f9439148fd023b100adb1b41f69245d8571919b0574808c000fc7b013831e2e21e6a486f889e5919fe615c68bd6a56ffbb336e04c8464f10cb1829f51739ed866e1c8a2b15ffe0946031bc292d42d2a28088e4ca4c06a9b24262a326e9d623833397b81002b53ed306adb6d3ffe2fbd988b4c39eaee4ce2e23ae93f2951d8e7ccdf6d8507f93c6492d00a42719559c1a5f4d8433980db29451a6cfa7b598cb9baebc83ce794f26753e3dec663090a98ec8ccd54517259430da102519b74958c8e38379e80974884c9908596297d31b1853957493a45bb5355b13f8b1c2bd7b9fc7800af8ae04c34b8c9040a604f827bfc533a6c5adf8e0e406a4a56f5744320b5c91a30eb884606f043f09db0ec395f55a87d2890e365223e2b195bfa01d0348bb00b9ab1fd57b67e6f0ec1f409a48bf0c95ca383ced4fcda5edc7a9e641a3a0cbf9df86dfb646e5fd59a5f599433f4d69a4c8c49543612c208548bb566c95dc91116577539c16124b121ec4ae59959a42bdb0b18e65bc6d121c905f72656b38af69cd4799905c00081fb6356f5320414f619e960e401d2cf9346b086e21b7fdc64be8168970ad5c96067a3f1666dbfa118198054f15785c451197392bc8dabadaab3a427b3b8855c70129908b1cd1a9f91447d2aae21a3177d0015245edf965fde5076e2f1033a42adb3550ce709da9f80e9b84da3ed4c56544b8038c91bfcc4169d23d6a50b09ee611838637051f5a3dc8612b9ea2836b0365a52319eae11a2256deabb05a6cb116b2a04c0efc90902dc10eab112a0117a00f862afef184f8ccef4ed46be340f90402b12bbf1828fec8c1cdd9e39d9513c9f982e7924cd43890fbecc6c7d0536b083cc63f4e9c45edf6aac1bdc05c5c160ec61457f5903cb3048b2d384fe87fbace6e854dcac965266c1e6d968ee9a128193115cd6e5dda8e5eda8cb396eed47d5db65d984b40c43886aa16341c3323efbe3a2c641539e90f92c9919bba8de87e0afce5961b27a2636e9e49e9264a6aab035af4bfae1a989f9fd264c665702c47311cf81ba7e20859b38219a07be1a4844bf982eae8990c4b657cdc15d301b3130351abe893361f879916afe963fe808baf0c2a3bd08fcd03ddb6b06ba027ee1c735cc83cf7340234b096e98306658fc7c50e6463098a9c581138b9bdafd4768da8e1b68a2326b14a2c72b5fccc4cc7479daa71096ff123848f6bd0865d440d9a53d2d490aa27412ebf6385fafc1af4351d9efb675d51e400eeaf56e1933bc34307fbe655f13e504848cfc469259fb624a796186b8f6e6a30204ba44c4cd4ce9e82be27ae11aeaa4432269f21f7f81bf503a672b304e01c5549ec226ad132466e02ddfedabeaad32ccd427b200177fbfa9b9b5b57fb866052cd3be6e37a834b72cbba8f6412cf5be7003d687306839d257b9c24663c5edfcfa59b98a310283d3a8bc5399850c4941dccfe812c", 0x1000, 0x6}, {&(0x7f0000000080)="d7b16ef0fa32d3582a25ec53478dd99db657a239c71725885a4dba5866ec75af0d2af09a001ab70519933a0abaa2fa5f32d4a6339466adbc94fb849adbd260e4421ce2f3f2b3feb01f4d7debae582131a90e8e4c604cf0976e28e0b010fff8f6ed7b8c4264849e0e355469cb0ae8beea0a63ede112c1fc5b670c955264538d25e44776361c3797a3304d", 0x8a, 0x2}, {&(0x7f0000000140)="84b76c32f2ee2487eae2e8979804a5b9fae6e73b3f1fec66f24a632332c9e5c04f49ce13ff0ba9e2c62d4955341635f46bfa5ed8b8fa7bca088031ca6920e8252160adcc703ad274cc1bac64a4e088fec1ed5db9c28df1ff61db00fbdcd8356fa701966679bcd0b5d63418fc74b72a4ed239d326e75d9a3cb912ca68f50a30a6ff54d15f997cbd7f748f9857a282984bd0ef41d8997cebedcb79018a82e49156ef334a4e82335881fa38be55b425e447cce1f2991043c29096af989d2d7e4978793b698c0862e8141ece099bba835c0139dc912917fc5b", 0xd7, 0xf9}], 0x40, &(0x7f0000000280)={[{@force}, {@nobarrier}, {@session={'session', 0x3d, 0x1}}, {@force}, {}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_gt={'fowner>', r0}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}]}) 16:27:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x4008630a}, @increfs_done], 0x0, 0x0, 0x0}) [ 1863.912006][ T2514] binder: 2507:2514 ioctl c0306201 20000000 returned -14 16:27:47 executing program 4: r0 = syz_mount_image$qnx4(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, 0x4, &(0x7f0000000140)=[{&(0x7f0000000000)="efe1bdbce51d2bc76d58ae3a390f09754072352f92e63349141282ce", 0x1c, 0x6}, {&(0x7f0000000040)="f79b9891ca5677456023b4b49d095581773eccc9b6b780e3ab508c4a217c761423ceb8fa7d44f0031f0b7eeba232f1d49c8713003b51806ec3fbe2a101d1158e3e242fd952c6", 0x46, 0x4}, {&(0x7f00000000c0)="8924b99f303c6588c86b2996f90d2aa1ad4992298e655d619fccfc2d5e59d772cc0734f663e8ee90e5f8594ed5f67a4237f24e22e18df9f7e9976fe9", 0x3c, 0xffff}, {&(0x7f0000000100)="b938e6cc9cf852f2", 0x8, 0x7}], 0x2206805, &(0x7f0000000780)) fstat(r0, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ocfs2(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x100, 0xa, &(0x7f00000017c0)=[{&(0x7f0000000200)="97bd406a2f07713abef336d1ee0cbf7d1d6e143937a77ee324d2a81a0113fc1b279082219700", 0x26, 0xc0}, {&(0x7f0000000240)="17a03a2f851ffc113ddbf11cdfd44fa6", 0x10, 0xfffffda4}, {&(0x7f0000000280)="bc13fd8ef1527b7c29f238a92947e9b89295a3fbc126044248bf6a2ea2e561f89a3a9d413015a2eb15a715159ba40b858cc8c056a9", 0x35, 0x8f}, {&(0x7f00000007c0)="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", 0x1000, 0xffff0000}, {&(0x7f00000002c0)="590486b17a44fbf87b5e4d6d2f59362a55611603e30b1c12c15a77637a0ef82ac97ce484ac4bd030c015de1e1fb06108b380b8975167da06f6dd43fe67fdf670ef48affda7cfde3dde47a948e4265b4918589246604ba99439ff903ce7671f5633483c64d72774cd38877b17c183891417ba05f449011713618a", 0x7a, 0x6}, {&(0x7f0000000340)="998b44b3b3297d94253837f8479c18bbec9b0112902271691f25554afc455ddc24b24e8de624d52d4dd10884f2e8f6a5bb7e7daa7b6d7e0c995c0d98412df64a3766c60fd33fac8ec4aba2c57b037c330262f9410b652c0c271dd9822ead309934221f44eb47853793ebd24bbb5bda9b1b1dd856ff16f307556052b123fab07c320d1a2e8ef8df3aee9c32778e1542b6e6d2c1cb95d09ae69b8a89e14155857302e71c345ac9cb1dcea3ebda38b61ca176e85d26922495ccd9a35131c3733a1e02b9c2f274ec64d31955949e30e2599a5a5f06d320a070dda084c93a63b22f76653c5d49c4f4d0ba8f3bde", 0xeb}, {&(0x7f0000000440)="5913075d74351982f4876bf97e31f671f84a31fd8f19955a42ceab9684dc3b811b1ebf81cbab43a57d53f151ffdc208c002d79535370b882edfbb7409ae7c1e06efb809a41f996c997aaba951d0e256a5f687aace20723e53f2fcf01870be0f866c68a492f9896b4e69c758e0745f69f29fd4c60efbb52e9d830fda760c861f701dba664dfcb9a693578b8b942d25dc733bb4b97a3d5133f58d0e159946ed6871fa18e3a5e0e1bbd1921a2003df5bff49826e8cad7f881b47ae557f99a", 0xbd, 0xffff}, {&(0x7f00000005c0)="ec83e461dbed8176f031380e570fc0468ee50c4fd832eba01c524be8953e89c89cd0bdd8ab3b5d210cda4ace181bcf2a0eb422718d08918d691f6865d6b52a31f3b6ec9eca0065cab8ca082944c7725353383256901e7a37c848d9d35027dad217fc57383e9bdf33dae251fa5b9ec875f427cbd99d09aa912381d8a9c1b253e3ada0ea0c51ea88d64b9908e3c8b821bc11584c21be", 0x95, 0x1ff}, {&(0x7f0000000500), 0x0, 0x9}, {&(0x7f0000000680)="ba9b134f94ab8f431f6e68cf8efb82b4317ba34709304c6fb57f15119de61e8ddacb1216eedd25b1d3b1b0d41e5b1d6f5e74c1500842a139583000e2ac8186c72b90fa35e65b5f4e1cff0ab0e0381c9dd5029fef01fffd53f5f1f5d103e22716f02ebd0459e6ed7fd0627467373e403b77089e4e47314e025e642198400806005564f9ba4be143c7d02c25fb145ed21a612230e2d76f1a69feb75ab4f0f578f6010a78aa9e7a3231f484ce1dcd", 0xad, 0x9}], 0x2, &(0x7f00000018c0)={[{'qnx4\x00'}], [{@euid_lt={'euid<', r1}}, {@dont_appraise}, {@euid_lt={'euid<', 0xee00}}, {@fowner_gt={'fowner>', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@pcr={'pcr', 0x3d, 0x15}}, {@subj_type={'subj_type', 0x3d, 'qnx4\x00'}}, {@dont_appraise}, {@fowner_gt={'fowner>', 0xee00}}]}) 16:27:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1864.197020][ T2518] binder: BC_ATTEMPT_ACQUIRE not supported [ 1864.203194][ T2518] binder: 2516:2518 ioctl c0306201 200003c0 returned -22 16:27:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x98, 0x0, &(0x7f0000000380)=[@enter_looper={0x40046304}, @dead_binder_done, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@handle={0x73682a85, 0x2, 0x1}, @flat=@weak_binder}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="e068c63695140731eb5928497d9a51852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a62730b00000001000000000000000000000000000000852a6273001000000300"/60], &(0x7f0000000080)}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x8) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x200) 16:27:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x5c, &(0x7f0000000080)="a221ac63"}) 16:27:48 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:27:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40086310}, @increfs_done], 0x0, 0x0, 0x0}) [ 1864.642171][ T2523] loop4: detected capacity change from 0 to 255 [ 1864.818664][ T2529] binder: 2524:2529 unknown command 0 [ 1864.824455][ T2529] binder: 2524:2529 ioctl c0306201 200000c0 returned -22 16:27:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1864.906965][ T2529] binder: 2524:2529 unknown command 0 [ 1864.912644][ T2529] binder: 2524:2529 ioctl c0306201 200000c0 returned -22 [ 1864.973585][ T2536] binder: 2531:2536 unknown command 0 [ 1864.979998][ T2536] binder: 2531:2536 ioctl c0306201 200003c0 returned -22 [ 1865.015432][ T2537] FAULT_INJECTION: forcing a failure. [ 1865.015432][ T2537] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.028804][ T2537] CPU: 1 PID: 2537 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1865.037729][ T2537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1865.038485][ T2537] Call Trace: [ 1865.038485][ T2537] dump_stack+0x24c/0x2e0 [ 1865.038485][ T2537] should_fail+0x8bd/0x9e0 [ 1865.038485][ T2537] __should_failslab+0x1f1/0x290 [ 1865.038485][ T2537] should_failslab+0x29/0x70 [ 1865.038485][ T2537] __kmalloc+0xbd/0x550 [ 1865.073872][ T2537] ? tomoyo_realpath_from_path+0x142/0xc20 [ 1865.073872][ T2537] ? kmsan_get_metadata+0x116/0x180 [ 1865.073872][ T2537] tomoyo_realpath_from_path+0x142/0xc20 [ 1865.073872][ T2537] ? __msan_instrument_asm_store+0x22/0x130 [ 1865.073872][ T2537] tomoyo_path_number_perm+0x2a3/0xaf0 [ 1865.073872][ T2537] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1865.073872][ T2537] ? __msan_get_context_state+0x9/0x20 [ 1865.073872][ T2537] tomoyo_file_ioctl+0x74/0x90 [ 1865.073872][ T2537] ? tomoyo_inode_getattr+0x60/0x60 [ 1865.073872][ T2537] security_file_ioctl+0x10a/0x210 [ 1865.073872][ T2537] __se_compat_sys_ioctl+0x182/0x1100 [ 1865.073872][ T2537] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1865.073872][ T2537] ? syscall_enter_from_user_mode_work+0x56/0x100 [ 1865.073872][ T2537] __ia32_compat_sys_ioctl+0x4a/0x70 [ 1865.073872][ T2537] __do_fast_syscall_32+0x127/0x180 [ 1865.073872][ T2537] do_fast_syscall_32+0x77/0xd0 [ 1865.073872][ T2537] do_SYSENTER_32+0x73/0x90 [ 1865.073872][ T2537] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1865.073872][ T2537] RIP: 0023:0xf7f04549 [ 1865.073872][ T2537] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1865.073872][ T2537] RSP: 002b:00000000f54fe5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 16:27:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x300, &(0x7f0000000080)="a221ac63"}) 16:27:48 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1865.073872][ T2537] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 1865.073872][ T2537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1865.073872][ T2537] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1865.073872][ T2537] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1865.073872][ T2537] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1865.256928][ T2537] ERROR: Out of memory at tomoyo_realpath_from_path. 16:27:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630f}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001640)='./file0\x00', 0x88000) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4014f50b, &(0x7f0000001680)={0x0, 0x3, 0x1}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) [ 1865.665996][ T2542] FAULT_INJECTION: forcing a failure. [ 1865.665996][ T2542] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.681265][ T2542] CPU: 0 PID: 2542 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0 [ 1865.688863][ T2542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1865.688863][ T2542] Call Trace: [ 1865.688863][ T2542] dump_stack+0x24c/0x2e0 [ 1865.688863][ T2542] should_fail+0x8bd/0x9e0 [ 1865.688863][ T2542] __should_failslab+0x1f1/0x290 [ 1865.688863][ T2542] should_failslab+0x29/0x70 [ 1865.688863][ T2542] __kmalloc+0xbd/0x550 [ 1865.688863][ T2542] ? tomoyo_realpath_from_path+0x142/0xc20 [ 1865.688863][ T2542] ? kmsan_get_metadata+0x116/0x180 [ 1865.688863][ T2542] tomoyo_realpath_from_path+0x142/0xc20 [ 1865.688863][ T2542] ? __msan_instrument_asm_store+0x22/0x130 [ 1865.688863][ T2542] tomoyo_path_number_perm+0x2a3/0xaf0 [ 1865.688863][ T2542] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 1865.688863][ T2542] ? __msan_get_context_state+0x9/0x20 [ 1865.688863][ T2542] tomoyo_file_ioctl+0x74/0x90 [ 1865.688863][ T2542] ? tomoyo_inode_getattr+0x60/0x60 [ 1865.688863][ T2542] security_file_ioctl+0x10a/0x210 [ 1865.688863][ T2542] __se_compat_sys_ioctl+0x182/0x1100 [ 1865.688863][ T2542] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 1865.688863][ T2542] ? syscall_enter_from_user_mode_work+0x56/0x100 [ 1865.688863][ T2542] __ia32_compat_sys_ioctl+0x4a/0x70 [ 1865.688863][ T2542] __do_fast_syscall_32+0x127/0x180 [ 1865.688863][ T2542] do_fast_syscall_32+0x77/0xd0 [ 1865.688863][ T2542] do_SYSENTER_32+0x73/0x90 [ 1865.819313][ T2546] binder: 2543:2546 ioctl c0306201 20000000 returned -14 [ 1865.688863][ T2542] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1865.688863][ T2542] RIP: 0023:0xf7fbc549 [ 1865.688863][ T2542] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1865.846212][ T2542] RSP: 002b:00000000f55b65fc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 1865.846212][ T2542] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0306201 [ 1865.846212][ T2542] RDX: 0000000020000600 RSI: 0000000000000000 RDI: 0000000000000000 [ 1865.882720][ T2542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1865.882720][ T2542] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1865.882720][ T2542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1865.915983][ T2542] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1866.011042][ T2549] binder: 2548:2549 ioctl 8008f511 20000040 returned -22 [ 1866.050245][ T2549] binder: 2548:2549 ioctl 8008f511 20000040 returned -22 16:27:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c6313}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x500, &(0x7f0000000080)="a221ac63"}) 16:27:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000200)="c5171ef11265585048fd71d073b00d4a2b7f4da96bf471f6b493dffa04da951adbe11904e6c96eed303564f7d7939816ac4f1b5a0e1ee5a6361575c679260799d873df17fb3fb4379b83559486ced9fff1c577530aa00af6073c062466b293dff22cb9d45e2ede28dd4b1ffeb003a19798", 0x71}, {&(0x7f0000000180)="273f8875e75b0b8c39a91515d9eefd5bfd7ea4d186c2bdd2d418f37da380a10fe0df1abaf64cdc329901f893df1203c3d32fa4c186394758ebddff", 0x3b}], 0x2) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=[@register_looper], 0x5f, 0x0, &(0x7f0000000100)="07efe6a47e59cfb37f5f2dee6f388857be6aa73c76fb97ca7abe9ebb084d98947afddb3a9ee454dca2ea8b7e6660240c6824cb0bbf41a3ac2803fbc0c39be0e139cebe805a6a555b3bc5764c966ac2d8c9acad24909c6529e9866c58ea7296"}) [ 1866.425660][ T2553] binder: 2551:2553 unknown command 1074553619 [ 1866.431952][ T2553] binder: 2551:2553 ioctl c0306201 200003c0 returned -22 [ 1866.678732][ T2561] binder: 2559:2561 ioctl c0306201 20000000 returned -14 16:27:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:50 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:27:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c635e}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) 16:27:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x600, &(0x7f0000000080)="a221ac63"}) [ 1867.230040][ T2567] binder: 2565:2567 unknown command 1074553694 [ 1867.237162][ T2567] binder: 2565:2567 ioctl c0306201 200003c0 returned -22 [ 1867.263337][ T2568] binder: 2564:2568 unknown command 1744331268 [ 1867.269639][ T2568] binder: 2564:2568 ioctl c0306201 200000c0 returned -22 16:27:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:27:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1867.421374][ T2572] binder: 2566:2572 ioctl c0306201 20000000 returned -14 16:27:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40106308}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:51 executing program 0: ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="a5ee9dadc6db87e728858a5dbc8f1935b2db10a462a7e5d663fcca18487b02bcdb8d3ed69795672aac000768f610c96303bcfbdc99b5"], 0x0, 0x0, 0x0}) 16:27:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x700, &(0x7f0000000080)="a221ac63"}) 16:27:51 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, 0x0) 16:27:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1868.039489][ T2584] binder: 2579:2584 unknown command -1382158683 [ 1868.046352][ T2584] binder: 2579:2584 ioctl c0306201 200000c0 returned -22 16:27:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1868.171782][ T2586] binder: 2579:2586 unknown command -1382158683 [ 1868.178514][ T2586] binder: 2579:2586 ioctl c0306201 200000c0 returned -22 [ 1868.254936][ T2589] binder: 2583:2589 ioctl c0306201 20000000 returned -14 16:27:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40106309}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="c1510931e0956040"], 0x0, 0x0, 0x0}) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x400c920a, &(0x7f0000000000)={&(0x7f0000000040), &(0x7f0000000200)=""/199, 0xc7}) 16:27:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x900, &(0x7f0000000080)="a221ac63"}) 16:27:52 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, 0x0) [ 1868.738694][ T2596] binder: 2595:2596 unknown command 0 [ 1868.744340][ T2596] binder: 2595:2596 ioctl c0306201 200003c0 returned -22 16:27:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1868.878081][ T2600] binder: 2597:2600 unknown command 822694337 [ 1868.884567][ T2600] binder: 2597:2600 ioctl c0306201 200000c0 returned -22 [ 1868.930997][ T2600] binder: 2597:2600 unknown command 822694337 [ 1868.937660][ T2600] binder: 2597:2600 ioctl c0306201 200000c0 returned -22 16:27:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40406300}, @increfs_done], 0x0, 0x0, 0x0}) [ 1869.042064][ T2605] binder: 2599:2605 ioctl c0306201 20000000 returned -14 16:27:52 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x701, 0x0) 16:27:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463040b"], 0x0, 0x0, 0x0}) 16:27:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xa00, &(0x7f0000000080)="a221ac63"}) [ 1869.358313][ T2609] binder: 2607:2609 ioctl 10 20000600 returned -22 16:27:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1869.673694][ T2616] binder: 2613:2616 unknown command 184836868 [ 1869.679894][ T2616] binder: 2613:2616 ioctl c0306201 200000c0 returned -22 16:27:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40406301}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:53 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x702, 0x0) [ 1869.962766][ T2621] binder: 2617:2621 ioctl c0306201 20000000 returned -14 16:27:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x802) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000800)={0x18c, 0x0, &(0x7f0000000600)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1b5682de3ad44fda, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0x1101, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/48, 0x30, 0x1, 0x33}, @fda={0x66646185, 0x8, 0x1, 0xb}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/119, 0x77, 0x2, 0x2d}, @flat=@binder={0x73622a85, 0x100a, 0x3}, @flat=@binder={0x73622a85, 0x1003, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x40}, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x4, 0x2, 0x27}, @fda={0x66646185, 0x7, 0x1, 0xd}, @fda={0x66646185, 0x0, 0x1, 0x33}}, &(0x7f0000000380)={0x0, 0x1c, 0x38}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x101}, @ptr={0x70742a85, 0x0, &(0x7f00000003c0)=""/98, 0x62, 0x2, 0x3f}, @fd={0x66642a85, 0x0, r3}}, &(0x7f00000004c0)={0x0, 0x18, 0x40}}}, @acquire_done={0x40106309, 0x5}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/49, 0x31, 0x0, 0x6}, @fda={0x66646185, 0x3, 0x2, 0x2c}, @flat=@binder={0x73622a85, 0x100, 0x1}}, &(0x7f00000005c0)={0x0, 0x28, 0x44}}}], 0x7, 0x0, &(0x7f00000007c0)="4121b16ff01a53"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) [ 1870.124450][ T2623] binder: 2622:2623 ioctl 4c01 20000600 returned -22 16:27:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xb00, &(0x7f0000000080)="a221ac63"}) 16:27:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:27:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40486311}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0463043412931fd04000"], 0x0, 0x0, 0x0}) [ 1870.737436][ T2635] binder: 2632:2635 ioctl c0306201 20000000 returned -14 16:27:54 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x703, 0x0) [ 1870.909323][ T2638] binder: 2637:2638 ioctl 541b 20000600 returned -22 16:27:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xc00, &(0x7f0000000080)="a221ac63"}) 16:27:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1871.168230][ T2644] binder: 2641:2644 unknown command 872702724 [ 1871.174677][ T2644] binder: 2641:2644 ioctl c0306201 200000c0 returned -22 16:27:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:27:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x40486312}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) [ 1871.539729][ T2649] binder: 2646:2649 ioctl c0306201 20000000 returned -14 16:27:55 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x704, 0x0) 16:27:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xd00, &(0x7f0000000080)="a221ac63"}) 16:27:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:27:55 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x810) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\bc\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) 16:27:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death, @increfs_done], 0x0, 0x0, 0x0}) [ 1872.246514][ T2664] binder: 2661:2664 ioctl c0306201 20000000 returned -14 16:27:56 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x705, 0x0) 16:27:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xe00, &(0x7f0000000080)="a221ac63"}) [ 1872.587354][ T2671] binder: 2668:2671 unknown command 1073767176 [ 1872.594497][ T2671] binder: 2668:2671 ioctl c0306201 200000c0 returned -22 16:27:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:27:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xf4e) 16:27:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x2}, @increfs_done], 0x0, 0x0, 0x0}) [ 1873.073228][ T2680] binder: 2675:2680 ioctl c0306201 20000000 returned -14 16:27:56 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x706, 0x0) 16:27:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x1100, &(0x7f0000000080)="a221ac63"}) 16:27:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1873.505241][ T2685] binder: BINDER_SET_CONTEXT_MGR already set [ 1873.511330][ T2685] binder: 2684:2685 ioctl 40046207 0 returned -16 [ 1873.720124][ T2694] binder: 2688:2694 ioctl c0306201 20000000 returned -14 16:27:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="846304407e46605f64eb0f3e0c855459d99dc6f8ca839c4b9be48e4398991e8038d19cf8fe03adbe085c396a6f0544b6f1256ec955e3c3194500688caf6792a861456e9a7597b9908aab8a36d58ec2564c1fe997d6018ee31f542ea43fbfa1c9f075bf9c7be7617bf19b84d6828a"], 0x0, 0x0, 0x0}) r1 = openat$hwrng(0xffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = syz_mount_image$efs(&(0x7f0000001300), &(0x7f0000001340)='./file0\x00', 0x8, 0x1, &(0x7f0000001440)=[{&(0x7f0000001380)="64889981a06c9a94e8b26396597af93ce1baec1db36f5b1e2dd4c0b5254fe0647b5b02f3c4456cec85c6da2c5a922156516cb8354ce0f89fb7b62760904ca4448c8ba3f5e83219257f060db85d896ab7bdb8e5b1f59ae4eadaec09bd3c7407eff98ed628ca17bdfdcb39b5c294f78ef200e091fadaf8428bd5146e53bc6860f03a89da79cf36096f5dc0aef154d69aad168fb745cca77ab190547c37835fca545b9487c9b0f654b0b529e5", 0xab, 0x4}], 0x210000, &(0x7f0000001200)=ANY=[@ANYBLOB="2f2d232c6f626a5f747970653d255c2c646f6e745f61707072616973652c003b32b4751080d7c7e668a72091ae1edaca546e4da91f8e5fc21735c12287c4a32072c0cc07fe3e62c120fa373561b77e536fe62ca02b57bb23c1e7ed1912"]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xa0, 0x0, &(0x7f0000001580)=[@request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000014c0)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fd={0x66642a85, 0x0, r2}, @flat=@handle}, &(0x7f0000001540)={0x0, 0x18, 0x30}}, 0x400}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/4096, 0x1000, 0x1, 0x3c}, @flat=@binder={0x73622a85, 0x1100, 0x3}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x67, 0x0, &(0x7f0000001280)="a3ca2f87dc53cad8f620e0f44d6e5bedf6ec8493b1c5c7b673431b63068b0818a804acdb29c9bba042540d98b6d79a0e16deaaced912742b08796fcd4159cf7342742ce2b3ade569eda7f0c9c1fc756ece2e417267ea5845f99241eb5c02dc559bf156a05441a7"}) 16:27:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x1200, &(0x7f0000000080)="a221ac63"}) 16:27:57 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x707, 0x0) 16:27:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1874.297736][ T2701] binder: 2700:2701 unknown command 1074029444 [ 1874.304481][ T2701] binder: 2700:2701 ioctl c0306201 200000c0 returned -22 [ 1874.550010][ T2701] binder: 2700:2701 unknown command 1074029444 [ 1874.556471][ T2701] binder: 2700:2701 ioctl c0306201 200000c0 returned -22 [ 1874.727009][ T2719] binder: 2707:2719 ioctl c0306201 20000000 returned -14 16:27:58 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x708, 0x0) 16:27:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 16:27:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:27:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x4}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x2500, &(0x7f0000000080)="a221ac63"}) [ 1875.218387][ T2722] binder: 2721:2722 ioctl 6364 20000600 returned -22 16:27:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8913, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:27:59 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x720, 0x0) 16:27:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x5}, @increfs_done], 0x0, 0x0, 0x0}) 16:27:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:27:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000016c0)={0x14c, 0x0, &(0x7f0000000540)=[@dead_binder_done, @decrefs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x632297a85239e952, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/246, 0xf6, 0x2, 0x37}, @fda={0x66646185, 0x5, 0x2, 0x16}, @fda={0x66646185, 0x9, 0x1, 0x1}}, &(0x7f0000000100)={0x0, 0x28, 0x44}}}, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@flat=@weak_binder={0x77622a85, 0x100a}, @flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @flat=@weak_binder}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @release, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="852a687300000000030000000012009d852a73730001000009000000000000000000000000000000856164660700018000000000000000001100000000000000000000000000000000000000371c32e144acc89f9e247e12fe6309227ed3f8ba5646c9ea92373451b3fe362ac666100dc3a3ec01800000d94d8efc8f00ba2638b1527960bd39afde655e10fb200b7f321f91942eb3ca02692bd21a1f1b13e0ed2872a22633c3e3c3287d078d93baa4"], &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @increfs, @acquire, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x7, 0x0, 0x1c}, @fda={0x66646185, 0x5, 0x2, 0x2f}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/75, 0x4b, 0x2, 0x29}}, &(0x7f0000000500)={0x0, 0x1c, 0x38}}, 0x40}], 0x1000, 0x0, &(0x7f00000006c0)="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"}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001800)={0x8, 0x0, &(0x7f0000001700)=[@exit_looper, @exit_looper], 0xa5, 0x0, &(0x7f0000001740)="05136cd82d735a6b67673c654f2726e9cba1f9899d07a0554998d4885ee0f19c1011796a71271729f7c7ab1901a5392f1317b8b592894647ef1884d3a810ca61b2726d6b6ee7af89b73e7f41cd67a1a2ce2ac6307669712d9ab0d10be7648d380796eab66005d60bc75e834a12b260b5f1685bd76b741ec21005cdd8c51e1e6cc14bf45a4fde60dce21f4ce97bde9dce804fd011550b5edbd618bb67e5d562a2436d62cb2f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:27:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x4c00, &(0x7f0000000080)="a221ac63"}) 16:27:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8914, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:00 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c00, 0x0) [ 1876.729970][ T2750] binder: 2748:2750 ioctl c0306201 20000000 returned -14 16:28:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x6}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04a020000e2a55a14500000100e2000000000000000000"], 0x0, 0x0, 0x0}) [ 1876.942632][ T2753] binder: 2751:2753 ioctl 8914 20000600 returned -22 16:28:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x5c00, &(0x7f0000000080)="a221ac63"}) 16:28:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1877.333374][ T2760] binder: 2757:2760 unknown command 2138116 [ 1877.339386][ T2760] binder: 2757:2760 ioctl c0306201 200000c0 returned -22 16:28:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:01 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c01, 0x0) 16:28:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x7}, @increfs_done], 0x0, 0x0, 0x0}) [ 1877.700940][ T2764] binder: 2762:2764 ioctl c0306201 20000000 returned -14 16:28:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11620440"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000080)=[@enter_looper, @acquire={0x40046305, 0x3}, @clear_death, @request_death, @exit_looper, @enter_looper], 0x55, 0x0, &(0x7f0000000100)="37f6db5effc846b20cc260b9e56d2934061a9752ef021e0be2d247191aeef832dcdbf3c38b0567cde8d801825ebc3bd3df0febfebc73dc5a9dd7a1b890df64e8adcdbe5b89fcff18f122b7dda5352aa514d499ed6b"}) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) [ 1877.868661][ T2768] binder: 2765:2768 ioctl 8933 20000600 returned -22 16:28:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xff00, &(0x7f0000000080)="a221ac63"}) 16:28:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:02 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5402, 0x0) 16:28:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1878.434751][ T2775] binder: 2773:2775 unknown command 1074029073 [ 1878.441141][ T2775] binder: 2773:2775 ioctl c0306201 200000c0 returned -22 [ 1878.558654][ T2775] binder: 2773:2775 unknown command 1074029073 [ 1878.565299][ T2775] binder: 2773:2775 ioctl c0306201 200000c0 returned -22 16:28:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x8}, @increfs_done], 0x0, 0x0, 0x0}) [ 1878.765782][ T2781] binder: 2778:2781 ioctl c0306201 20000000 returned -14 16:28:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04630464"], 0x0, 0x0, 0x0}) [ 1878.879688][ T2784] binder: 2779:2784 ioctl 400448c9 20000600 returned -22 16:28:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xfeffff, &(0x7f0000000080)="a221ac63"}) 16:28:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:02 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x540d, 0x0) 16:28:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1879.495393][ T2791] binder: 2790:2791 unknown command 1678009092 [ 1879.503974][ T2791] binder: 2790:2791 ioctl c0306201 200000c0 returned -22 16:28:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x9}, @increfs_done], 0x0, 0x0, 0x0}) [ 1879.749793][ T2797] binder: 2792:2797 ioctl c0306201 20000000 returned -14 [ 1879.791881][ T2798] binder: 2793:2798 ioctl 400448dd 20000600 returned -22 16:28:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="a120044028854f1644623d23ff70e255187587d2dfe0802f0d70e8ad5b8c45490255b20d0c7ba94f83ac09952d35dd8667769995548b4088178db00bcd0376281c2a3554f214a855d58dec3e8e9f8b2167d942d37d367cd6710cd8"], 0x0, 0x0, 0x0}) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001300)={0x40, 0x0, &(0x7f0000001200)=[@increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1}, @increfs_done, @acquire_done={0x40106309, 0x1}], 0xac, 0x0, &(0x7f0000001240)="15945cd05d11360a82b81657a9a2f7a255e49c5bad0e846551f1e246e55b395a1f9f59fdbbc9909d8b2d748a3d87eaaf17af5aeccb2915382f30966126fd6502d47c8bcce21eba8ea5167d0cfd116be88b2ab71e974a13d2c7c94f0dc5bec24ed38165c19dd538fc14a347ed2167c47a9e442e07dd944e44b1957d3eb65949a29128352264ec3b473e0d0792e3fc88a7288efc5ccab41d2c209d5b07bde6b35c3cd0073328ef8d903bc56801"}) vmsplice(r0, &(0x7f0000003780)=[{&(0x7f00000013c0)="947de2415b3172c5763641832f5098d74d4855077006e1cca0117804c137b279db192765a9b7631f7b588a9d6bdc52b4b41cdd0606e053e1533e066cc875e2e86790bf19f186dc73f958cc5d10d1c226e8e3d5f14fa17a42dad0feef0feaa5cbdc62c9f14fdec7c78b1bc13d1a9e3931ee44802e3a782215c1f15dd302677d41d1e8913591594ab9cbeef1c0a931b4ddb5a0c10c1ee7fb2a3c6de360c73ea8527753fc6b610d2097874bfa5acb9a651f0f879c1f279a6b51f311b7b22ef5", 0xbe}, {&(0x7f0000001480)="eb82bd9de2762b6ea6241569644f2f9d80da3e6e8ff52a199d174a5ae2b3fc7fc2a3480a7f4f561f358cbb98c7b4e90a34141d8969bf7630b52afe7d90caba796a9677d6d01727d0b8afa85d0a42167a017841d587d1d19e979706f075b032a88f8dc29172e4de156f7da2ebda73c7d7d8548af5694a0e6a286d1efa3c3963ebbf9e961d5e89f5d9f693ea082423f06dcce1b1fb386c38ac54776cb60e8d8bb7866f0365dade012c8ae8", 0xaa}, {&(0x7f0000001540)="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", 0xfb}, {&(0x7f0000001640)="bc4fe5dad30c8de00947a67f13a58ea9e5fd7591e9087a3bb1ebcf801db72b5b1a1b9b3574c983f176ff29c972871645fc6c09665815bca2e1611218614877d344e792b86eeba20306ce4de333eda61a12349af8a06aad546faf674f95a267f7c2c91fee97db85002249cf3f58366d3bad2dcc9078760d9d79645e6b4bd08b8c26d27b42de7e3ada88a29a817a9adc40a76aacb1464013a9ff7fe669d97579710977d04cc359093c2fb8e8ccb8db3e7065234790694a4383233c85ebc7e21357f27ef51d5d860dfb48bf172e1ef4b7f4f1e2091fa829e3aeb545bd1f05a95fa7d0783dbee9af72993a20dda6d91640421fec1ad12698e4c4a7114a30e4335f761db9a05db9e691e3c4b33f9c7a06f4c81c6d818e6960cf1e53ee26bcef90487a8358c44d6a3d9270a5fcfa3aa88bd62698537e86f5125fa04f00f402bf05721f691f5d76323ac6b7da4e9abf6dd8b42de1d172493eddee08dee5d07a6e1b9af116c8047a0d31633505747494dd85df31de44210b6b82723147987d50e9d5bef85babf5213428d1913c986dd9850e43b0f7f55c91f493e38fe69105893886c26b0fc3a84d6d4bd2fc49c2f9c794b799095f09c92ba3890330f7ad1fc267f220edfb25b32c67766a5d28c39965b6aad730f57fbdb24b1927b56a8cccceaa975e794e2ad54dc8f01b41fd97d3383eaa1870580cb5f9a8fe45bf3014c701311b8688c20569e3570cd8aa1e2432082ed2c08e3c9e964c2c469f5bd0d9351c09141523d5bc5308290d96c58553be4360ff990ccd370d5fa1790ff2d81b1fe67b6d1af785f01080f3e2ea58c3af2c78bad719e9a94cd7cbc64076a925d83108ad4480717dc7ac4656cbbef84f8564e320fcc480ee8c5aed82886d1520d4f4914b09e0f94c797a95d4ee73e8307062efd7001aba6564114e37f1cab3f34fb1cf21fce188978aadca7c9797e95e34753876dfa1d4a0a9bc48b71ba042abb1128e69fbae5cd27ff76006288a2579c7ed78f8d52dcd1ac7b62ba27414e3c1862fe5364137fd0270c29b3186f4af58040d476986d805e3fbdc1b8ddc9a1bc0e400adaeb71b22e728597853b23b757719e180dc708cecac0995d22d9b8ffbe7a40ffaea4129b20d31bcf3d33941e71be7085411c0090606dfdcfb310cbb4b0b4373c4edbfa669850af5f70e14134912b5c1f9fdbcaf3ae3a0c13618d7a7916a0edf10ac194e37a24aaa90b157233a5d6474ab0fa10d9cdeff5515a726ea11e676415374687748d8b2d9c42b15f912111a0f9d1c212f784dcb006fa8338fc3e9257321f5491f84dac2da4488fda9a4018d0e1ea8d62ac35a0ad3eca86a9f75ce2eafe35411d0b79da424ca791b50a5b61f45ef13492c8da1f48a62e2785ad2bef617d64eb7cd887910e9eb537406507b2e60b4f479f12ff35e01b62f1515db405d8e45cd2bf2e8c88b4849665fd8e3deb9ab946448c07b2bb154fc0256e2332297db4872fd5d87125f35fd4897f8b7bf810ac5a5c2711f32cae4070dfaefac74e7b5b2ec6f395831db2da4eb4d4db9e2df7cb16f052fff753a049ef654d3445edab7f3148444713f4c831942f181c6b59d170ee26ca88ad53997d6d650b2f31493817ec024c5e35931077f233dec7065a5b9a1520d74457fe6117a3e3a07d12e31018a0a3719b5695d4bf352928c5373159e2df90e32c9d1b18da084ffa7ce7d3296bb622847a78a06512ab76762effa3311cfe01991be43f792a753e730707aabb191f9f44279071b895e5156618b4320e6efd6697132ed8b5f20dc1e27faa02cfe82b1d50289b9a1297d4ec6ff730fb69604246e00929285d3ff6406a18395f048159013a493fa23125b248c7c5cfa0f0fd41ea0ca774fc98ad8725c7ab93eee664006dcc0738ff466168d01a948b1812e1e39c5751d540df6bb8086680e9de38c2b688b281727ceb3575132c94b5d405b9363a171f17bd51fb1b4d2ec696ac597024f0c1fb5bc912c6a101837cdda1ce7923eca2bccc2352c398bdf89f7b4d869a761f976fa5075dd208e51841a87f02afe47ba72fc562a9364cafa24f76153264a474745d5137b413ef8a73a0433f2dda55d70c425a7df1cf850a27849653c878638586169711cbbbdbc4cfa418b8948ceb3296d9044078b3192e0194bb1b642db38f6ed4bf5c8cfe81e85c32987ae4aa658dc995c948c8ed2e8ee3bcda1be9aea16f5269d37b74f4d1ab5ac58a3dae05c5ebda045878586f5d37f5e3a5312e65d8beb29448739b4de4d79adf6e89ea35abaf80bb4d291ab952ba3dceaa53fc7fc4a2bae3ea89c565d1a596a47c74977f073290654c97ccab5ae3465ebe23888ce90c1298350b1d26849ad8aacea748a3dc4c02b5280a0993965ffc5abb58fcfd40278235ca8f0d91886d9986bd63089d8ad91f8ec345414d4746295e3f43fe33f828b2cb249da44d6554cc0d994796108b7efd11b0eaa52188faa9b4e97b4709eca23531d57ae5f40363c12deee1fdeda93ac9de1508397f9f8c41e28738c145306ccded6ed90fbddc41f348c614fe43bea6bbfbffd836954e7c654405b1e6aadce9f842363e5b745394bdd3601b38e7a03a7b46995c95fa2354b262603556cd950a136a86111e3d74b350aa15b3901bdc6fd1e16d0e75991fc75734e22e7205530bc81c556fc0efa5b2b16eca03c44ec6a4bbe40c37c9cbb64bcddff370f5f080318bd0177dbd7ef412a905ffbf20da66e5b38784ddb8944c5c467c89a51b4901a8434ba47e6b7273b0f47762de4ae0999779577699fab5a9eefe7364e625cf264d5a820bbe7ac65063dadf22350d247e0f47da787688bf9a941b52a9e2c7bb014d7a58dad3b156231c678756b7f47ae68f5f0165384e8ea1fbf34c7b658c63fd309a7ed572ea4264b7ddea6189d8b5b0e78c8350181f4c6d7e81696e0879a2c833040d33b3fc261fc21ca873239c3c81d93c52b037fdd07e8b29443738839c6d36511268650871bef2f8db1af4c231f02be317bafec4376b86580bb589d1539b3b44813dea0cf7817bf9efbfc6d8d7831ca191551e4cef7e897f8b8aa3a275ae190e8f5f812cab671101580da176bbec5a45d4486fed1ab6ea064e371e24f989297a0c0b101b9d7be72ba50673eac6f892538074bf27be3ca18faedb6f4e0f93547b53e13c0fdc6b40837af80c653cf1b6a29729d859d5a996b29902bac1e62080977cd5859d0d4a633eda09f29693f703f29252e46757b62f6722d053b544a268b5198062d9c6fc4b82a0af7403073d0ccf6db426b021989e160d3e5fcdd0ee73a2a120f4558491298c2aa0f418f521c554b4f7e8d57510c976f623ca2d88eeb70b11cda62bf1344fa9082625162cd73704661a91e4a80e00e58003ec4a02aebe1951e0babca0796ecf2e20a3dd9ffa57374469748f4b63e6bfffa19671a5c18b5ed7cfa09290843c5cefa6b39b52a0295fa7dbe57b5ff01973719d646f0bc5ffc4cbf566ad61ce07942c01d729f1695b1ae70a70b93b54c31c0dc378794dd2b0aea8e035aecd70ee1049a2afae14b44f38878baaf7c618291086ebfdfcf57e7d86ca14e7475df842acb258238538dbe4182c4a8e29e95980efb88f154ba83c4a5fa700be66eb08aa96ca012b444edc1bc02bb38b1873b5fabef796d5333954979edb1c3eed1085736d38324b844bd0264e2b17a9a3e018bc8c260d68af1a329c1e3f88a93f08818840cdbe284514083db8704a0c24ddfd278c147da299036d71a5e9e8f4e4496fdbfb5719ec91faea2b41696a0ff71a2efac82d269a5695d30e547b08559a9f0d709f23233dd2f37efdde1f1fbd81012bad7094182a5ff889013bb81ce4673a52e8e48e765fa66f37b9177fcac99e18e8261349b5d32ac53cbdec48d107784aa75ea2dbd49c400c5a7441f3c72d252d46f0799afd55155c2dc2de8808b8466ed729812e2862a9d95fc451df39f1f1fe47fe90e3c08d2d1e5255e0233c661ba5c08535e62c79ec343a9fdac456387c939c884972395f2ad7a3577fa167b35773b44965b6f40c1234eff72eb8b3760486b7381c6ff2f421b4dc77a313b0b4b6fe5357869628940ca62e353e7113f000f527e8ab2121636ce78ccd5748d313d311197fd83b9880b9d6103cdf6a00a9167cd775d929b6e7bd806e9cdc625dcf848843ab1579113f8f785b27b35c53edcaab688476b2fd40c6b1aa8a1fabb53bbec550d4b5a6c92e57373f9d775659f19c653b4868f87ab062452d410af83a776a0777b75433fd8373251c740245cd5052dc21574e446246421197b95c01a459cdb959a3d0104e88b7c5758d7aba7d841846884aab1e82977e7fd914804735e753c005dc2a92bafa7e96696d3ceaa3e5a17068ec92f95ea5b7bef4d948cb0a0505ed81acd1fc11d763ef26dbef0b5c6f797facd4d041a4f0f180a276c1439ffac3fcd953ea7493882d0d98e493fda1eaae108f331015ab643c48f07ddc4f3f8aeb099fceb2bc5c65b248f34ce90ac3fb97990bd8677f10dbba0e6daf17eb98edb9abf044be1b653b239da6bcb7f41bf1afad34dfd122e1c059c21479574c0592e65c23b94224eb3254ceff630a59a7da19abecece933595231b4a8d577505b3e4afc31269f82d51cab4c606eaa7508219199024fd47ade4429462370ef0a9b57ff605cc08a61823539b10f65c86bcf356af966ca37f84aae8140c6b135879ed4be7b3f7cd9117e28f6a628e0945b00d3f04be62915d065e5cfbb4455b61df21c3048cf0bb87795aeb2123336dd1ff83f225cde0b37cf51373381a1f563f7c3a2ce40992df2f8a45eda51450455fb4591f90bfb6a37baf1b0968f637917d063cd807ea5b5193c9f97a876d8cb323287ac2e7791e930ec0b874d559072fe50be2b6f5be2618f6b8b2310aa059c67cb51ad7460e40cb4a11f96e0000559c078b8d2f002f4cb6609c6ee7677f742ea7b4c06880e44deda73984819d18c46bbdd7d8afb232bc51881c4032841f1783f77f971bb22621a50566a829d19d94cd0f8348cb9d54427b8f5ba5dcc847de6cd32e865f357e4d38377b248f6e44b1f118da78dfacbce2c70f126a1d5b0de3e179f793b49f9b3986553d1d06e13e733e8ced27adb77f34a5d1353e90adc2f569b736e44e851901d502abdd7b049cb8f488179b5e88c00be2b865808fcb91f1cafd17bdbe9569b444c758012cea375d54b9bd29951fee815fcf2b57046fffca063bbc6053de95b38be77e247469d4021864c379d99a01463e552c36f6664218f7e4ab0379b1c20b2b3245c8cb3c310c6dff7b625aa4dc4de7158294ca488f4a947725356e37f3604e1116e032766e5d39229f6271027ccf78b36d94a811d2e75418fd90524070b9344296d7e1185e10963d865b31dab672025b5918e2043c69130fcf9e439fea5254aaac6042fd0fdc532d2d5dec2270137086eaa1717e6574578c957c139e7a8a75fca5358667e86559e62cdb4277b10531b3a608d2cde8291a8e0f07413edb7d7b53b678d3f3e5d0e5136cb6db545222a8ed26ff798cfbf93fb17b6e4bf5f4648a66624d959b37a44a44eb63a4718c37455caae86c8f7940a305c6fd2e548180df662d8752b9b45a2be65c7f64e0cf513b04426a46979c42d317e7b69ea77bb4c33368a06f11859857741ed8e88344a13ab677336de08c776c21599bf31a5b80c997308cfcc08020c79ab3fd3c599245f4170a9067a0032280619c624aea2110de386be169021801cc60fab385106689afecf5c7e28271258d4c585da1401a82bd1455c719e259d9709e9c", 0x1000}, {&(0x7f0000002640)="eca1b2f11893c7c2723e8408ed95ded06f5ebaa90a6c3f8942d0322e64452f455acb13923dd8baa57f6c5dd87d488d6999560a985cd0d97061b5399ed7daa49680570cd7f992401ad252a41499cceb59a18a592312b56ebe3eec111a2a5a1a07d7bc749cd180a8a37f181e41d79f0240ab12", 0x72}, {&(0x7f00000026c0)="b0c9aa02b7cd912d73b4ae88275115a5be3515ae1e1262caaa057ee1a453e6e2be6ee35091caeab3463e5eb25d6c28b4f76b000350966f31dc6e5237886993b7a41da43ee1302a4beebae19bba4ff4ee34fbfc8a865b83fa07dcd20d1d2c733c7ff93ca21c8744da75fc4b315f650a6f6147ab1a10e5786473", 0x79}, {&(0x7f0000000000)="92bbf5b4c003148fdf2509aeb2027e8d029740a81f10a82dee5195", 0x1b}, {&(0x7f0000002740)="92d33ab2c9d14b0a361fab60246a5e985aa0e811283db27e117197e82fbfb6859fff8f0eaa691ef119b616aae333af2244dc9cb263", 0x35}, {&(0x7f0000002780)="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", 0x1000}], 0x9, 0x9) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x30, 0x0, &(0x7f0000000140)=[@increfs={0x40046304, 0x3}, @acquire={0x40046305, 0x1}, @request_death={0x400c630e, 0x3}, @request_death={0x400c630e, 0x3}], 0x1000, 0x0, &(0x7f0000000200)="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"}) connect$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default, 0x1}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default]}, 0x48) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f00000067c0), 0x0, 0x400) r3 = openat$vimc0(0xffffff9c, &(0x7f0000006800), 0x2, 0x0) vmsplice(r3, &(0x7f0000006880)=[{&(0x7f0000006840)="7c3580ed667f4270547105d59f55a711a81f9301cfb832dd10d5b5fe5d1783456f8f503f5a323e7d7eca89b83c3d015c5786edd2459d379110", 0x39}], 0x1, 0xf) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) recvmmsg(r2, &(0x7f000000a980)=[{{&(0x7f0000003800)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004a00)=[{&(0x7f00000068c0)=""/211, 0xd3}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/36, 0x24}, {&(0x7f00000049c0)=""/31, 0x1f}], 0x4, &(0x7f0000004a40)=""/76, 0x4c}}, {{&(0x7f0000004ac0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000006000)=[{&(0x7f0000004b40)=""/245, 0xf5}, {&(0x7f0000004c40)=""/159, 0x9f}, {&(0x7f0000004d00)=""/169, 0xa9}, {&(0x7f0000004dc0)=""/34, 0x22}, {&(0x7f0000004e00)=""/243, 0xf3}, {&(0x7f0000004f00)=""/147, 0x93}, {&(0x7f0000004fc0)=""/52, 0x34}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x8, &(0x7f0000006040)=""/18, 0x12}, 0x1}, {{&(0x7f0000006080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000064c0)=[{&(0x7f0000006100)=""/151, 0x97}, {&(0x7f00000061c0)=""/162, 0xa2}, {&(0x7f0000006280)=""/157, 0x9d}, {&(0x7f0000006340)=""/213, 0xd5}, {&(0x7f0000006440)=""/114, 0x72}], 0x5, &(0x7f0000006500)=""/63, 0x3f}, 0xffffe7c1}, {{&(0x7f0000006540)=@ieee802154, 0x80, &(0x7f0000006700)=[{&(0x7f00000065c0)=""/167, 0xa7}, {&(0x7f0000006680)=""/23, 0x17}, {&(0x7f00000066c0)=""/9, 0x9}], 0x3}, 0x3f}, {{&(0x7f0000006740)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000077c0)=[{&(0x7f000000ab00)=""/4101, 0x1005}], 0x1, &(0x7f0000007800)=""/236, 0xec}}, {{&(0x7f0000007900)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000007a80)=[{&(0x7f0000007980)=""/227, 0xe3}], 0x1}, 0x80}, {{&(0x7f0000007ac0)=@can, 0x80, &(0x7f0000007f40)=[{&(0x7f0000007b40)=""/236, 0xec}, {&(0x7f0000007c40)=""/4, 0x4}, {&(0x7f0000007c80)=""/124, 0x7c}, {&(0x7f0000007d00)=""/119, 0x77}, {&(0x7f0000007d80)=""/218, 0xda}, {&(0x7f0000007e80)=""/163, 0xa3}], 0x6, &(0x7f0000007f80)=""/36, 0x24}, 0x3}, {{&(0x7f0000007fc0)=@isdn, 0x80, &(0x7f000000a280)=[{&(0x7f0000008040)=""/4096, 0x1000}, {&(0x7f0000009040)=""/195, 0xc3}, {&(0x7f0000009140)=""/4096, 0x1000}, {&(0x7f000000a140)=""/202, 0xca}, {&(0x7f000000a240)=""/62, 0x3e}], 0x5, &(0x7f000000a2c0)=""/88, 0x58}, 0x401}, {{&(0x7f000000a340)=@ieee802154={0x24, @short}, 0x80, &(0x7f000000a480)=[{&(0x7f000000a3c0)=""/140, 0x8c}], 0x1, &(0x7f000000a4c0)=""/227, 0xe3}, 0x6}, {{0x0, 0x0, &(0x7f000000a840)=[{&(0x7f000000a5c0)=""/173, 0xad}, {&(0x7f000000a680)=""/164, 0xa4}, {&(0x7f000000a740)=""/17, 0x11}, {&(0x7f000000a780)=""/171, 0xab}], 0x4, &(0x7f000000a880)=""/194, 0xc2}, 0x8}], 0xa, 0x12000, &(0x7f000000aac0)={0x77359400}) 16:28:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x1000000, &(0x7f0000000080)="a221ac63"}) 16:28:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:03 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, 0x0) 16:28:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1880.440261][ T2806] binder: 2805:2806 unknown command 1074012321 [ 1880.446711][ T2806] binder: 2805:2806 ioctl c0306201 200000c0 returned -22 16:28:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xa}, @increfs_done], 0x0, 0x0, 0x0}) [ 1880.589742][ T2806] binder: 2805:2806 unknown command 1074012321 [ 1880.596202][ T2806] binder: 2805:2806 ioctl c0306201 200000c0 returned -22 [ 1880.838236][ T2813] binder: 2808:2813 ioctl c0306201 20000000 returned -14 [ 1880.872164][ T2815] binder: 2808:2815 ioctl c0306201 20000000 returned -14 [ 1880.891166][ T2817] binder: 2812:2817 ioctl 400454ca 20000600 returned -22 16:28:04 executing program 0: ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000380)=0x2000) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x3}, @enter_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/204, 0xcc, 0x1, 0x2e}, @fda={0x66646185, 0xa, 0x2, 0x19}, @flat=@weak_handle={0x77682a85, 0x1001, 0x3}}, &(0x7f0000000100)={0x0, 0x28, 0x44}}, 0x400}, @register_looper], 0xd, 0x0, &(0x7f0000000300)="84e4be0afd85b3c0b66a95d08e"}) 16:28:04 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, 0x0) 16:28:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x2000000, &(0x7f0000000080)="a221ac63"}) 16:28:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xb}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11d0cbbef0130e3beb5e982f0a8216ab97363880f6bca5ff0e5d8397b3206b87d54254f97cc6c86e60a581ede52592c142f920ecba508cffe08c4698aa2d86c7b6e5617c05083bbbdeb9f29bb29513468c69876dc4ea76839eea6210c62de8a11ccebef26743393cea16"], 0x0, 0x0, 0x0}) [ 1881.884893][ T2831] binder: 2826:2831 ioctl c0306201 20000000 returned -14 [ 1881.933177][ T2832] binder: 2826:2832 ioctl c0306201 20000000 returned -14 16:28:05 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, 0x0) 16:28:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x3000000, &(0x7f0000000080)="a221ac63"}) 16:28:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1882.549894][ T2838] binder: 2836:2838 unknown command -1093939183 [ 1882.556641][ T2838] binder: 2836:2838 ioctl c0306201 200000c0 returned -22 16:28:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xc}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:06 executing program 0: socket$inet(0x2, 0x2, 0x6) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="d34fb7860e1d403d6dfba46e3f8a89fa00000000"], 0x0, 0x0, 0x0}) 16:28:06 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, 0x0) [ 1883.140250][ T2848] binder: 2845:2848 ioctl c0306201 20000000 returned -14 16:28:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1883.229069][ T2850] binder: 2845:2850 ioctl c0306201 20000000 returned -14 16:28:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x4000000, &(0x7f0000000080)="a221ac63"}) 16:28:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xd}, @increfs_done], 0x0, 0x0, 0x0}) [ 1883.709653][ T2859] binder: 2852:2859 unknown command -2034806829 [ 1883.716250][ T2859] binder: 2852:2859 ioctl c0306201 200000c0 returned -22 [ 1883.920418][ T2859] binder: 2852:2859 unknown command -2034806829 [ 1883.927050][ T2859] binder: 2852:2859 ioctl c0306201 200000c0 returned -22 16:28:07 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 16:28:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1884.198992][ T2870] binder: 2867:2870 ioctl c0306201 20000000 returned -14 16:28:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="040004401063abf10000000000000000ac31bb8bce3545"], 0x0, 0x0, 0x0}) [ 1884.244824][ T2872] binder: 2867:2872 ioctl c0306201 20000000 returned -14 16:28:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x5000000, &(0x7f0000000080)="a221ac63"}) 16:28:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xe}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:08 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, 0x0) 16:28:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1884.837778][ T2884] binder: 2880:2884 unknown command 1074003972 [ 1884.844646][ T2884] binder: 2880:2884 ioctl c0306201 200000c0 returned -22 [ 1884.910062][ T2886] binder: 2880:2886 unknown command 1074003972 [ 1884.916657][ T2886] binder: 2880:2886 ioctl c0306201 200000c0 returned -22 [ 1884.973038][ T2889] binder: 2882:2889 ioctl c0306201 20000000 returned -14 [ 1885.005377][ T2890] binder: 2882:2890 ioctl c0306201 20000000 returned -14 16:28:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="046304404b4df7d6133d3fc14d0d2580d9461b89cf507686afff2f0199f434bcf917f622358f4be916f691c0f8db17f44f23d7718ef4a651a61703a397f8f77e043e96fc978cfb39eb301931609dffc9a689c91b706456e38899a1d7169a7e9e6726f5fb247eff6df851e3869867d7a6e890563b52156e13915aad9dde6f6462c5a49b19c6c6aca0340933578081145e1c85afb75f40ce3d94252e868859"], 0x0, 0x0, 0x0}) 16:28:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x6000000, &(0x7f0000000080)="a221ac63"}) 16:28:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x10}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:09 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x6364, 0x0) 16:28:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1885.823494][ T2906] binder: 2900:2906 ioctl c0306201 20000000 returned -14 [ 1885.853270][ T2907] binder: 2900:2907 ioctl c0306201 20000000 returned -14 16:28:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000040)=[@request_death], 0xf0, 0x0, &(0x7f0000000200)="1c103a2791427d85fc4735e37de87d2647bf1b61366bee96f91cbf5d8c136078d91740a350cea7acf4adc3e0dc7553d0d0d20acd84d223fc1d365f05b0385b10527581c91e5ee1fb3d124c59e6e382e0b69e857983020bbf69b5286d5a31077a1798a8f700228fde0e8e615818bec35e47dcbc64e95267c15303c3fe18af621dab2d4a43879b85d7225531dd48925dad35f3c51bf3fc69d8bae46dd03e614c0f12f03ccb6fd4d0a43f8deffde2d3321d6b9395febb5bc32c2692580e4d29cfc744387facd416307601d311fb62f29f6aa35827c7e8ff7c4f8ec6d738961226e3cfbe3ea0c09a21c5e90fbcdb86162a12"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, 0x0, 0x0) r5 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0xff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0xb4, 0x0, &(0x7f0000000300)=[@decrefs, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x1, 0x2, 0x29}, @fda={0x66646185, 0x3, 0x1, 0x12}}, &(0x7f0000000180)={0x0, 0x18, 0x34}}, 0x40}, @request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x1}, @free_buffer={0x40086303, r5}, @increfs={0x40046304, 0x1}, @free_buffer, @enter_looper, @increfs_done={0x40106308, 0x2}], 0x68, 0x0, &(0x7f00000003c0)="e6501a76d43af1672273786fddc3e0bd6274924c61385094f477c13eb46a673bb265e656b52a55625235014f48860d12cef55fdabf258120f955d859d9e0e251d543ce134cbed18341595f9edae5e59722ea37b400127f3afa7592071bc5529f4d35b870df2cafc4"}) 16:28:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x7000000, &(0x7f0000000080)="a221ac63"}) 16:28:09 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8913, 0x0) 16:28:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x11}, @increfs_done], 0x0, 0x0, 0x0}) [ 1886.415498][ T2919] binder: 2918:2919 ioctl 40186366 20000600 returned -22 16:28:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1886.557927][ T2922] binder: 2920:2922 ioctl c0306201 20000000 returned -14 [ 1886.616719][ T2924] binder: 2920:2924 ioctl c0306201 20000000 returned -14 16:28:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x8000000, &(0x7f0000000080)="a221ac63"}) 16:28:10 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:28:10 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8914, 0x0) 16:28:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x12}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1887.298187][ T2937] binder: 2935:2937 ioctl c0306201 20000000 returned -14 [ 1887.361433][ T2939] binder: 2935:2939 ioctl c0306201 20000000 returned -14 16:28:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c5828, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:11 executing program 0: ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000040)={0x4, "8493225acebd8793204b08d14e0b568c0440e45859578e72f78e14d1acb0ed7b", 0x20, 0x3, 0x81, 0x10, 0x5}) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="34a4927b8b5fa8345d871f0666d5a3d5a9d9e44d3193f7182788d0d32622071da8f609ec74af77b033eef181f67ecb25fadc5e1f47b033141313140439c6ffa0e85b050be9cf7b71dc4e04555e70e7b783aebad2a4ace9c39af8946235bbdec810b5c5f55004c160674d6deaf933e0d080483bc287928dbb86c7084724e716eead3967ddd684bebe0dabdad951a523114e055e42a3494b26d6141e0e341de845649c218a51708334eef6f0ed0fca4b69c457e3f20ca3ac2d7161c481db6a2f85093d2d1b4cfc7e8c86a88fa49f7883ccbafcfc482e08829347f1948ddcea59673b29412e881493f5b7"], 0x0, 0x0, 0x0}) 16:28:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x9000000, &(0x7f0000000080)="a221ac63"}) 16:28:11 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, 0x0) 16:28:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x25}, @increfs_done], 0x0, 0x0, 0x0}) [ 1888.201094][ T2950] binder: 2948:2950 unknown command 2073207860 [ 1888.209807][ T2950] binder: 2948:2950 ioctl c0306201 200000c0 returned -22 16:28:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c5829, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1888.330601][ T2953] binder: 2948:2953 unknown command 2073207860 [ 1888.337088][ T2953] binder: 2948:2953 ioctl c0306201 200000c0 returned -22 [ 1888.409464][ T2955] binder: 2951:2955 ioctl c0306201 20000000 returned -14 [ 1888.500083][ T2958] binder: 2951:2958 ioctl c0306201 20000000 returned -14 16:28:12 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000009c72b4a3a02669eda70ad3d13aa0397f3aa9932334d6841b180509ce5f611d8256c02befe96f21f20dd711894e519e5f90bfa672588d502d14b92c9c249acdf9513be1b142e7473e467762205412a3449323fb7792d09894de797fcfc9e91ee972503ddcb842ac48450d61bd00b4c031b39f1716ec45b8c366f2567ea9"], 0x0, 0x0, 0x0}) 16:28:12 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, 0x0) 16:28:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xa000000, &(0x7f0000000080)="a221ac63"}) 16:28:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x5c}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c582a, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1889.116614][ T2967] binder: 2964:2967 unknown command 0 [ 1889.122120][ T2967] binder: 2964:2967 ioctl c0306201 200000c0 returned -22 [ 1889.198670][ T2970] binder: 2964:2970 unknown command 0 [ 1889.204410][ T2970] binder: 2964:2970 ioctl c0306201 200000c0 returned -22 16:28:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1889.400474][ T2975] binder: 2972:2975 ioctl c0306201 20000000 returned -14 16:28:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000080), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00@\x00'], 0x0, 0x0, 0x0}) 16:28:13 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, 0x0) [ 1889.480343][ T2977] binder: 2972:2977 ioctl c0306201 20000000 returned -14 16:28:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x300}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xb000000, &(0x7f0000000080)="a221ac63"}) 16:28:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c582b, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x500}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1890.014733][ T2986] binder: 2985:2986 unknown command 4194304 [ 1890.020754][ T2986] binder: 2985:2986 ioctl c0306201 200000c0 returned -22 16:28:13 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, 0x0) [ 1890.227716][ T2991] binder: 2990:2991 ioctl c0306201 20000000 returned -14 [ 1890.311572][ T2994] binder: 2990:2994 ioctl c0306201 20000000 returned -14 16:28:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x4145c3) r2 = pidfd_getfd(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0461044001000000"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000080)="1f", 0x1) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000140)=""/58) r4 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x400100, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000100)=0xffffff91) ioctl$NBD_CLEAR_QUE(r2, 0xab05) 16:28:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c5839, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x600}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xc000000, &(0x7f0000000080)="a221ac63"}) 16:28:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:14 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, 0x0) [ 1891.085277][ T3008] binder: 3007:3008 ioctl c0306201 20000000 returned -14 [ 1891.156732][ T3009] binder: 3007:3009 ioctl c0306201 20000000 returned -14 16:28:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x700}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xd000000, &(0x7f0000000080)="a221ac63"}) 16:28:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:15 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40186366, 0x0) [ 1891.696519][ T3017] binder: 3015:3017 ioctl 80086301 20000600 returned -22 [ 1891.877089][ T3022] binder: 3020:3022 ioctl c0306201 20000000 returned -14 16:28:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x900}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xe000000, &(0x7f0000000080)="a221ac63"}) 16:28:15 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, 0x0) 16:28:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xa00}, @increfs_done], 0x0, 0x0, 0x0}) [ 1892.589543][ T3034] binder: 3030:3034 ioctl c0306201 20000000 returned -14 [ 1892.680827][ T3037] binder: 3030:3037 ioctl c0306201 20000000 returned -14 16:28:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:16 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c5828, 0x0) 16:28:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x10000000, &(0x7f0000000080)="a221ac63"}) 16:28:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xb00}, @increfs_done], 0x0, 0x0, 0x0}) [ 1893.476177][ T3049] binder: 3048:3049 ioctl c0306201 20000000 returned -14 16:28:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1893.606698][ T3051] binder: 3048:3051 ioctl c0306201 20000000 returned -14 16:28:17 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c5829, 0x0) 16:28:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x11000000, &(0x7f0000000080)="a221ac63"}) 16:28:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xc00}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1894.398178][ T3065] binder: 3063:3065 ioctl c0306201 20000000 returned -14 16:28:18 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c582a, 0x0) [ 1894.516450][ T3066] binder: 3063:3066 ioctl c0306201 20000000 returned -14 16:28:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xd00}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x12000000, &(0x7f0000000080)="a221ac63"}) 16:28:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:18 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c582b, 0x0) 16:28:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xe00}, @increfs_done], 0x0, 0x0, 0x0}) [ 1895.191922][ T3077] binder: 3076:3077 ioctl c0306201 20000000 returned -14 [ 1895.222410][ T3079] binder: 3078:3079 ioctl c018620c 20000600 returned -22 [ 1895.269805][ T3080] binder: 3076:3080 ioctl c0306201 20000000 returned -14 16:28:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x25000000, &(0x7f0000000080)="a221ac63"}) 16:28:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:19 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c5839, 0x0) 16:28:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x1100}, @increfs_done], 0x0, 0x0, 0x0}) [ 1895.891119][ T3091] binder: 3089:3091 ioctl c0306201 20000000 returned -14 [ 1895.945365][ T3093] binder: 3089:3093 ioctl c0306201 20000000 returned -14 16:28:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x4c000000, &(0x7f0000000080)="a221ac63"}) 16:28:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x1200}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:20 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, 0x0) [ 1896.613655][ T3103] binder: 3102:3103 ioctl c0306201 20000000 returned -14 [ 1896.639895][ T3105] binder: 3102:3105 ioctl c0306201 20000000 returned -14 16:28:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x5c000000, &(0x7f0000000080)="a221ac63"}) 16:28:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x2500}, @increfs_done], 0x0, 0x0, 0x0}) [ 1897.307156][ T3116] binder: 3113:3116 ioctl c0306203 20000600 returned -22 16:28:21 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, 0x0) [ 1897.369213][ T3118] binder: 3115:3118 ioctl c0306201 20000000 returned -14 [ 1897.429666][ T3120] binder: 3115:3120 ioctl c0306201 20000000 returned -14 16:28:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xfdfdffff, &(0x7f0000000080)="a221ac63"}) 16:28:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x5c00}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:21 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, 0x0) [ 1898.211082][ T3134] binder: 3130:3134 ioctl c0306205 20000600 returned -22 [ 1898.223190][ T3132] binder: 3128:3132 ioctl c0306201 20000000 returned -14 [ 1898.258113][ T3136] binder: 3128:3136 ioctl c0306201 20000000 returned -14 16:28:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xff000000, &(0x7f0000000080)="a221ac63"}) 16:28:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x5e, 0x0, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xff00}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:22 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, 0x0) [ 1899.097882][ T3146] binder: 3144:3146 ioctl c0306201 20000000 returned -14 [ 1899.167380][ T3148] binder: 3144:3148 ioctl c0306201 20000000 returned -14 16:28:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x2, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xfffffdfd, &(0x7f0000000080)="a221ac63"}) 16:28:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xfeffff}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:23 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, 0x0) [ 1899.776796][ T3158] binder: 3155:3158 unknown command 16448 [ 1899.782969][ T3158] binder: 3155:3158 ioctl c0306201 20000600 returned -22 [ 1899.829670][ T3159] binder: 3156:3159 ioctl c0306201 20000000 returned -14 16:28:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1899.903578][ T3161] binder: 3156:3161 ioctl c0306201 20000000 returned -14 16:28:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xfffffe00, &(0x7f0000000080)="a221ac63"}) 16:28:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x3, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x1000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:24 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, 0x0) 16:28:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1900.659969][ T3171] binder: 3168:3171 unknown command 64 [ 1900.666018][ T3171] binder: 3168:3171 ioctl c0306201 20000600 returned -22 [ 1900.687743][ T3172] binder: 3170:3172 ioctl c0306201 20000000 returned -14 [ 1900.828708][ T3175] binder: 3170:3175 ioctl c0306201 20000000 returned -14 16:28:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x4, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x2000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x1000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:25 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, 0x0) [ 1901.443254][ T3182] binder: 3181:3182 unknown command 0 [ 1901.448761][ T3182] binder: 3181:3182 ioctl c0306201 20000600 returned -22 [ 1901.577654][ T3185] binder: 3184:3185 ioctl c0306201 20000000 returned -14 [ 1901.667736][ T3187] binder: 3184:3187 ioctl c0306201 20000000 returned -14 16:28:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x5, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x3000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xfeffff00000000, &(0x7f0000000080)="a221ac63"}) 16:28:25 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000000)=[{0x7, 0x1, 0x1000, &(0x7f0000000340)="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"}], 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(0xffffffffffffffff, 0x40044103, &(0x7f0000000080)=0x1) 16:28:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1902.321837][ T3194] binder: 3193:3194 unknown command 0 [ 1902.327734][ T3194] binder: 3193:3194 ioctl c0306201 20000600 returned -22 16:28:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x6, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1902.704128][ T3200] binder: 3196:3200 ioctl c0306201 20000000 returned -14 [ 1902.770051][ T3202] binder: 3196:3202 ioctl c0306201 20000000 returned -14 16:28:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x4000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:26 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x95) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0xb3, 0x2, &(0x7f0000000000)={0x1f, "670d7b72b7ee4ca02bd940ff9c52e81afa4c90fb7285d7249378e5ea708aa8965c"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x19a3) 16:28:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x100000000000000, &(0x7f0000000080)="a221ac63"}) [ 1903.224117][ T3207] binder: 3206:3207 unknown command 0 [ 1903.229622][ T3207] binder: 3206:3207 ioctl c0306201 20000600 returned -22 16:28:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x7, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:27 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x5000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1903.691451][ T3216] binder: 3212:3216 ioctl c0306201 20000000 returned -14 16:28:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1903.786992][ T3218] binder: 3212:3218 ioctl c0306201 20000000 returned -14 16:28:27 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) r1 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0xf001, 0xa10, 0x4f, &(0x7f0000000040)="c018b97f89d64eec80d0f93e72098f7048668fdfdb1c5f66b60e224ddf0195291fdd1f045ae5138fcd9f2fba15378a6e01db23d3294493c2af8585fda5181853ef66f939876bffb7d8979d21a4f6d0"}], 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:28:27 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x4a}, @val={0x8, 0x3, r1}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}}, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000007c0)={0x514, r0, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x6}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "0d567e7bf3b347d4ebe9fef6c2"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x4}], @NL80211_ATTR_IE={0xaa, 0x2a, [@link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @tim={0x5, 0x1d, {0x7f, 0x5e, 0x0, "97dea928db16440bade7f96fe34eed18fd7820f67bd664fab501"}}, @measure_req={0x26, 0x71, {0x5, 0x0, 0x7f, "48460409e484f2895a230975fc85ce112ff9c1bbd43188df3bf4c7d03bb9650da90c43409b76647132786520114e4e091a911d1424e341c52fb14edcd10c3db83c18db4b4cf101d47f4b24a8e017c7195b64d998a2ce6c0b56d543d8054eb803c18efc7059bc8085925af5fadb6a"}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "b6ea"}], @NL80211_ATTR_IE={0xf6, 0x2a, [@perr={0x84, 0x82, {0x8, 0x8, [@ext={{}, @device_a, 0x400, @device_b, 0x5}, @not_ext={{}, @device_b, 0x89a5, "", 0x3c}, @not_ext={{}, @device_a, 0x9, "", 0x35}, @not_ext={{}, @device_b, 0x6, "", 0x24}, @ext={{}, @broadcast, 0x6f57, @broadcast, 0x2e}, @ext={{}, @device_a, 0x1a91, @broadcast, 0x6}, @not_ext={{}, @broadcast, 0x81c, "", 0x2e}, @ext={{}, @device_b, 0xb9, @device_a, 0x1e}]}}, @random_vendor={0xdd, 0x6c, "5398ae8bf14a3f8f7c885f8b2706f22f720491fb323e233f4ddd73b0cfc373590b32652f03a7fdbd9cabba37fbc56c74d88ef567dce9d9f8b25e7332ceba90bf2c92fff99a0e51d8ac7838825c9ba0b7a5a179055b3b44c33e8ccc8b0a57e85c19a768eebd147c3cddf95346"}]}, @NL80211_ATTR_IE={0x307, 0x2a, [@random_vendor={0xdd, 0xe6, "8b5830276deb85975cbc8131f7f090c84717616bee1518c84643eb80340299c30765e508e67a3529beb93e9bdf8d680a2216f8560092e6aac134a04735773347b3bbe4867714bb4871fc06db86083e014a0fa4bffac9b29f3b1ff086c09c03bc6c723b566da160055e8b404a11eaa3f4668f858da4157a7d862f7c211b395a0cd66c33ebdbc04d3596344484c296addb913bf86fb7b2800ec70d2bef3ac2466a9a721ba6c0940c722076d57e601c8f7352349f15b2d729b1f1f5dd6d8ebc8d5fae984435c05c65ed1d41dbbd1f93ff4b60dc6353d668e82e5389a1ee2654bacdcb963014a13f"}, @mic={0x8c, 0x10, {0x690, "b6f5b7f2ed9c", @short="abc47c12a155426b"}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @perr={0x84, 0xc3, {0xfd, 0xd, [@ext={{}, @device_b, 0x0, @broadcast, 0x1b}, @not_ext={{}, @device_b, 0x5b4, "", 0x31}, @not_ext={{}, @device_a, 0x6, "", 0x2}, @not_ext={{}, @device_a, 0x0, "", 0xf}, @not_ext={{}, @broadcast, 0xb7, "", 0xb}, @not_ext={{}, @broadcast, 0x6, "", 0x2b}, @ext={{}, @device_a, 0x45cc6d7f, @device_a, 0x13}, @ext={{}, @broadcast, 0xfffffffa, @broadcast, 0x1d}, @not_ext={{}, @device_b, 0xffffff7c, "", 0xf}, @not_ext={{}, @broadcast, 0x1000, "", 0x3f}, @not_ext={{}, @device_a, 0x6, "", 0x9}, @ext={{}, @device_b, 0x9, @broadcast, 0xc}, @not_ext={{}, @device_b, 0x3ff, "", 0x2c}]}}, @prep={0x83, 0x1f, @not_ext={{}, 0x3, 0x8, @device_a, 0x6, "", 0xffff, 0x6, @device_a, 0x9}}, @supported_rates={0x1, 0x2, [{0x6c, 0x1}, {0x4, 0x1}]}, @link_id={0x65, 0x12}, @perr={0x84, 0xf5, {0x7, 0xf, [@not_ext={{}, @broadcast, 0x6, "", 0x42}, @ext={{}, @device_a, 0x0, @device_b, 0x6}, @ext={{}, @device_a, 0x1, @device_b, 0x20}, @ext={{}, @broadcast, 0xfffffffa, @broadcast, 0x11}, @ext={{}, @device_b, 0x6f30, @device_a, 0xa}, @ext={{}, @device_a, 0x4, @device_a, 0x19}, @not_ext={{}, @device_a, 0x1, "", 0x34}, @ext={{}, @broadcast, 0x6, @broadcast, 0x15}, @not_ext={{}, @device_a, 0x324, "", 0x28}, @not_ext={{}, @broadcast, 0xfffffffc, "", 0x8}, @ext={{}, @device_b, 0x100, @device_a, 0x1b}, @ext={{}, @device_a, 0x400, @device_a, 0x7}, @not_ext={{}, @device_b, 0x80, "", 0x1f}, @not_ext={{}, @device_a, 0x10b6, "", 0x2f}, @not_ext={{}, @broadcast, 0x7a6530a4, "", 0x1a}]}}]}, @NL80211_ATTR_IE={0x28, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0xa5, 0x30, 0x7}}, @peer_mgmt={0x75, 0x14, {0x0, 0x5, @void, @void, @val="a7d1ea12af4d58fc536922a2889005da"}}, @channel_switch={0x25, 0x3, {0x1, 0x30, 0x3}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}]}]}, 0x514}, 0x1, 0x0, 0x0, 0x20040842}, 0x8000) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10001) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x4ffe0, 0x0) r7 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) r8 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="03630840a66cf65297c3a7e3d6069c470a04401f55004496058e8888c70893288b459b90caf27609cd2e610523f38659e21a31ec62988e598cd74db06df7458e21f8", @ANYRES64=r8, @ANYBLOB='\fc\x00\x00'], 0x10, 0x0, &(0x7f0000000040)="aa671b5b4afe602c3d141ded1ea8d7f4"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="036308b013f7895ef0fa23d90f7340", @ANYRES64=r8, @ANYBLOB="1063084000000000000000000e630c400300"/28], 0x3c, 0x0, &(0x7f0000000100)="3684ae21e6ce873a7b68a073188cca81c618c077111d45c041e6c072fa7f5c828cbcab81213b371797f04e6f26b8f693557ee20b4d16369ce4063ce1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r4}, @enter_looper], 0x10, 0x0, &(0x7f0000000040)="aa671b5b4afe602c3d141ded1ea8d7f4"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630840", @ANYRES64=r4, @ANYBLOB='\'c\x00\x00'], 0x0, 0x0, 0x0}) [ 1903.961368][ T3221] binder: 3219:3221 unknown command 0 [ 1903.967056][ T3221] binder: 3219:3221 ioctl c0306201 20000600 returned -22 16:28:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x200000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x8, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1904.234987][ T3225] binder: BINDER_SET_CONTEXT_MGR already set [ 1904.241108][ T3225] binder: 3223:3225 ioctl 40046207 0 returned -16 16:28:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x6000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1904.299578][ T3227] binder: 3223:3227 unknown command 1201407702 [ 1904.306136][ T3227] binder: 3223:3227 ioctl c0306201 200000c0 returned -22 [ 1904.363288][ T3225] binder: 3223:3225 ioctl c0306201 200000c0 returned -11 [ 1904.379596][ T3225] binder: 3223:3225 unknown command 25383 [ 1904.387771][ T3225] binder: 3223:3225 ioctl c0306201 200000c0 returned -22 [ 1904.470899][ T3231] binder: 3223:3231 unknown command 1201407702 [ 1904.477510][ T3231] binder: 3223:3231 ioctl c0306201 200000c0 returned -22 [ 1904.521359][ T3227] binder: 3223:3227 ioctl c0306201 200000c0 returned -11 16:28:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1904.651884][ T3235] binder: 3232:3235 ioctl c0306201 20000000 returned -14 16:28:28 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x3, 0x6411, 0xc7, &(0x7f0000000000)="1c181cf1d9128198a4ce2cb8f4c84909837b71c3945f4893a5c13a3bbbf60e5088f438012606e8d8447fd33dfd10a1b9dd5d4530f13a269a983b85cefbc3ea8da9dfd7bf8a4efe45892cedaf71ca2647f5e0a1f3a52ec3612bce1a12b550ffd89d34e86e6c4e28a49b7edd19bc7692b52022f75d0fcf5db0de02338079aa89643f24a9f31edfe2d61146eee81a380bd6bd0acd2782419bf1b7de40db9dcf1cb71656d24ff76d4dc071d1958b3f1b334e976ede954e86f3de3264688db74e157c80b51942922028"}, {0x5, 0x8400, 0x12, &(0x7f0000000100)="36da598c7bc8d94d81d92bfff0ba7b0dc257"}, {0x101, 0xc000, 0x1e, &(0x7f0000000140)="523770a2a7cf0a509b1c3f764f55bea4f9a36e0b1e86c1e24add6aa493da"}, {0xff, 0x601, 0xd0, &(0x7f0000000180)="c38d0c9da682dd995a16439409cd1b073d1edd53ee07899778c962a20a4d2adbc9ff045f0586eadfcc68a48db279c0ea8fe2943138d751ba5e73ade55c2938c553985530eddc77f25fde5e96fd21ac43c7a0ee03f212e60a4d63c17d9f846cfbc9a520f96d586a116e8804aec8548c794d3341ed3ea7cb8aa82e31b12bad912dd12ed4c0cd62f25d5393a65c9297a2c5c05e59abf4d5faacf4aaeecf4c7a089753161be0e03c755ea5fc769d0657bdc5c0382ef02943c4f6eb3c7c5fb234297715399a63593fd8d380b4a68f2fa7f11c"}], 0x4}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000003c0)={0x0, 0x1, 0xfffffffe, &(0x7f0000000340)={0x6, "2b0aab82e6510fd971a0d152428b201aa9cdc84f49ba6bc259b77a1ad0689e324e"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1904.729496][ T3236] binder: 3234:3236 unknown command 0 [ 1904.735240][ T3236] binder: 3234:3236 ioctl c0306201 20000600 returned -22 [ 1904.787781][ T3237] binder: 3232:3237 ioctl c0306201 20000000 returned -14 16:28:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x300000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x9, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x7000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:29 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x100, 0x333401) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat$uhid(0xffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000011c0)={&(0x7f0000001180)=[{0x9, 0x4800, 0x1000, &(0x7f00000000c0)="a263698c48bdb9349b665ff078102295b8e414dfdefd1903e01d4d48d05a02bf3cc330fca28c5fe453cca7014a6a1cc4268fa9a9f33b732b7082eff3a3bee17bf70d9322ffe1acefebbd7737a883ea81d57483d028cb623034c43417409d711d6f92df73cdf61debd24a007d5aa06b6cb156f86f9f4c1945f9b35d411b0865eeecd8d8161b8c5a748b4695a0080f4a8fbd5b42298ec80f59ab30dafbb787510df64e27f02f103ad5447f2181734f53d7153d43cd440d1418f3888e63f81dd96f96d12ac04bb69ddb8d327c47e82bcdbc528320014a9433a2d717fbaeb260f138cc972e5b8591e094189b5f9b89354dcc744848688d99f4c890f8ba1f4047b2554eb823c76e264b1eac951096d4a0d3fc9ffc0e5e614369aede8936ab6b81a875acd3c4f51c535cbe0057bb53a08d20c2f76ab3593f66834b21d02c5a3673e131fdc0f302e8cc0ef4df16121f9a95db510651f1e74e7b2efdd15b806f17ac1ba7028d03da16a7c5b69db7b42d8b1e57221790dcdf57e9709c11fb686ca8644bee530265d2e0401e6c8785d377ebe8d0b538a6449b70d3077544f4e5c8ef6da548c338c56a921b8ec86e3caf9422f78b3f598ff655236ef0e2ebb6a62aa5b1a59eaf8a773641571ac584b7be68f8227ca5aa066ada81642ba0dc246d71893aca4baa8d0a5f792b7600dac7825825f6573a00b64154b68d6dbb29e794ee04d167f5de09b505c14719cf7197c79f335c452f4f21276272ead51f04f55c8f20c952671aae34bd87b7b7c02cedb72aa1d9a81fab99ffebc441e3f36fd38b63271fce271d205082c45fc949541463e2dfba93c694f7cc27f0b3e4fda8e353102dd7d57eb56fde3aa407afc964314bf9803941d48b176de1d830aaa5d4eb0084878ddd94e5488c7e6bb7cec469b9fdb2d6c528727efcac590d536b8eef77787736cd63c8c2cbc9437d1cc2f232bc2b8e4bdaef7abc4608ee36f54cc38da253ef319315fad23803c34c4059c22cec3401cb111d56f5a7f916835a9c1479e2f9d9705e11697d831d8666dbd8b7e772c57680d4ca87a6edb7992788842230b4c339df77044d8828a67164f062b23a4b68073e58a87d3221d7f912d5600d58fffbbfbd0dcbdb007ae2721910c66251813c45bbed85a5ea3bb07f51ba598ed8279b6a8a921174b6d9f4857da4d5fc8ecf6e159874ec42706688de1cb82759420e34a329920fe27eb7be3b4e3cd19093b97a28b100d4747ac4ce3f7d0eb68d539adcb67a28afeea7500d893535efaafc8f3ea112a850d5ff99a2cce5ee02ef9495143326b8f7263371fe95251b484aa50196130c111f691ab4b318bfab1a944eb32b423a6681f108bf211f95fbabea7b41cfde0e89b62c8aae175aadbddd6bbe9558dc6517ff70595b7ad956a1c7239a4c5ae5c241134910c11f8d5a6e501cabcc3ab4e4251c8dbf6c574ab4b651f25ee049e5316bb75ddd7f7ec9df54d24e69e1750eb8e3f75707aa5718512d9ae4c51667f4e23ab276e26b5463d744b1a286bff2c67f85393033f59a29aac8bb34565a7fc160e2cd122bf82eaa12eb60fee322bd73e6006aca4b256b4a26368898f109ad68006fc15e04a5193125235cd686ef499af10468ee23af8155f734cee27b0bc57e9023485a87a73cd1ca19285f7e88f365c0e0d06ef6501b662baf385604f878f3edb97e8b1d0099ef480a19f02ef812c3ebe28fd4d9f8ee58206e757fc599acab7c7c3a0c0975a1f9503fa080d57bc6576cec1d9b75172d83117b814725bb482fa28e897d6c05b4872dc130b69b13c491b22609d615d9059caa1d6183d9d75a858ed39fd9d3c85a8d3f0079de95b2cf7b7946668996e043ca0a3917ff3b9de3401fd639ecff00c0db73ed4214c7bff0d752f4a330f9fff2bb3eaffc98144b36739b490cdf1dea8ec2b22febece819945f386530563ad169929b749d9b494b2afbcc8f7d9dec221f7e1f8644e097ecc96b75cb4bc2d9e6183242eb85ae58c334048877a9532ad32ed31051c3a60a16755010a197ff347c2cb976a015b62eed9e8cdaad2340d57f2e371f52087a64389ba186fd9cfd42dc3be72b1a9baca9a821c3c4bf570a98a8386b66d6fcc81aa25027d42b6ae25d16fed62e3fea9d0f131cd900bcc11c3517e31372146a16dc39ef6ee899b5bcef6b9adaa3750cd5b73126d1a2d18f238ac8f2c448c5b1af36041995ec0fc5a799f4e7f088eaeaf41f6490de042f73f038ae3af087e8a4d594947a48571f47924779da177d3a11dc6021a4b318663db3f1198d4d298fcca7654f001a98b8d7cc4c75344378042249cc32ffc5caefc20dd6b89b49e66dc3077dbf5ae3dec3e68447443a70acba6b0af6ffe0aca527412d2e2d49ef77f38e0c6d4b8ab48ac1a8dd48c5fcd99bcb85190189d8d632deb3c2f762273fa4d79ff8d9eb61848c45786e6641c9556ea7ebfa8412a09b11475ca0a25c0e610a88f1229cf34313c72cae7ab91afd2fa035b878d4df20e04a1d86f28a99e8c9ef579f69260379ddbad02bb76c517e0ec2ab6b6e0f542cdd286724d3bc885ae3e5bc663bcec9f411b332a6691c79201232bd447749e2b09511271ccf1d3aee382f296abf70e6bcfcca21cbe80866314c6b092fc991dcc31cd7e19cb498fb0008d9adf0acef25b257d9223c538df6b6386a8b12a57ec0d48fee3891aa94a7027343f2e2b7fc9cad780c307958ee1982a682fe6dfea4600079b918afe685081fae5eeece33c9e7d733a048573b2d21e9889e738ca358a3be25fe97a1c6c7d787af0886b86e3395e9103b6235ed9460f4c2b44172e94403e72d130ae3649085c0e8dbb28783e74d7d15675c0a3587ba8e504c903649e5d1f8cb8a7180d84ee7ed0e8063dcc28f492f3182e21cba6fb7525f69040ecd56c48f548add1100369b899e61cb26cfa7aaf6b2dac46467aff76f86fe80690fe3f08db9d10b3c3f1154e587e92f865e1a9a0a85c17c0a7ae51b101c771ac77ad38cbfbcb98c3e0000eb79a460d6200c02814aacb68c9d8c1f33d6a47de683a8de16f655296946c71b7fbafefe1c3a48aa9855c09fb4e02a9f7c978b5e2ee6021c8c7ab1a77f21b20729090a8e27d401931fa8579800abf75f60209ce870cb2f546e9bf099defc4955bb6e13186b1bf1f258be57ddd564ed3bfc1a00b32ad084a0325bb3fffe700ba630a9db307749efa89ee7c5f1fa8f2ba9cbf66ca247bc7e82c8f9233da98a3963d1a90643db9ca3947086828c334ec89d4bc089da067ddd4c6720621036a5131d97f6f63609fde7b9b7481c99024b7742fff0f7454dc5aae2484607fa366506c3be597a0eefa30503270354e57f86f6590f8485bca2a75a3e3a7b54a2476f9413cee400741683ed7e4d6a798de443aa517ffa3b4fcc452f602f5e7313db5f59147a16bb60e3215271d227aa88cfd262403c92edbc4293842b5b2e67e8bb83fd658db4c7b4c9ee56e9d98945d37368291838757514bef065de563c803835b443f36068fa4ad91cba5407c57412d63189400bf3d89e2a1199b1c6e7ad906f80f8943d705ef296e2cc214dab67e479575e2528d72cd99e76ee4fa817a0dea1e01533c979545b707a86665afb9a6c94e5b85a4c594879d07ef5475396841a2ef9169f25fac9109274b07236775bc445243a741159aa38a9f241eba0e55c267c67dcfd02e8cca9ccd0adf8605eae64056cecc1520ea50a443989d7fbf28dc66558d4dd471d05e8996536a46e6cfd36be01df4b662e4e0582e4d9b10da1f5569ee57a45da1d5c06759becda57e2393777420f518300143ccaf30542ff8bf8b5c40ee3b726c47b1d43a1ad1e35e0efe4f235691975aa2ce17c44c2e3a89542d11173691591ddd64c34caf3e72903f20cd6c1d476c904e6e0ce81fad14a5defdd599e4c09fa0af2f4d873bb3207878661719a20752bc9cf8cd999ff599bff53e7062b5e872e336553ae9f090df800b0a189984075546662c4279fcff4014a957868de3a73c85f71b494c1704d06aa735a7e1b3413ba25aef3e11715e3cee9775a3451ca6a1eed8a2182989bdfd266d657b5a711a7f36f8a13654b5375f2849b57ee3ecfbd6b585280a7e8cef95d7e7fc1152ef5209ed0f80b6676b29dc4d07c34dbd21e76415d645702699d91fa2a3af8a215277a36d162a9cc207e35215fdd709c7e06cdaafd0f04dfd0f62c455471783cbb68f33cab811ec59ddfe8998a833754864938fd761e436569c20f4e21222715bcc5e90fcd2ca291642b23469c16cd6c30d54e8d8565ca0220f3cdf8f4e5beb0bbdf899be8c634885d9f16606f7042e46fffad2af27e987b2f82d8e2e1d2c6502f4397fda4472444147e60497939e656cc8ca1de4eb03be1e2f3d6ba765c6ca9f21e4667a1fd9cc52e733735b33be3db77b07283181844d6ae38638f36cef0b19376f3414ac7289870e844f773447838cadbda2148cbfb8debb1ad708cf0303ca6991c17b4d222ff9c30218fe298adba2bce1b1a67e18a8017e9e8152094c158154730d0eb950e4a43553d765750b75f7e132a62027b2f7a7918df93cfc3e2dc894058db5008543d69a7f21fd31ad7d01198af1041941a83fc424e5497c0423933d2af664b7ba0273f1bd0b04378c00d90029f066bd4a23e7e3e82057fd48e0f7b82594fa1c230bd0862f259f1aaaacd9373054d170609d6367bd5f7505362774e88745856d4fadd3d132a6d25b2e43aba45d574d4f17bee37fba8633c850fa72b4355a5c42f7fbcdcb33e34a953b50af6fb18505996d61081607bbfbb14ac7dfbeddc3b53a4f1ded507d462e21dd41b0f1aa526a79e75c8a17de145a814ce1178403040830cf29b5ce0b3f70604580e771a627b896867e470ea37cc033c17c9ef3f8840c95bc2a195fbb7d28c7ac9132280651e5b0d18a6e52327a44dae065f71260799ed15e17bcdee0a632e26b221ac47abb12ed1af3c0c6204709e942f06c6313780084cfa903599071ed1cb9c1458aa140ccba37d0ac4d016faeb3b1ad6340a38716915a1c3bdb35fe1e3f0710c16492c575ea6a100b435a846cb6ae7653587afb1cf35cba7b61f155f7a87a7e9c18686ea769a39649f4c614c904cc8a0ffa355a2a17682e0195b41447a09f2407d79d0db0b8e319fb0aaab331a680471ea7f9701168e1e34b098c0ea2ffdf91b7ca917cfb9ec202160adeab535a96e045fa618496dcbe2894702c75a7f8e6b9b9d191e7ef1bfeed48f339b295472ae4b2cbe810379262d9558a81fea07e6178e7961c3a0590e3170daf88aeda07c2b5c8916c2b0e683a6888f2a1b9be8c5e6d13b4b474f64e9a3cd2d7b5f97535f6359bbc85e5f8451d04c6d2df2e6084c4e5bd4e14c9e6193cc12791daf27b39323b25c897a00a2d9edc15f02476d4ba39b98ea5e6d3aec998f1adb9c472fa5c5cdfa4c6e257d60b2e40ba7a6547c61a33af8fee597f045e9b9c7e90474ac20bdc0dbbc70ecd26617c1797f70fda4c5515958a29eaac17743b5011e9b60c11908196ec2d7c9729d3b4c3a02a2039ddec43598e4efcdaf07206455af858f113d927547a4f1016ea3b4c95d348b1b0f6819e32849341aec3be9b91985ef6503e08e3696def3bfe3ae717bca87cd68447d0a7da446450edb995037aef6d367daffb463137b569d16454aec0778ae5b6c0b74983b772e3c694e5c4c47067070c4afb6d75f116b8ccb5b5684ffade073659cac6ddb731d44e8c8eb354136a4faf5231f153e9a5d2215fa2335610d31f03ba27ca64633c1a7d50dba7fd3e487a6941c52020cbff1"}, {0x80, 0x1000, 0x41, &(0x7f00000010c0)="f820534f0feff06dac16f31090a9012a3565a03d407aef61f1224577bcd21885d07cb775e322864a956be8e0df278e63da1013d6180772b57e7d43b18a142fb7ef"}, {0x100, 0x200, 0x1f, &(0x7f0000001140)="94a09ce5d3c81b74c5e40a98e57c36ce2adc7808dd1869aa95d7ab5b30bae2"}], 0x3}) [ 1905.575121][ T3248] binder: 3246:3248 unknown command 0 [ 1905.580778][ T3248] binder: 3246:3248 ioctl c0306201 20000600 returned -22 [ 1905.600661][ T3249] binder: 3247:3249 ioctl c0306201 20000000 returned -14 [ 1905.645188][ T3251] binder: 3247:3251 ioctl c0306201 20000000 returned -14 16:28:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x400000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xa, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x8000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:29 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x1, 0x3, &(0x7f0000000000)={0x10, "d8f9cfdfbc93255702666b4db4626490167979f7e29078aa3530e6934acecaef52"}}) [ 1906.324482][ T3261] binder: 3259:3261 ioctl c0306201 20000000 returned -14 [ 1906.393193][ T3262] binder: 3260:3262 unknown command 0 [ 1906.398697][ T3262] binder: 3260:3262 ioctl c0306201 20000600 returned -22 [ 1906.415342][ T3264] binder: 3259:3264 ioctl c0306201 20000000 returned -14 16:28:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xb, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x500000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x9000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:30 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x3, 0x5c9000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1907.272152][ T3275] binder: 3273:3275 ioctl c0306201 20000000 returned -14 [ 1907.374724][ T3279] binder: 3273:3279 ioctl c0306201 20000000 returned -14 16:28:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xc, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x600000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xa000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1908.013785][ T3288] binder: 3285:3288 unknown command 0 [ 1908.019354][ T3288] binder: 3285:3288 ioctl c0306201 20000600 returned -22 [ 1908.162011][ T3289] binder: 3287:3289 ioctl c0306201 20000000 returned -14 [ 1908.248695][ T3292] binder: 3287:3292 ioctl c0306201 20000000 returned -14 16:28:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xd, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:32 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$I2C_SLAVE(r0, 0x703, 0x4d) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10, &(0x7f0000000140)=0x8, 0x4) write(r2, &(0x7f0000000080)="1f", 0x1) ioctl$KVM_NMI(r2, 0xae9a) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x7f, 0x210, 0x7, &(0x7f0000000000)="afb7d56d1f7766"}, {0xff, 0x800, 0x66, &(0x7f0000000040)="f9de3d741e086dfe275d88edc4bf4832159721dc625f90122249c2249beee2cc5bf7f76a44b02057c5c1810c8a316a21375faec124edc055ac0d6316e2750e891fefb04623cd51fb8dc4fa2851d0e61d4ec3c3036cbb6899079b86eb524fdf67aa078cd8fa24"}], 0x2}) r5 = dup(r3) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) 16:28:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x700000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xb000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1908.859000][ T3300] binder: 3296:3300 unknown command 0 [ 1908.864825][ T3300] binder: 3296:3300 ioctl c0306201 20000600 returned -22 [ 1909.109462][ T3304] binder: 3302:3304 ioctl c0306201 20000000 returned -14 16:28:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xe, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1909.188282][ T3306] binder: 3302:3306 ioctl c0306201 20000000 returned -14 16:28:33 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x404042) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f0000000440)=[{0x8, 0x1000, 0x4d, &(0x7f0000000000)="6e544193ea2f7fa157f51deffedfa6a03475493e54749e226e0685a5c4cb80038e5b7b94b7fe675398e908c10a0b3fe9861a033db1a47c410110783bdbcd5e0b52b20f4f23ba55659e8e259e28"}, {0x8000, 0x200, 0x3f, &(0x7f0000000080)="020bc762200e3db960888ee2494a72075049505436e6fae72068a251bcefc9898bcf62ca5d2aa10ef559db5c3e2fb0e516b1a0ecfa9ca64bd9c9acbb9a6bd8"}, {0x8000, 0x0, 0x2f, &(0x7f00000000c0)="f08dd5b015c49d8e97bd87405774945860f5b9fe294f079af3345a619782bb4e6feca8416c0558b3d4e5b049ad3aa4"}, {0x8001, 0x0, 0xd2, &(0x7f0000000100)="564dd7524b6d90a1822769f14924516e209fd460841a7d3c164e81937dc5c2930ade00637ccf26b4c5a4731b10cb8061ece1fc3dcd2874ae683fb889eaa4e78942a00af7bf45665fc599347e55d04397f157046df384dc354ffacf067adeb1558925b0f56448fab8639fb51a0da2a545e660033ad954ab99a77745423f96d009c419a19eb532deb5f0336446af00325f2e237ab3909f2c09614ed25adf4067601cb5949f95c7e3ceba220212b321de6b116cffab42abf9b2e5b5f54424a3f8f738f93379b96449ffd9f59109f84b5ea149d6"}, {0x2, 0x0, 0x63, &(0x7f0000000200)="9d8bcd4013aa9a542c90bf62dc7c77cd5984a144c7e9c6302f9c7a73e5a5c344a170a78be3e70bfe89d05551a6dd7e7d87b4da0fdadd719a50a22841979eac55cee01057909e2d732ba571fd661f5b0e3939d229e4e976103c36011927e7eba29087a0"}, {0x1, 0x2000, 0x2e, &(0x7f0000000280)="aaae3a8a2d1105549b7eb14ad9a8a9cddcfd06fc1f524c15d91a3e3f132e3f766afaf49f27b66000634826b7e049"}, {0x6, 0x200, 0xcd, &(0x7f0000000340)="1cc18497b334f377cb9e466380b2e2444baff9fdad6785f7182c3cbd9cdf158f7c51100b83bda9622d2ecf7a6325ee216c3252356d76440aa0919ed41c1dd31ad6d599dc994574b353adb84862b5d03fdc00596b19599c5ba95fbf3ea1a67b773f5edab8d371c82834123da6e88089eb684cda97b7af4252bc42a28d6ecb2a59fb5664319b0d4dd6bcb1b8ba243c2d634934d0a43d7008a05721a18bde77d9575b3b3aec8c6851ae053285d3205f6f26b627f6016d9433c066a4c48029df42852c409e777537e9fc9d446feabc"}], 0x7}) 16:28:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xc000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x800000000000000, &(0x7f0000000080)="a221ac63"}) [ 1909.732032][ T3313] binder: 3311:3313 unknown command 0 [ 1909.737817][ T3313] binder: 3311:3313 ioctl c0306201 20000600 returned -22 16:28:33 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:28:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x10, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1910.104783][ T3318] binder: 3317:3318 ioctl c0306201 20000000 returned -14 [ 1910.137399][ T3320] binder: 3317:3320 ioctl c0306201 20000000 returned -14 16:28:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x900000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xd000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:34 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x32400) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000", @ANYRES64=r0, @ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) [ 1910.619871][ T3325] binder: 3324:3325 unknown command 0 [ 1910.625658][ T3325] binder: 3324:3325 ioctl c0306201 20000600 returned -22 16:28:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x11, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1910.987768][ T3330] binder: 3328:3330 ioctl c0306201 20000000 returned -14 16:28:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1911.066450][ T3333] binder: 3328:3333 ioctl c0306201 20000000 returned -14 16:28:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xe000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xa00000000000000, &(0x7f0000000080)="a221ac63"}) [ 1911.474637][ T3339] binder: 3337:3339 unknown command 0 [ 1911.480197][ T3339] binder: 3337:3339 ioctl c0306201 20000600 returned -22 16:28:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x12, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1911.900900][ T3344] binder: 3342:3344 ioctl c0306201 20000000 returned -14 [ 1911.998106][ T3346] binder: 3342:3346 ioctl c0306201 20000000 returned -14 16:28:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x10000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:35 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) r1 = openat$ipvs(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x8, 0x1000, 0xdd, &(0x7f0000000140)="57ff6c10614f0ae415b26b3302772811e19f2b9a17cda1935ff0c82b98f60679ecf268a1b9956e3996726c309d996cc9567651abab7c7bd1e236bbbe2698843cb4525775685464f34df3039fc11ee7eaa145fc382eda7f94af4faff8400c16bb0bef27637f4dc0e0bfab42883a885be1b4eec7c0d08e6abbab0c0835bc4571b9c09ac691d7526b54c158f584b983bdd741d92a0a295961c2e9e72e9c24a1ddd22924926e306ee659a24edce3896893c1a74af93b4949b4b071545947537f3956e0cf719e9204451bddcf2d692026654350dd01c95d7599a6b38ee3458b"}, {0x7, 0x8610, 0xe1, &(0x7f0000001340)="7cf65ecf001d2a9c0bc27ff27f5f89f120cf6daada950d0ee44bce24bbbc92d740b9304d42520da8b15ac33b20818dded5df1000a611f3b9ab9ba2a47da7245cf6fdb9131a6ecdf6bf39054ec37498646383a3ebe8e408b0d5a4e88ab16dffb8560c17ba2663211f7403205b8d660e0226fda4d1b344e3b4caffc59eb4c3a7c05c85e3f3498a8da6db6401b8dedf1c917056f9fe71a561bb4c495d370fdce5508231b376eeaaabfc4cca4ff763a54222d20ac445225c44718a52f844265ba8e94f610d44d217c8e6023c741c8a1110db97d501c9477094136642421ec893195738"}, {0x1f, 0xc18, 0x24, &(0x7f0000000240)="530b560560bb10188bcc412e955e920f3b0a79d34c41b4b22a3d3ed4b6eeaba75151a3c8"}, {0xf0, 0x1800, 0x8b, &(0x7f0000001440)="e6bfd071a17c3e195415ba21237e1a3330c91fba1346863e4e812828b8554eed04c22dfda202bf1a751d9ad4a4ac75bc62efb34c38eeecc6870f1b8d29961199f637b2d2f304b47f65cb4cf3836c88ef1966468a49b31d4a3c6cf53b4d307117d2d78f9fc5065f891120c0de76645845c2ad6f67c50954093f4cfcf92ec4cff1c72eeba4c82a3fac9c7a48"}], 0x4}) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x1f, 0x10, 0x1000, &(0x7f0000000340)="6a7e0d7e4c62fb3d6651c5db8efc52d23f0194c857de9d4e0c08277fb60962d75c3bd8f09a8fa7e7e8796c7c6fe78799af7f175d73f2069dab7ca351d411c2199f8d4ff6250b41d191ac694cc68f0c3f1f0b1cd2df138d4ce57c0bd33bbcc4416c43a21a4aa9f83d56df40adce5e2be986232aeecb8ed0a04102df0ce8cf8778cd46d644399865294bdb8eae7a490800e8c0f8d27d21f68ba9980d2772af2af08c8c726abe3086d09a34308d711f90f94053c70f5ec1f0d18f7f47725f1d8f02dd8dba1782ff2bc9e6bfe90ace6a43d9be55556b26a0123d73fe63433b51f4b1d2b272c5ffa5ec92ca0b8afb7476e55ade283caa373c420600fae4c726379b9a1173ded427d7a43ba47784b52e906e7e42f1ca85e9a332e39c3b9d5612e4166d25e5cc0ce497c47c25e48cf12fafc0db57225f5710819b9746c99c4ef4f0a8cf03c94335ccd5abf44676d07a5427f8055820e8bfb34d9d1cbb566c24be5d7db8c65c026ec498b8635a129741aab6afc36537a5ecb0fe28d518cb971a60adf7d8f87f7b220423330c3167b8ed078ffea730c67628178f739dacacc63b3e94c9764eb53bf4025e6c1cf49119d240e43e300d8265ca4b878f9b7f41cf2e40d524455f25fb81560ee14a44d79500ed90489d00e7aeae5a1b633500ab0567f5a36f6f9af0a52ab90a8b8931448e85fd2efb99e6b126714915dc419daab6f3167b27b965664f07e3698d239f77766082c1c5aa1efd4265c93e72aa02833580a2a065e5a07aad5df6ea8cbd4e36e8fd11206a39f34c3b2e14d22dd5ad0fcdce4f8b00b3a963a57c64aae37e0c91b955e1f75fef7858f5404a725525c30703247c29ef6283669f3422ae8b046e8132fb20102fbcba5a255a4d62e6c56b82914d4a0c8e0cff3d283f7c57e6104f85470601e746a75810dcee150bc1df89d4b98cfec9a89d3480bc9b335961054915f98ccb4ad3e9816a881b078faa52990065548f0525ab73b09daf7443c4e67bc0ef9e8d6cbfaa688914c60f26ae224d24e47dd0740915e4d62be846bf45ae118f5980b0fda3583092c3224caf9534223e6c0035271f8725591ce5a1cfe57775ce382812a774670c2d75adc9d33b1da2e6e9d67d11c3a337d914c564f5075869eb8e04eae579243af5e6d3fd0928ffbbb179244f06d13ceb65113bd40065f8e1380b414534e5dfdbe60dddb9a6b1e478f059e08d7c927162572c1c17eeadf99d47bc32b4eba731544eeb88d85491273f0bd744df367e55a1866709f211df0ba9f773c1fd0ae8e52e5e9538c017ef2cdaebd43bf7a9b64a719b46a8c3c0ff0755594e0eb4f7cf01be1c3f6fe9d1761c5bb63ab7ea48039a4584d94db3c0f204643041100a3fc88be2189c4eae9c19ddb112da4f4b8545b729e4ac19ea4333e08a0511eb0cce1c3adb5aff4377ba5df15bd8ca98147974f10d6b87c580b9cb89c63b11ace574582c0a8b23686c316b65b845fc79fe37edd48d07aecbbbaa1e7ff538e7d667c6afc48ae6876ee1c82b08046f5383a85a551414df1fa0de88925944493777534a9fb7ee12d75b51b04102a3982b22bd6ced4b452aeef04746ca505bef51dba15227b16ea5bdf65a8998b07dd2c85fd21ad048ac02abe2736412df5e2809e864496f71a2ddb47bdb20e68d1b77c6c24cfdbd9248d4daf9e3a495fbbe9441b53357992fa266db901b19e6c30f597ecb37a35a53675d51621e74d6e49d8db15ac81904bdf46adf26b09a865e87f67e8b1d984bc7c90a5819a694ad6862f819db36922d9dc806d2c124ab23bcb443920fb5b56c50ba98f6329dd8bfa607556496e2e862f65c96868f552b0b65892c90a1b10a1fcbdca83a98ab3117e726a7e38ae5bde2565ea1cebef26acd6ca3dab5b74b71dc939bb6cfcd2e26763c975def03814bb286a6d7026c4f73bdb598b14a6d9e72d2c5100bf7782a3727b7d0dcc03ec932d4fa78bbd8b7c482646c3745c6cfed64f55f8a836b22eb62e2029c0cd7b3454c3e0b3d92d5a9eb9b64cd91d84d58ee36865bd7b418897c4118c8c526b90bf632dd997956b193a094890eec1774ce31c6c8fc87cf83f27fc912830bcc8c33b6dfd4aea153e629b6af9c15ef75d29190466fa5435c74d13890a63056fab77b96057e7a265e43193095c1875436341085eddc9f380eaf968124b279160352460685b72a6dfa08df0413f51b5d410d4edee582a87b36e43a5047306f95ca3c9ae07a9601e479f7e934c50fc8fa00f72f102a740b3a0abab902254b5771b5c5c28667abb7ee9afa46888b18d21462f6047df63dc0f22e9d83251bfd84f0aa5d2fe1f79fdc50347364aa969ddffccd55be76b607610226869462e30259a41e1b2d959d28804511f14cea166ae671ef907f0d9b6053eb5d33b3327ef5a917c94fa0a38eed746daf0f6a39be43bb60f1497678e47e22c36746f9da6ae4e4fd3df31520587736a244c5dd7c18798f56d32b5e4d872780b04d36598ec88ffa3ef95d36da00b81182f8d750f11f1dc1a71cbd04795497c64e005826bdc6907f1c95ec68681f1d7f06139fcaaf68e7c2d294ce89ea61d81e88bf5c2754daf793a90e9cd568e3a277125a5d94d4d6a6b765135659332c42600c3c939d7ee22d71c013db2ec23dc73d120dccdf6425e1ff9b03c47b78f2b86650e4cd971f4732202779f8d8ece0ec9a5779bdf2ae308086b0814b0f3a00c37c858bcc1f96c17dc387df583a7b580c6503d0e579ff2f4fa6335ad6679f7131c43614de20736153024461f211cbc021072bedca8227f0338e5a6236ed137653fe7f65283aa160751498213012a94ddef6dd9c1e0b7b3ed71c2ac30ce07a16b701b90d67b0405f1a159c2d8670ab8c92651386f621f5f39621d28b524c6c615b90c59b81549109e7e3e86128b43756ed101c0094f9ba46d57c9790631d2e301ca54e89061e94c2ebf38e5ec78569be0f79716ee913d7f1f0e7087b9f2c1cd788e6d3872b95247a06fcb21d8eec5fb1a668bf4f55c3333f6a82a8f524601c9fddff4cc1a44e03179ef703ed4acb002f1d266159c4d1ab15638f6234c8d7be6e8867d03bb30d3adea01651ed1b2c89d102a7f67c7401e4a58977c37e0f6865f0644670be89e79f4a87c05bf91d5ccf4a291f5e315b66ab8b3368643a66700808811335c870ef9e24742438b89117e5b252a332f3c9d2d03e4071e2ede0a6c9b0aee01d643081ee7e977b3b46f1a17ea396fd12ab5a51c7ab458c042cac940c0bdf7ec3463a29a0eb9caeea222bf6db5ad5c83fd405bb12d5c548d431d7a099b579b17863f96f639f2bd2ba8aa68476a567beea136783360e5241c7b9bd150c913fc0c6a7c877dc66ec2ee166b27a2cd5e90bdeabd71cb5423cad186f210740f778f4691775138ac4bf8617955d8c7f3a1ee313eb8c53b6ebd9718cd177342cd84ea6e5be8019aca3a80c9efe0a30ba61e69bc22ed088e3e0950629a7474f58cc310fe48919f3e312174a8b9fadd1a62c2d76543c9dee0c804a23c42074964f87b17a032cc87baeddac5ae15d135250f5a3d88cf2ba1f201fab24a583c7cc18a82ed82eff125f934e02c8513a285cfed515b2b102de30b03d25cbd611ad9013af67cd12f1cbcdb31aae89eef73d78552d120a6c8dc96219d379f710210f3e6c2e59552d670fa71c87e95d6a044380ed77ac574d976e75ad3abc5696c66b209b2ea620cc51c4a7e25123ee6f4e2a68a19ff75347bdc9be6b7288bfba33b31fdb8766aea760ff68259c25240e4124585e2e0895f4fe10305a5f4156177bb38cbc9bdf6c6c1a0a2116a1df67d05357e1f33c52c014ced1570a9c8bb1883e2b27084247b922edc4f503e9dc4723b894a600fe34f05e3a4c4d324e94c03fb0ffc970832c7938f88aa105ab784d110eec75c66cae12d3c8fd7390126d0e8fa934d2c1d95d731440fff4fdc035fc12c1b0519d1b4f2454a300f6051cc6c54760a28d4d631c86703be97d7b37fe80c4f36d7cdb3ccec5fe6e577758e68212c454684680d64147d2dc7d68868df8b1afa239f5f1bfd18b48f739dfe65df9cb4a4bab0d309c58c9bb7e185df445b6f79c8868e9c3322bb8cc26a38b5328de281a1ce33674801dbb9a82e76aa9072073e1e5298e79b150a583ac1b113debe5fa56e6e1bd0dd7df80f9ee6d74d08632fbe1bd002931245aca80d39e412f68e3a6218e69637232fd1968dd46adbef7cb6c183bb957fdf14e2664f90979373f97f5b745c0d59d79f39d08d44ed711f2d4ac559d3c7f038f664065c44c408cdf1c051f8843194e141294d153e1aa17381e0c0c99daee33a7741fa2e4c8e3d592c75fa35910081dcf2a34ae6d96e4091c665264f43248b97bd970c20e29f6fec55bc3a1398abc048cb6d2f1c7e9065404416470d8a7b83b23afcd3a8cfc9d8731b29d35766e519d2097008b5b57cd2ee8254a0673a7aae2464e09cc99aec89b19108d094a197b992aff3ea997f356a601b2cc2058943864868a894964e4003d22fe3194f12495bdd3077e0d9254389927484fff9a67cf35ba2e2c1768631aaf8cdcc8c24cde9b57d844261b457b8192525752f54cf60a036a8645d7319bb22047b6859fcb5a95df63a0f58764622f155d64a636db9d1e03a50ee89c1905a9365249eb270829f91be3fcd25b6fe562e26c47ed59766a3656a0d42763a2abec47a2eaa74b37c1e3317b61970c66dacccdb1daea1738ff110652bf896efbbac9329ddca60264bea3cbe6f512694db02fa177136cd28eae5029b39f8a9bef3b7918c213d00ea4aa68919897c30e3a81f95ebd2dc45ee5c80c6ded45eba38b525ce9f4ae6caba800f40dffccbf44b61729009a9ad48177c7f4b867f0feac010e4c3c28147620889e150ea5ce5d66c6cc6b8e35d4aed3cee616558f5e507547723a9593f3939aaba7986c8d83eaaa2fc55760668479512a36a1cd8391114cbed1cfa9717b716ed8836b8a212520c7be9b44b941ba986bc95ad447300924a2a376a01afb58bb8d1899abf5e22507d6098dd52f694e2aa927325b1d76ad7da6f9b114cbc512687bc2dadd6854ba3c04a95069e4120e02e2048fbed57fa2c69016df110c64a79130d80d9d8afaf0c85ebdd2ccbc074932433ee4c13232275ad6b58e3d0ebe7c33f515a7fc643c4770de7c9952b237cf206ae893de1006b739a8d71d568c251cd11e6feee5db9721f3593a705b7950461261def1ba70e7708fce6ead15ef5b5e3b0e0b34cc816f3ae1c6950863517e8c844ec741da38be7309ea6364549c41d30924411f8336ec8feaabcc14a122badef90642558adfbb96508459f8617170f38dc36aa6cfcccdc13ba8401577d05b3d9bca0210e7f115ab6e85acbed967b8724f898f5f17a74fae17b7f6db10c7634b5855f4e8ce65240e3d6f3a243c620c32107787c38934629dc8c2227a4467221807b572ccde47ef99916e9f5b71b09a97aece3d996f217675292af345f56f700bdd6dcef6104299e28ce16366091e05f3713a6d3800a42e0482cabc1770a955abd5aa5f4bfe9d3964aa138969e0f49cdf1a572cccc55a719dc4a082a3eb08660f34091d80f5379b2190ee1403a3f956f649771f81bca065f9d9dc7e9d4e8c02c730cabc5b5e7f21f9d5d1010f2026644e9b29f930d272d08182436b5cc211ca0632efed4d8c707bd73376fe29fe96d02789a207376389ab7bdb079b82f8fb0b4574058a5e5f37bccc6e3db78c51a0e5d15e2469171f8dc073113451174d0f3b67451d70a6b4a6069f235e2a3070a3bbf7e503fc8d545be90eb9"}], 0x1}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x5, &(0x7f0000000000)={0x1e, "ebcf86f4169b06c7dfbefced71d5762238bb937101e88b6b99ad60bb0e85228626"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1912.317300][ T3348] binder: 3347:3348 unknown command 0 [ 1912.323391][ T3348] binder: 3347:3348 ioctl c0306201 20000600 returned -22 16:28:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xb00000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x13, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="4b9603907af52c96c1e44111056bc6753b417d7b10661b3b947d5877475ca86a4bf9409ca7a6f8682fc8418338a04294af642da4000000000000000000"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) r4 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) r5 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r5}, @enter_looper], 0x10, 0x0, &(0x7f0000000040)="aa671b5b4afe602c3d141ded1ea8d7f4"}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000b40), &(0x7f0000000b80)=0xe) r8 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r8, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000b00)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e439bf3f599a847cab72f9d1b04cc"], 0x16, 0x0, &(0x7f0000000ac0)="f5f9aa233c91a8731f8ac2f2ef2574791b554f93950d"}) r9 = syz_mount_image$hfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x7, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000340)="7c504bde53844baaf6964ff68a5614b86bf104b4427a2c680c46e9a96c29ebe2453d56ef59e0ff0b576f41aae0fd9571338f50b27b6c079b6ffffcc3b838fc8f318884f7615bd7275ae81bdfdf72bb91fa223d24878c81088b62d0127e49fadceb203b94e8f55e990d685fe96a54e8a1f83da655838698bde06e6d06f61183ea0316836f9d7311db37121a5b52c3563527b67b465bf1a91b57390eca", 0x9c, 0x7f}, {&(0x7f0000000400)="a2495e7e49a4a3ca9b7ce282b7e23556d6dea198bfa98f9f152af2f6757859f5c8c566a65bbbc94ee4c7a61a38ced9235f71f4ef92816c02b86ceb3adc587b5a021a548c5ce49b2faa43a49771e554234634877865ebd2fd8f67224ab5fdc28436caac1691be502bf3cd7c94c89e58699bae18ac0fc202c96e0878748157335ffb1d00fb67b84c0d1e244fa0b6fb6695b365ad98fcde6c47dd8b2f5ad364897e1590b754197fc30fbe", 0xa9, 0x1}, {&(0x7f00000004c0)="f422ea43519885109eecc4f548e576427687deebb5881f404652fc083349b5a08513ec52a327146f72423f070b7d788bbf1196f475ade24f959b102913cf3a67e1a8d75cccba5fad57cb75ba9f9b511c4943c62d3ae12b3da0d79dabaab0474ffb4be9c37982cf594df5db6ab56362d391c2b0f1f78c6915a57c6525f4876d6a8afaa901db3761888ffa67e6a5f15034f02caec9ae28ca696c97a87ff4e02277d13374b4e4457b284c3e316740165812649301095df597cc7d76cc7fb055efa838da43bc49a2fd6df7202f9711f6a3f6ee55db206948", 0xd6}], 0x40, &(0x7f0000000600)={[{@codepage={'codepage', 0x3d, 'cp857'}}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@session={'session', 0x3d, 0x5}}, {@gid={'gid', 0x3d, 0xee01}}, {@uid={'uid', 0x3d, 0xee01}}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@subj_type={'subj_type', 0x3d, '^'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/binder#\x00'}}, {@fsname={'fsname', 0x3d, '\xac\x90&#'}}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000a40)={0xa4, 0x0, &(0x7f0000000900)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000c00)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/56, 0x38, 0x1, 0x2d}, @ptr={0x70742a85, 0x1, &(0x7f0000000800)=""/231, 0xe7, 0x0, 0xb}}, &(0x7f00000009c0)={0x0, 0x18, 0x40}}}, @free_buffer={0x40086303, r5}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r8}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000000780)={0x0, 0x18, 0x30}}}, @increfs={0x40046304, 0x3}, @register_looper, @exit_looper], 0x2d, 0x0, &(0x7f0000000a00)="cd6b70528a9c30ed3bfb1fb3ff30b6e809105418bc00d5c2689849a29d1405549f8e97af4576ae42979a6b8c29"}) [ 1912.944564][ T3358] binder: 3355:3358 ioctl c0306201 20000000 returned -14 [ 1913.045924][ T3360] binder: 3355:3360 ioctl c0306201 20000000 returned -14 16:28:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x11000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:36 executing program 2: clock_gettime(0x0, &(0x7f0000004cc0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004bc0)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000800)=[{&(0x7f0000000080)=""/208, 0xd0}, {&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000340)=""/219, 0xdb}, {&(0x7f0000000440)=""/190, 0xbe}, {&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000700)=""/224, 0xe0}], 0x8}, 0x7fff}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/75, 0x4b}, {&(0x7f00000008c0)=""/246, 0xf6}], 0x2, &(0x7f0000000a00)=""/77, 0x4d}, 0xbd}, {{&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000b00)=""/7, 0x7}, {&(0x7f0000000b40)=""/86, 0x56}, {&(0x7f0000000bc0)=""/178, 0xb2}, {&(0x7f0000000c80)=""/16, 0x10}, {&(0x7f0000000cc0)=""/189, 0xbd}, {&(0x7f0000000d80)=""/240, 0xf0}], 0x6, &(0x7f0000000ec0)=""/17, 0x11}, 0x7}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f00)=""/49, 0x31}, {&(0x7f0000000f40)=""/216, 0xd8}, {&(0x7f0000001040)}], 0x3, &(0x7f00000010c0)=""/4096, 0x1000}, 0x9}, {{&(0x7f00000020c0)=@pppoe, 0x80, &(0x7f0000002240)=[{&(0x7f0000002140)=""/123, 0x7b}, {&(0x7f00000021c0)=""/67, 0x43}], 0x2, &(0x7f0000002280)=""/204, 0xcc}, 0x401}, {{&(0x7f0000002380)=@alg, 0x80, &(0x7f0000003600)=[{&(0x7f0000002400)=""/39, 0x27}, {&(0x7f0000002440)=""/129, 0x81}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/149, 0x95}, {&(0x7f00000035c0)=""/41, 0x29}], 0x5, &(0x7f0000003640)=""/89, 0x59}, 0x6}, {{&(0x7f00000036c0)=@ethernet, 0x80, &(0x7f0000004b80)=[{&(0x7f0000003740)=""/122, 0x7a}, {&(0x7f00000037c0)=""/156, 0x9c}, {&(0x7f0000003880)=""/66, 0x42}, {&(0x7f0000003900)=""/205, 0xcd}, {&(0x7f0000003a00)=""/66, 0x42}, {&(0x7f0000003a80)=""/25, 0x19}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/184, 0xb8}], 0x8}, 0x3}], 0x7, 0x1000, &(0x7f0000004d00)={r0, r1+10000000}) r2 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0xcbc69ec5a347bca1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1913.240491][ T3363] binder: 3361:3363 unknown command 0 [ 1913.246191][ T3363] binder: 3361:3363 ioctl c0306201 20000600 returned -22 [ 1913.270042][ T3365] binder: 3359:3365 unknown command -1878813109 [ 1913.276674][ T3365] binder: 3359:3365 ioctl c0306201 200000c0 returned -22 [ 1913.354456][ T3366] binder: 3359:3366 ioctl c0306201 200000c0 returned -11 16:28:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xc00000000000000, &(0x7f0000000080)="a221ac63"}) [ 1913.507068][ T3365] hfs: unable to parse mount options 16:28:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x25, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1913.559347][ T3365] binder: 3359:3365 unknown command -1878813109 [ 1913.565957][ T3365] binder: 3359:3365 ioctl c0306201 200000c0 returned -22 [ 1913.581654][ T3366] binder: BINDER_SET_CONTEXT_MGR already set [ 1913.588229][ T3366] binder: 3359:3366 ioctl 40046207 0 returned -16 [ 1913.651257][ T3372] hfs: unable to parse mount options 16:28:37 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x7, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:28:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x12000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0}) r2 = openat$random(0xffffff9c, &(0x7f0000000000), 0x420002, 0x0) pwritev(r2, &(0x7f0000000740)=[{&(0x7f0000000200)="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", 0xfd}, {&(0x7f0000000300)="5aea72f5ee1f555cb8108b08231b2630070f2a56a91d3f753a58d0c6a05bdd8f9dab6eb31ebd6e571e765c0d44ee032bc06a61f274029fd349f46318a6b7ba9e562f2d33a9ce63f11f7e9e50b0abdbf32b85cd1803613381874cb1dc625f8ea41976029cc1dc4b62000c0e4f4f6ee843d7c08a29a82b966a8be61b2eed912941ee8a79096064", 0x86}, {&(0x7f0000000140)="9d3bb165b2fe95d36bc5d83ca3fc235b7c1569e95ce6ae7e563d7885f65e7d8f07da136eeaf50d4e560d4af963fc4d7bc5fd1db01fa088df04c03a457f9093ce2ad39bf39c2f6324f8700301b27612bed85e6aeeac8268ad05085bc5c7ae77f8b379", 0x62}, {&(0x7f00000003c0)="674a8073bb5fafee4dde3d73fac2ee0b381fbee614759df6722a9965a4da13dab9dc1b45983646cd4311704902122beb1eb34941ccfd453a4394ee5d666480beb9b714214291e72b5cf8d8ab1592ddebde8a89ddaa036203379675fb63cb18ab635c1c72707ee615b262291b33c35f11a960fcf8a055edf49cbb73eca06aedd259a7249514da7e4c77ce63424f3268abd6769b1a3610f95239a48435ae501d594d09de6071049b28", 0xa8}, {&(0x7f0000000480)="259ea9da0beb561d10897ed5619313a3a047a7e623886ab7749246", 0x1b}, {&(0x7f00000004c0)="e49d5c1361003882445661f44ef7f318c82d2c967dbc8c9f0d1a91da66b802238e88e9a7969baedd1b2803ff44a7995ce89a5eedb5a3595142870e875648fc372267eff434b7ba5a0d2bc85632e522", 0x4f}, {&(0x7f0000000540)="0150d39d981d6ab2a94fcfd1c6834fab6f56a89d3643618994372f7f10bcca7a3ba03e68e50fea8d4cc51e9f5846940b9e6b2555c61aa929aeace090e89618292777ca8f38", 0x45}, {&(0x7f00000005c0)="6ca262faeedbff8bc22d67694d31be468f675e9d3c726b72b52357de8541b16f264f49722c6ad61443b341c6ca61f65293493398eca49544c04f93216bd697e1fd0dab1298258398e74e5408d7f7a3390c931ad3ff193f75b9764f55b6ff16dceb298ce009e21b60557daa0774c7a2e1b9115322aa1d4ff1abac62d0e87c5a04e08b9c7a8d5da3ae495a840ee5ce8e97939b3bcbc6c8852bc39a0d489a43b186eedb3ce7a3bcb765afc7d7118908cf98c4860d4da77ac62a4102631e", 0xbc}, {&(0x7f0000000680)="6339125096e26f24e3431f01f33e21fc6f73e4954f615951797e0b4a45cd9a6759f99839e1f5227aa2d9a58eebeb4ebdf095a78be54dcf3e47842bb1cebc109b1ce50e5bcfddc7d38c24ea65d6c75789d7d1e13f586d1975652f9d414222294d04dec5ad2ce14de2b474c74f43fd388bf23b249583b5c158347aa834ff808175189525305ef4e47c405a532d7efff660748b016fae492f9a7efcb366006c331416a98a7930866143", 0xa8}], 0x9, 0x7, 0x1) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000080)={0x6, 0x40, [0x65, 0x100000001, 0x5, 0x7], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 1914.050356][ T3385] binder: 3383:3385 unknown command 0 [ 1914.056155][ T3385] binder: 3383:3385 ioctl c0306201 20000600 returned -22 [ 1914.079756][ T3386] binder: 3382:3386 ioctl c0306201 20000000 returned -14 [ 1914.121271][ T3388] binder: 3382:3388 ioctl c0306201 20000000 returned -14 16:28:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x4c, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xd00000000000000, &(0x7f0000000080)="a221ac63"}) [ 1914.568980][ T3395] binder: 3392:3395 ioctl c0389423 20000080 returned -22 [ 1914.646829][ T3397] binder: 3392:3397 ioctl c0389423 20000080 returned -22 16:28:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x25000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:38 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x200, 0x201) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000000), &(0x7f0000000040)={'U+', 0x10000}, 0x16, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:28:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRESOCT=r0, @ANYRES16=r1], 0x0, 0x0, 0x0}) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000140), 0x4) 16:28:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1914.991152][ T3402] binder: 3401:3402 ioctl c0306201 20000000 returned -14 16:28:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x5c, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1915.064605][ T3403] binder: 3401:3403 ioctl c0306201 20000000 returned -14 16:28:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xe00000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x5c000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:39 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:28:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="307a159a74c55cf3f0e273bb40d29d4a6f83e7814fae741347380901fef3ab4d7934048cbee32963e78cfbcc094976e1c46319640fc4cad47a83b5b0088e983e92f3e29d368ed6a3fbf8f80700b5682bd4345af1823ff7d5278c13678c0ee2cc09c851777fc0e5689887b9130ad63775f7f75bb844ae4db0ea51864a71a9efb1f49406f2cf2aac6352e3517c21f64fd41a5235ea837249548f7a8b87e94386ee7fd80dfded0bd8fe65f9d87e70f196688c7736467d03ebbdd2f90f3774152720ce78a9709c859b24eafd4ebdcf2e74d32e1965b90a15868106fe48e09f72e504acf99385f8c78221457963711ee8"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x0, 0x2, 0x1e}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x2c}}, &(0x7f0000000080)={0x0, 0x1c, 0x34}}}, @increfs={0x40046304, 0x3}], 0xd5, 0x0, &(0x7f0000000300)="cb995652f535e019f09e04d9adbbbc83a7f4b9ebb97d2c77bfb93ad2bddbc245ec20e634dcb1c1d563e230ec3b981c34393b505a2ba63bbaf6d3d8c813bc4f8ffaa30775bd668c4b83649dd0e08f90aa3a05d6538588d75575724a6b9d226ae3827b6c61d644a872239f17aa1b77d4a278fe59382c4c83f870b9f61abba2a4ee885b8ea1a9f8fe75f241063de325de2f4d35805708d2c3cf72fe531b75786f0214ded32d9d6de0165d2eff830eea118adea491220cb496c8b1f256e64cab61f6f3dd6248a891b4c465fde834f56866eb5637ecdf4e"}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000400)) [ 1915.798004][ T3419] binder: 3417:3419 ioctl c0306201 20000000 returned -14 16:28:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x300, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1915.846933][ T3420] binder: 3417:3420 ioctl c0306201 20000000 returned -14 [ 1916.007300][ T3428] binder: 3426:3428 unknown command -1709868496 [ 1916.013824][ T3428] binder: 3426:3428 ioctl c0306201 200000c0 returned -22 [ 1916.076837][ T3429] binder: 3426:3429 ioctl 80489439 20000400 returned -22 16:28:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xfdfdffff}, @increfs_done], 0x0, 0x0, 0x0}) [ 1916.149352][ T3428] binder: 3426:3428 unknown command -1709868496 [ 1916.155839][ T3428] binder: 3426:3428 ioctl c0306201 200000c0 returned -22 16:28:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x1000000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:39 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x70224100, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f00000005c0)={0x40008000, 0x0, &(0x7f0000000180), &(0x7f00000001c0), {0x35}, &(0x7f00000002c0)=""/190, 0xbe, &(0x7f0000000200)=""/40, &(0x7f0000000140)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) r1 = syz_open_procfs(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) fcntl$notify(r0, 0x402, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000180)=ANY=[], 0xfffffc7b) write$apparmor_exec(r2, &(0x7f0000000100)={'exec ', '\x00'}, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, 0x0) clone3(0x0, 0x0) clone3(&(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'vmac64(aes)\x00'}}) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) 16:28:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:40 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xb8, r0, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4a5a4af0b2"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "133fb012f2"}, @NL80211_ATTR_KEY_SEQ={0xa, 0xa, "855d606569b9"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3f60afa988b5c1a50bd348ff64"}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "be4428c1ca"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "8d61d3dce9"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "a993b4196b5c3338f253511809"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000801}, 0x4) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) [ 1916.680802][ T3437] binder: 3434:3437 ioctl c0306201 20000000 returned -14 16:28:40 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x500, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1916.734551][ T3439] IPVS: ftp: loaded support on port[0] = 21 [ 1916.761075][ T3440] binder: 3434:3440 ioctl c0306201 20000000 returned -14 16:28:40 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xff000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x1100000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:41 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x70eacf35) r1 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) splice(r1, &(0x7f0000000140)=0x9, r2, &(0x7f0000000180)=0x100000000, 0x1ff, 0x1) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:28:41 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x600, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1917.718604][ T3472] binder: 3464:3472 ioctl c0306201 20000000 returned -14 16:28:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xfffffdfd}, @increfs_done], 0x0, 0x0, 0x0}) [ 1917.823997][ T3479] binder: 3464:3479 ioctl c0306201 20000000 returned -14 16:28:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x1200000000000000, &(0x7f0000000080)="a221ac63"}) [ 1918.591638][ T3490] binder: 3489:3490 ioctl c0306201 20000000 returned -14 16:28:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:43 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x4ffe0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000040)=@usbdevfs_driver={0x1f, 0xd8ca, &(0x7f0000000200)="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"}) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) write(r3, &(0x7f0000000080)="1f", 0x1) write$P9_RGETLOCK(r3, &(0x7f0000000080)={0x25, 0x37, 0x2, {0x0, 0x7c, 0x80000001, 0xffffffffffffffff, 0x7, '%]}&-#.'}}, 0x25) 16:28:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x700, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0xfffffe00}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x2500000000000000, &(0x7f0000000080)="a221ac63"}) [ 1919.881027][ T3508] binder: 3504:3508 ioctl c0306201 20000000 returned -14 [ 1919.928704][ T3511] binder: 3504:3511 ioctl c0306201 20000000 returned -14 16:28:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:43 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x900, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x10000) 16:28:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x2}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x4c00000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:44 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xa00, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1920.822087][ T3524] binder: 3520:3524 ioctl c0306201 20000000 returned -14 16:28:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1920.907235][ T3526] binder: 3520:3526 ioctl c0306201 20000000 returned -14 16:28:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0}) 16:28:44 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x3}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x5c00000000000000, &(0x7f0000000080)="a221ac63"}) 16:28:45 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xb00, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1921.575111][ T3536] binder: 3533:3536 unknown command 808464432 [ 1921.581483][ T3536] binder: 3533:3536 ioctl c0306201 200000c0 returned -22 16:28:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1921.621102][ T3537] binder: 3535:3537 ioctl c0306201 20000000 returned -14 [ 1921.695855][ T3538] binder: 3535:3538 ioctl c0306201 20000000 returned -14 [ 1921.734722][ T3539] binder: 3533:3539 unknown command 808464432 [ 1921.741000][ T3539] binder: 3533:3539 ioctl c0306201 200000c0 returned -22 16:28:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x4}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xfdfdffff00000000, &(0x7f0000000080)="a221ac63"}) 16:28:45 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x22, 0x0, &(0x7f0000000140)="c6412e27f1c3a62f9f021238314e9d55c28f7bd7ae85272bd8561884a349cd207c22"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:28:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xc00, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1922.509982][ T3548] binder: 3547:3548 ioctl c0306201 20000000 returned -14 16:28:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x5}, @increfs_done], 0x0, 0x0, 0x0}) [ 1922.580116][ T3551] binder: 3547:3551 ioctl c0306201 20000000 returned -14 16:28:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0xff00000000000000, &(0x7f0000000080)="a221ac63"}) [ 1922.982638][ T3129] ieee802154 phy0 wpan0: encryption failed: -22 [ 1922.989390][ T3129] ieee802154 phy1 wpan1: encryption failed: -22 16:28:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:46 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xd00, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x6}, @increfs_done], 0x0, 0x0, 0x0}) [ 1923.451410][ T3562] binder: 3560:3562 ioctl c0306201 20000000 returned -14 [ 1923.519583][ T3564] binder: 3560:3564 ioctl c0306201 20000000 returned -14 16:28:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:47 executing program 3: msgrcv(0x0, &(0x7f0000000140)={0x0, ""/79}, 0x53, 0x2, 0x0) openat$zero(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000100)={0x8000000000003, 0x0, '\x00', 0x0, &(0x7f00000000c0)}) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(r2, r3, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0xfffffffffffffc01) 16:28:47 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xe00, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x7}, @increfs_done], 0x0, 0x0, 0x0}) [ 1924.213750][ T3573] binder: 3572:3573 ioctl c0306201 20000000 returned -14 16:28:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:48 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x1100, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:48 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x8}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000140), 0x4) openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x8800) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000080)="1f", 0x1) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x3) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2) 16:28:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1925.139766][ T3588] binder: 3583:3588 ioctl c0306201 20000000 returned -14 16:28:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x9}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x1200, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) eventfd(0x7ff) inotify_init1(0x80000) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/157, 0x9d, 0x0, 0x28}, @fda={0x66646185, 0x1, 0x0, 0x24}, @fda={0x66646185, 0x6, 0x0, 0x5}}, &(0x7f0000000300)={0x0, 0x28, 0x44}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0xfffffffffffffdf6) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r4 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000480), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0xdc, 0x0, &(0x7f0000001580)=[@clear_death={0x400c630f, 0x2}, @clear_death={0x400c630f, 0x1}, @dead_binder_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001840)=ANY=[@ANYBLOB="852a6273011000009f0f0000000000000000000000000000852a646600000000", @ANYRES64=0x0, @ANYBLOB="0000007d49da402f2d861c00852a6466eaffffff", @ANYRES32=r3, @ANYBLOB="f17f00000000000000a5dbdeec0f5b637be4ac3b4610900cc782987020aa91ff8ead869eba9c70cc2a1f1e0542bce3b0f76700800000a44890756d5b6a82e5070f431c08362c3c9abb002316b5711dd23efd8e519505995f9f23fd1071cc364c6f0ec523ff6f610b1e692525566e71616d26fa143b6518907f3b1e94738ed1bf9f757f5f8c91bcf9c7b7d1cf63159fb5a565b6d82c1c5ba13a2a7f48"], &(0x7f0000000440)={0x0, 0x18, 0x30}}, 0x400}, @enter_looper, @decrefs={0x40046307, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x7}, @fda={0x66646185, 0x2, 0x2, 0x33}}, &(0x7f0000001540)={0x0, 0x18, 0x40}}, 0x1000}, @register_looper, @decrefs={0x40046307, 0x3}], 0x5b, 0x0, &(0x7f0000001680)="351d7047cf97d978e8f311d417ce51cf90d3f4c0edbeb9664bc0a04e1ec3bf8ef969c4e18ac71d935c2aecadd8ff532a11f719ebbd5ef1e5aa667b0936682ad43507740115330ad039c73f763ee163893dcca746a591b3fb06d655"}) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, 0x0, 0x0) r6 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x8000}, 0x4) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000100)=0x1) dup2(r2, r5) 16:28:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xa}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:49 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x1300, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1926.088573][ T3601] binder: 3599:3601 ioctl c0306201 20000000 returned -14 16:28:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0xab) 16:28:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x2500, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xb}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1926.838975][ T3615] binder: 3613:3615 ioctl c0306201 20000000 returned -14 16:28:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040), 0xfa, 0x0, &(0x7f00000000c0)="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"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:28:50 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x4c00, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:50 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x9, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x3c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="08631000000000000000000000000000000010630840004f5425051d4fad5a6300000463044003fc00000663041269c045000000004002000000ee0e923b4a3c47ecc2166f"], 0x4f, 0x0, &(0x7f0000000040)="667629d2958400605e713d97b28304ff1699e4b1677b80441c4ec1810f98c35920e5ae966326a84bf67244a7a53f8b9040fc3776d16284c61d2e011af3fe0e37c98592a3fea84580437cea80eba2fc"}) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000080)="1f", 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000080)="1f", 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(r6, 0x0, r7, 0x0, 0x4ffe0, 0x0) r8 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x8f) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r8}, @enter_looper], 0x10, 0x0, &(0x7f0000000040)="aa671b5b4afe602c3d141ded1ea8d7f4"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000100)=[@increfs_done, @release, @exit_looper, @enter_looper, @free_buffer={0x40086303, r8}, @exit_looper], 0x73, 0x0, &(0x7f0000000140)="e354422381172be1949997e4bfb81aab575f1eeae0312791f7fe7c542d3feb7554f3495e6e8643fbd24d84c72aa7af96b58cbd1d9dbf67470faa2a5fa6fc43b50ee6db5dd4c77c32f5ad7b1a10a34829f07aeb81c826bdf1d2845205744b36a2da022793e27b945154bb3cc738445c0d87324b"}) 16:28:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xc}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1927.546947][ T3626] binder: 3623:3626 ioctl c0306201 20000000 returned -14 [ 1927.595255][ T3627] binder: 3624:3627 ioctl c0306201 200000c0 returned -11 16:28:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x8, 0x8400) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x2) 16:28:51 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x8002) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:28:51 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x5c00, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xd}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1928.421638][ T3640] binder: 3636:3640 ioctl c0306201 20000000 returned -14 16:28:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010101}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r2, 0x0, 0x80000000}, 0xc) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=r2, 0x4) r3 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:28:52 executing program 2: r0 = openat$mice(0xffffff9c, &(0x7f0000000a00), 0x242) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x74, 0x0, 0x404, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x100010, r1, 0xd1851000) r2 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0x64c02, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x0, 0x4200, 0xd4, &(0x7f0000000080)="2d21ad67cd55ef926cfed3225110e03c0296f6d52e72e2b042c17f6e801e0df4e1ef9ad9814603b56464ba47e358d0d9dffc53bf5fe8a9f9fe3847b30000742423548626f15d850fcc81a6d2cdbfda9a607f214a8c8199a790bf265b85682170f8fef42bf552626649adad4d22cb302d90b5f5a96cf5d2c98b5e4779fb777042d9a6e64ef1129a7ff807127561fa0e0e00d386e61f1f73c370d79a7061ed662cf09f51b600425444dad6ba2e30b7565530c8310eaa26da9f997d5997da8a8fd089a5d72ed37ec24722a9b7a7248f3f20d65769d6"}, {0x8, 0x6000, 0x9f, &(0x7f0000000180)="17b584efcfb4a092890bf9a6e2cc04ddaf92546d864741686a5b07944c0ea445c5006f3f988ae1176cac1da4f723a388e458a9c8b5be1c4b7e55256bab2c856e6251006f3f3bdb42ff945d998ce48dd158e5188558db6e5b2cf1905d7bdca7f8701f107234098004239fdb9cfb27ebbdeb1c7535ec151159bac228f243cfe952c83ab7160bcfb1009932a12596fcc84d90ef28af8804a1299d983d8d5878f1"}, {0x1fe, 0x1000, 0x3b, &(0x7f0000000240)="f3256b6d4510a531ba97fb16148626ac8c7d4f7fcfa6d389ce3069c1fdcd06475f98c88aa6e42a77e42196afbed569549f0ebe973812780fc6af09"}], 0x3}) r3 = openat$proc_capi20(0xffffff9c, &(0x7f0000000340), 0x608002, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000380)={@remote, 0x0}, &(0x7f00000003c0)=0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000080)="1f", 0x1) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000001bd00)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000010001"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@delneigh={0x68, 0x1d, 0xa, 0x70bd2d, 0x25dfdbff, {0x2, 0x0, 0x0, r7, 0x40, 0x20, 0x8}, [@NDA_MASTER={0x8, 0x9, 0x4}, @NDA_PROBES={0x8, 0x4, 0x7}, @NDA_MASTER={0x8, 0x9, 0x7}, @NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_IFINDEX={0x8, 0x8, r4}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_MASTER={0x8, 0x9, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0xc0c4) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40046607, &(0x7f0000000000)=0x4) 16:28:52 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xff00, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xe}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:53 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0xfffffffe, 0x20000) ioctl$I2C_SLAVE(r0, 0x703, 0x3d) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000000)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:28:53 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x10}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:53 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xfeffff, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1930.144524][ T3665] binder: 3650:3665 ioctl c0306201 20000000 returned -14 16:28:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0xe0, 0x0, &(0x7f0000000400)=[@release={0x40046306, 0x1}, @register_looper, @increfs, @acquire_done, @enter_looper, @dead_binder_done, @clear_death={0x400c630f, 0x2}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fda={0x66646185, 0x9, 0x2, 0x1a}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/159, 0x9f, 0x2, 0x10}}, &(0x7f0000000180)={0x0, 0x1c, 0x34}}}, @acquire, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x1, 0x2a}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x400}], 0x11, 0x0, &(0x7f0000000500)="634ea0681fa849819a8d1e88addebaa26f"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:28:54 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:28:54 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x1000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:54 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x11}, @increfs_done], 0x0, 0x0, 0x0}) [ 1930.918495][ T3678] binder: 3675:3678 ioctl c0306201 20000000 returned -14 16:28:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4d, 0x0, 0x0, 0x4, 0x0, &(0x7f00000000c0)}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x1010, r0, 0x71576000) 16:28:54 executing program 2: msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000000)=""/56) msgrcv(0x0, &(0x7f0000000140)={0x0, ""/157}, 0xa1, 0x0, 0x3000) r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000040), 0x600200, 0x0) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x7) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x81, 0x0, &(0x7f0000000080)=[r0, r0, r0, r0, r0]}, 0x5) 16:28:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x2000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:55 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x12}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1931.754535][ T3692] binder: 3687:3692 ioctl c0306201 20000000 returned -14 16:28:55 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x3000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140), 0x0, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x90, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000380)=""/4096, 0x1000, 0x2, 0x10}, @fda={0x66646185, 0x0, 0x2, 0x1b}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000040)={0x0, 0x28, 0x44}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:28:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x25}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:56 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x907, &(0x7f0000000180)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='o', 0x1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3}]) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r1, 0x80046601, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x3}, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x3, 0xffff, r0, &(0x7f0000000000)="ef2d954878963dcae7b285f3fc5867b131ef60893ac37351092c94ac93be394a75494ae5de31ae9a12291a8658a3f598475f4c1f8a32934cf0016675b24d5e30921027fe0f04ec7a4ec24eb6e5f2a9e344f6641784877a39c7207488aebb2033e3b5c9f33a45ffbd13988e32e825b51326cbc2a52299b042716a0d5ae42d7b5a4e18a6e11f273fde818f7cc700000028d6df7023b87a603ae49f9463a72d8885ae66b9ce255aa9e9a7d1fd858e5602db902be9d08d281b5f7f228491405ff2549e5c0b1416c36ae013f265c313f538580db0cbc115e3b57034098350df13cd4e3a07c0124891ae6f74eec6dba885d37791", 0xf1, 0x3, 0x0, 0x3, r5}, &(0x7f0000000140)) [ 1932.708536][ T3709] binder: 3701:3709 ioctl c0306201 20000000 returned -14 16:28:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000008f"], 0x0, 0x0, 0x0}) r1 = dup3(r0, r0, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}, @enter_looper], 0x10, 0x0, &(0x7f0000000040)="aa671b5b4afe602c3d141ded1ea8d7f4"}) ioctl$BTRFS_IOC_SEND(r1, 0x40449426, &(0x7f0000000300)={{r0}, 0x3, &(0x7f0000000180)=[0x2, 0x0, 0xddc9], 0x3, 0x0, [0x1, 0x800, 0x3, 0xfd11]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x20, 0x0, &(0x7f0000000040)=[@dead_binder_done, @free_buffer={0x40086303, r3}, @decrefs={0x40046307, 0x3}], 0xda, 0x0, &(0x7f0000000200)="6be7fb26b9d523c4ccc581e21fa7668e7bda837084353e06153c99cb5ce299bb693068c5b5d8fd27c97a3f5de88692aa0657535929163d4f35f76ece0eaadb1899c1af3697f0c801760bdd7f9eaf3d3ebff5805456026d424fbabe8f37c2bbd7749831e8e4731ab0d472828b503e4a47085ce99416582fe53eacf4bab311404adf60fe800e97b404ab47202c046185610eb96e75a1e3a20710e29e73c5379b1785eb1a7fa1554cbcb57ddbfeb9c8e424417ef403402913d701af040c3696b8bea8097878d377db31ba05c075235391e70f02ec6bd389f505f8a6"}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) 16:28:56 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x4000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:56 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x5c}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) r1 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x200001) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x1}, 0x10) 16:28:56 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0xffffffff, 0x200881) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000280)=[{0xa3, 0x3011, 0x2f, &(0x7f0000000040)="8ac7a307da30fc5c891e59edca0b031c0fcaa4dcc6e23ed619c86434acf469cf60f5d48560e8013510ce3f6a75482f"}, {0x3, 0x10, 0x65, &(0x7f0000000080)="083ac1ffbee5b07167f3b2cf467b827f5c376459e324dfb17dbe452afa00307139887b6249489b667798091bea6a8680f65f31c53a6c4c939e66dcb44f96c3639e0929d6a74f08e33a74d14c99e8a1918155e97440b6eb7f8b004b97b1eb6220607b989073"}, {0x1, 0x400, 0x31, &(0x7f0000000100)="426b52873727abd91bcabfd6ac91b4bbb7493547dc3e02cfdc981211bfa7fe2bf167dac78b3a2fe7f26847f69e32f8e876"}, {0x4, 0x4800, 0xa3, &(0x7f0000000140)="d95da11b880cfc58ac2c24157013326ec60cd7119947c3289f8f349aef4f4f1d33b4f073b88c6c7e25510d44f590a3695dcc71c0bb4c00f4866608ef5b70103c0b4a4323f5accc8d0f085f68891ccf5a1a301db95876a775f6757b63d3ca2494979ec02294a4e1406d47e626064a921134859a3571e6310bfbf972ccac1b91e956794d3ff99fb65896253751ab20aaa142e69c2ac5155f3353b35472847983f05bc436"}, {0x40, 0x5400, 0x1b, &(0x7f0000000200)="fa3ddb6d3ce824679fd760442803bf84b8a8bb0705f0376e0fb3ab"}, {0x1, 0x9600, 0x16, &(0x7f0000000240)="be53077e34d2787dfba1cb21b9281e91a0f297840e70"}], 0x6}) r1 = openat$dlm_control(0xffffff9c, &(0x7f0000003700), 0x2800, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) fsetxattr$security_ima(r2, &(0x7f00000037c0), &(0x7f0000003800)=@ng={0x4, 0x14, 'I9]'}, 0x5, 0x3) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000003780)={0x1, 0x0, 0x3, &(0x7f0000003740)={0x19, "c2298d1a1e4c6ec74be6b833c41754e69d2c976e054d1652014c0ac1aef56777ef"}}) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x10000, 0x20000) ioctl$I2C_SLAVE(r3, 0x703, 0x39f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, 0x0, 0x0) r5 = openat$null(0xffffff9c, &(0x7f0000003840), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000003880)=0x6, 0x4) writev(r4, &(0x7f0000003680)=[{&(0x7f0000000380)="f9258c31865ebf0e7176216f3c833822778a9a9b0f93c1744ba49e4b0683f90cdee4be41d20f1911198f67f48e74030f940ff76fa5ad4e3b9083e1d95f281a44d564bf26afc0d5cf9d12d92e50f34642b34d6d951e6cd1442c246443241af0889a106d2f2b30d39d4982401d3dd3f2c1df959a8f71b90656c30fac623f35f86abeaf3e1d559a38a13a9116176e06237a95c761e501ca426cf3ec3f243a5dfa5ace410f76e6", 0xa5}, {&(0x7f0000000440)="37e0ef05c0abbd8640a86c46ba0979b30eea485b46154d23ed3b5c91a44128c53e424b3819c79c", 0x27}, {&(0x7f0000000480)="88d9426210f8888b4fb66e09b367ac36888f3ecd4a8e4956f21f239730d734d3dca8467c1a5dd502d72be3e867ed1537284c8707be4b7e8f51e07c7ab75e7aa475fee8aaf606ebb32c0819619572552876c2f10727dea6d0e5184ddf85a15a13fb0cd0ce3905914b4807f3d1599d01f624ed379f4b5afc47", 0x78}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="3e5bfbb246ec4cb96415c09da553cd04cc5764749ddcb1ffce7f1a34418d346fd738d7210f39ffbe3961f1872931b0e4668500ed527428c105b07608939b57dde29da859d8198f57f06d034e57177b975a488308cce221d8886edff2b3341b9ff9053d5d21af8a197080499107d9a6752a06f591ca5106e79eed039e38f74ebe3b6f7034bdf8aa58b56d5c2df644d92244e3736e72156c43fc5494ff5456f0f277e589f05dbe9f27c0b4", 0xaa}, {&(0x7f00000015c0)="9ffee3d10bdc377304fe78d1cad9cc96479a431c76dff233446825e16d", 0x1d}, {&(0x7f0000001600)="cbd3009e04d96dfacf037d8446207534086c647095480fb89fb7dc544b2d873498f840cb6142600c5aa548129dd6e5fabdc8921be1af57bd682d01b9b61d020f31e0161324811b5d546b62740305c6ad149df2ce846b3746d9728e70b43b8aaef1d8e9ed5192", 0x66}, {&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000002680)="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", 0x1000}], 0x9) [ 1933.262146][ T3714] binder: 3713:3714 unknown command -1895825408 [ 1933.268749][ T3714] binder: 3713:3714 ioctl c0306201 200000c0 returned -22 [ 1933.374315][ T3716] binder: 3713:3716 ioctl c0306201 200000c0 returned -11 [ 1933.389854][ T3714] binder: 3713:3714 unknown command -1895825408 [ 1933.396510][ T3714] binder: 3713:3714 ioctl c0306201 200000c0 returned -22 [ 1933.404570][ T3718] binder: BINDER_SET_CONTEXT_MGR already set [ 1933.410644][ T3718] binder: 3713:3718 ioctl 40046207 0 returned -16 16:28:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) splice(r1, &(0x7f0000000040)=0xffffffffffffff2f, r2, &(0x7f0000000080)=0xfffffffffffffff8, 0x101, 0x1c) 16:28:57 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x5000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:57 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x300}, @increfs_done], 0x0, 0x0, 0x0}) [ 1933.988178][ T3729] binder: 3725:3729 ioctl c0306201 20000000 returned -14 16:28:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:57 executing program 2: fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f00000006c0)=0x5) r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x114, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/72, 0x48, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/89, 0x59, 0x0, 0x13}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x1000}, @clear_death, @exit_looper, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x1, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/192, 0xc0, 0x1, 0x8}, @fda={0x66646185, 0x5, 0x1, 0x15}}, &(0x7f0000000340)={0x0, 0x18, 0x40}}}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @register_looper, @enter_looper, @register_looper, @acquire_done={0x40106309, 0x2}, @dead_binder_done], 0xef, 0x0, &(0x7f0000000580)="989516fcb84b8c5eec1953a5a6773eb838c422095d329f41dc8eca86c07db58ae6bad38442153ed229c0d91d49e932b89bbdc44348951335b83468df3025e9aa6c9f9932b3fd458009e6583b34e598d5284e6c60bc70746ecde504bfcfa276cc1c557889aca0ca19bbfe045049199a336ff2270d4a92f88878eb46a2a906f7d2a9295ad6384ac63247d780f08452cf30cf4879399c7cab941834dd06d67557bf06d8beb505b72b236fff1b7809c12bca8b569e5a3679f4841aeced439f3cd67b7e71bc1a38357cf222ac2e2622d3b8212e323190595b8d25a15e2873ddecb105102506b83ba94ab56706cfcfa2f278"}) 16:28:58 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@host, 0x9}, @hyper, 0x0, 0xffffffffffffff9d, 0x1, 0x0, 0x3f, 0x100, 0x5}) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:28:58 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x6000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x802) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:28:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:28:58 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x500}, @increfs_done], 0x0, 0x0, 0x0}) [ 1935.057753][ T3747] binder: 3743:3747 ioctl c0306201 20000000 returned -14 16:28:58 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$I2C_TENBIT(r1, 0x704, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x1, 0xcd, 0x4, &(0x7f0000000000)={0x15, "53586c20deac235991b0841683d2898a9fa861bd7d738554dc5c7fb77f3d15b202"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:28:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@enter_looper, @register_looper], 0x4e, 0x0, &(0x7f00000000c0)="30f7c42a7973011a4120c5837a38b7ad7f4354a4679a286071ce1c1f6a0b1bd4f2645ca411e77c7a73d472e425d3d37700d2e0906a87360ff638c1fe9c627dcbf57d6be29e3c1ff7d7ad6e2fd180"}) 16:28:59 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x7000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:28:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=[@enter_looper, @acquire_done={0x40106309, 0x3}, @release={0x40046306, 0x3}, @exit_looper, @register_looper], 0x65, 0x0, &(0x7f0000000100)="da29f3ffd6bdda83fe095f4cd6e38491b047765dc24ef153a1659ab6242a44f88abac043becda7d713e3548b8e65f1cacaef148c7132287e3b9366e0c0e180684ebe8b5f49bf5b3207cbd7ddaa76ea30c0770d781989736e3f6ac93d6094e8481efe5a13e1"}) r1 = openat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x40002, 0x190, 0x10}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000240)=[@register_looper], 0x57, 0x0, &(0x7f0000000280)="9c977467af7a8e7d311ab88393a72f9bcc8e5c46394915d7a821cf7c94f39daa893998a3e5479d9bb59c23028527949728884316fa77490d6a69c99fab715380d135bedea9a0976360fb02cda24beba17b773442bd1001"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:28:59 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x600}, @increfs_done], 0x0, 0x0, 0x0}) 16:28:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1936.067089][ T3762] binder: 3760:3762 ioctl c0306201 20000000 returned -14 [ 1936.127731][ T3764] binder: 3760:3764 ioctl c0306201 20000000 returned -14 16:29:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x8000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:29:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:00 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x700}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:00 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x9000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000040)=[0x5, 0x0, 0x7fff, 0x3, 0x0, 0x5, 0x8, 0x5, 0x80000001], 0x9, 0x81000, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000500)=ANY=[@ANYBLOB="000000000000000005004001000000000000000000000000000000000000000000000000000000000000b43b00000000000000000000000000000000000000000000ff0700000500000007000000000000000008000000000000b80000000000000000800000000000000000000000000000000000000000000000000000000000000800000061580000090000000000000001040000000000000600000000000000c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff09090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000f073118a756123c1a3b21c8fe57ec8191bc139252221bc86dbfe8fe74bbc16c6fd43cf3bd3477fe78523e453511b0db7bcd51b5ed2bbe0f6cbfa0347eaca305e7cc24cfa57b534d1c09e13fb8d95c7541761e26d25237addde0635a589051f8e30d33c574ab3034cf24413c040feb3b9e6f77affb4351a95d28cea2deb3b84b9dca5bb2ec8f34d3946c920d8c4e0e0f95e345c6e1afedbf5c9e16938e901c8fae2c112c472c4e20e69fc0f6e37b4bae49f0e255b9df1d931760fcdcc9c95f3ec8d7e89a82b023af756da4ade5a82df21ecf4c0e59ffa4d8ff03b68a35aecab95"]) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)=""/64, 0x40}, {&(0x7f0000000400)=""/170, 0xaa}], 0x2) syz_io_uring_setup(0x758, &(0x7f0000000200)={0x0, 0x86d1, 0x2, 0x3, 0x2a0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000800)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000300)="d56e444fc64b1d71cdce78bd8d058ddb6071b0570c9a6c5a6a2aaf8de1370cef28b8041d4b1a1dba2037b9133c71f40013841d5890c2a6dc046cdede363ffa0b388df4c41246b5620ef8c623cc6bf198a91ae5f7861752cbf913e2534f3ed06c19a2ff9c00bd4eb151753d9e4257dd7ba52f6acf3381ca26b0f3d2f84d866e71dcec83cd6662451378647cee3da595d6aa7b647663eaf19842f3be3099a2e35fc44b884c10ec06d76d554c0ba2917f566ecf309382b13efca2fd2ae348254d9657", 0xc1, 0x400c840, 0x1}, 0x1ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000140)=[@decrefs={0x40046307, 0x1}, @release={0x40046306, 0x1}, @increfs={0x40046304, 0x2}, @enter_looper, @acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x900}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:01 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x6, &(0x7f00000022c0)=[{&(0x7f00000000c0)="e05d5b74fdfef196107d94a685e4dd40dd992f52ced4ec16488e150ec114ea0a071ba2aa0395732917581280f23dd860d8dd0eb98c2c7904991df069c4ba227d4908c7e5ecab417015e15cc0824ee16d05a4c2d9ac683244a1eb45bb983c0971164d215225c2d0390070dc5afc6b9a4f75844684ca63e977e0d98466a8138f9bf408032cbe7de830bd15a1ca77e1115f6feeeb5b0defcf3fdbc731d02ac4e304d519dc4ec2a11b19502efef7cb0e2ef55364a4637eaf45896278c1ab0f0a6fc42fe6b5bc3299f86c1fa4617d08714130607a7dd2acc5941907168c6f2aff838e9695b06ceada95a8f4a0520f3ceeca8d340c90ba10834314ae44f64dc627c8fe1eafece434cb4912ff18c5de141a71396d123a09e7264b19294b5d9a8a19ff64c3bee84b8a57d8a0aacec6f150589437d230282cfdc8588e7f782fbb6a4aa1a66d7a2ba66fbef7b10dd4925a2fe9aa81024b9ab6b596f7720a711af4265ed5eb883c4d3db874476216c1db51c814f6c9a05b00eacaa5de86f24e4f2a14f7d8912f0300d5419f37fe0ad5e7cd9d0744bc38bad8f31f546f4dcf57e13467e0cebd8428517c4e40708fe612c53537bff069da4cddf1d713e744076eb7d50d0583270a17c5a358fbdb052e1b0732aae0b476c5cdc3833d43312309e95d869237854c9fd65ffa4191f72a83c6cfa64860709525540879b0d498c96e7d371cb49ac67b9ab16c59677719d086cf0e0cce4f60a6798a24dc424830d41644e23193cbcb7834dfc98c6be2639ebc23a43072ff0966b9f9b97e2924fb824b018e940cbd20ad77b46afea180f4d6c751bafefea39bf52cb53909890f183e86543c1daf3c4d8ade5ebf97b5a72c08ef9e189fd8049eb385b78e1b12a48a8ff12cd09c66b21efde54205047f3ecff5de05cf4168ed57b16e3ebc8d01bba3d11cfa3fab87bf848ec4ffa0c59e60c4852f2b186483494dd3614702fee48084127b2bcd5d71403106b7fb9e02b4a74ce8b5e4c8b441a855f9ab519b90074272bbdeb281b0463a7ba87ec8fa81012673ef38aab3d467a496f43a8a316cea11d0d3f2b496fa6a2c6546af01a2ca1bcceee9f86d75032be38f1adf3e15eb08ad017b48477a1d173e14908d2e4756753bb54f7878c2eaa3d4fb2cf2b1b2765100fc6bb54893ce2ff58d9ffc6966a458beccef239d11ca83d74b54b9076e7a81e594a31abd9e8125c7a1baa518996ed5d32217564b3251372175ba9d1967a7be01c155534d39a3b9d86862716d031973ea44345eb81e20f4fbeaf12d0e6f02ccd7cd4f6d0ec1398c0993c52c99e42c4bf96cb1a5af556f95314187d95fb6555b96d3cef7491f3fc25835d60fae84ba722ce39bd3567c9571680ad262b7e569a8922d3f37040eddab1a3984fcac27dd303f417c91c67f1fb78bf6b46357bb19d57073424719de1bb535611a1d8c0680ac5ba0b6e5b7e9ceba5a963f928df379de0211f557b0438309ae0a9a31a5e16ee6e3b22f974f7a24fecbb4d95d50b28499a75fbe39d6fe542128219b0252acf307492b7f3185eedc2e9f8bb2f404e31779f1883b6d5bbac6644a52e5052660d6f29bb51b7228c96dd0866d1a44c9f4dcb705a7385c387dc61c0399a99a67a5d38a21a07d79f77daba2c23e215c2bec2d3d6e6d9036ec4c2bde14a861a5970c1083c0ad94a0280cbfdc27febf7a66a36e3c6337f305e2cc04ace3bc20e599f66cfd889fc26d0fe9f843610bba8e9eca975ffdbbd5c8a4f2e2489065f01567bb65a878880c45064676ca03cba7c2b9392998d4105e77d07207de3b19bab3031d5a7a99f5a26e607e61640308c3621f8aeb00316d1ce1b3145b0feb614d3b3190a7212bebc6d92064852b5fa7b6eccd36e9b1599e91e218ffc05e7a7433a157d1b3ab0c979869ecaa65f8b81d5b2534be9704d81c1e33c87f590893e53ab497cefee367da80a8e25ee5a9f46432231b126884f317fe62ec46e1abe416fa498b206a186c5520b11e23209b182f8c5b4cdef6d3868c55c60cc6ada030623a8bc2cf45eb095e902e47b6d0022a69626814128ef61863c8513fa932867de1a4d814d478415e7b8e3f38330425229d5a394c40b46dbedef210a6b2a2d0abc37d2892b83d81a431198de6c5e6dd328193fe846a883c75c7f51a073fd2805dc9f741a7e685220585b50dcc40083920c3f31a695979f14d68edec8d9f40ba9ad91871e6dafd17e4cd40725e4986c419bec305219b393a4f6a22cbe8fd109f64e3a46213ab6628f2d52f576237b74c552ed88b5d71a6231e4fdeb24808609b5ad33be82cb46bf2a58e02d61d9639b39fd378c8a811ac01f45d3230ec656894b48f96d80589f84c3623ae4edd1044ad60be744afc10b911772b8ef6af734549bcb331de083fe53fff05bedbb4e8f54c2ce2563e6fda49367444cbebe80d1b1a550f6f88c9eb0429ac33d5f11bac7ab9f398266dccf08c7ee997d7c7bcff5007bfcc37c1de20cad60d3c57ea8d5155650fcd1fa814bff5acef346806da11a3fb8694272a0a95ee48ea0a681e27c61bf97f1d435de41522e85af98b98dad1edebf540a88c10d55601900fd5fcd586e2a2c65468b73c7e39fad3b995e5644191172909d32bc18643b1c25bb028115fc7136a0ca65d9c3c443a38514d00ca6916f36510e1dba8b8eb4019c1bd3e30aa6c63a31d355a7218b49c5fc170b5ea79a52515ed0ea9584f32d7ecbb3753957191c73c6a7c630eee3a52ebc806c74e9e6fbf21935fcc1bafbbc6a910947ba1156cfd6718d9659c9f44be5c1d39865a0df189326797ee0d6ebdb011f5edae4aceb6107f88338a9b3270f840aa96c237fc585fd0ede2b18d3608f8d30948f6eadd9a68364b2883a0d5f35163630263b13af285c84a58e2785aaaff0a7f63afbcab14cd64e8fc3c3c998b06acb25ca7c85a4d99db23f557325d578064e938c4ccdef60f885079f5ccc54315df83207baf78578d66437dfa6f79ffde2ced477caa4b1fc499bc07579649c3b978b775b768e3df25dc624d4d44215f49c0ee5e1941d2a237b6592a4b3421a938a806ad4bdd7164073dbc8f1c35702f996aa033cffe713dbfe3d9f23044918981420e862050a510f5abe1cd900e75172c271b1f68fe05eac4edf91fbd3dc2d3da1687c2dd8301b0c6d1a20005190792ea4c5ef3571c94c1905cab2f3fffba6fb20e4426d913b2636b9f15603913947ea61beef873d37ca9b81d4538dec24748802462fff8692f26571c682931c38515f357213eb64ca6871e681f89c7bcc1911f44d66b4cbcd8c569ddd471c52841c2373a81a47753421340310190c148bedb40173bb0f4c31ce6b5dcc0125815979c5051376eadcd04dd665a85eb92b96526ee1294f3228d4e46a558c1e712ec8492adc4e0d59d7e84dd5e4220bf3263660aba424c8739ea2ebd98775fe53b218a233a487e0382d1c0132a5ba574cb9a6e6a0353ff859810908867c8b604b4b688434bddf337987f18b97b02513f6acd52b04f7e751bead115f850d4cfd5c7752902ed9bd4c6f287f06454e407fc731dcea4f1abbd14ded0c2b9d77e6b54888f31925b6d4697bb4ba47aa0d61c786f274de6696e21b54612423bcb4c7d11538d7d0ef191b9dda00ed52d8d6ff5cdc5d00743711090a899c43d30ba86ff0d96357a72a2143184b51b73e845f1115e0cf7983903e2d044db74aba2e42e13b31ef851b7af4960329ad25e851d010443b22e09e9ffb4539b1fe8c089a5b1b36864ec6465316e7544b0cda21cab8e55fd24ab788b3e6020879ef7cb1db9813878f190bae66ea47b105318e13d46e9f154b20064a002bd68fab2fa294e796ed99fe3459a4c97f19b7b2fe32f542223d00e9bfd7942bc0353ab9f7c5e3d96dd509f838c2d9c713edd8e5cbc744cafa9fe1b09e81f61aaf4481fa463ebf7a211732431e34d670e91df8d12500e819cb0709b991a19b3d56af466e7605b9a2581a3ac87e43e7a0e848e8ab44cfc0729c56b3a4f1561582579539661a1bf9cff306ffbe7cd62f190d004e8c52d86ce8c65b53f0c50a52d80e73a0b98687edf885a524a71a0763f54f2da4417581d63c02966f1766641d2db1149599ccaf9b5a1852a35073843fc4021f30ae7c66fdff1c43a7b25257d83a907d9c20188930bf97fff1b26656eafc5c00497dbe10b0b4ebb12fac0b06bfbfeaa5470d46ffe971906fb4a6a4a9db5f13a2b16c8b7d890a8ff596b59496c895f2ce4bd097d2ad5ade30be3fa1f8f27069cd9f029235abd80b69d8203e996e7dfbdc516798b7a0dc30e8e3a3c940b59aa29f7cbf16476165347853fbea04e51bb0e17779da3d9754a53b42552215d6591c8a18ce5001ad79d77c00e79da958ef883a0785cca444cdcf89a32b078184ef3f940451d51061480062ce219b572549d4ee5e2b987e75d4cf8ba3dcf3ee2019ac67ef5573ce31eb5a4d3c171bf87e0ad76a721565a93e9b03d3aba7ff475336395efe96771f887249753f0060e7cb50dd1c98cce25f62a65f1d2d0b19f972097db8b8edd7571d8fd0ade0c13bf9e71919604e00b8683ef3a626f31f211681b445fdcef4232f41b981e4aae7873339d6a44d54bfe88407e415c67bd58bdae9df7d570958bab99d66303e12f8f72abcd87262477e7f440133eb82e8e12bdd0048b5ace182e5ac9c1f6b563413ba1340e171323aac61ab2f0842de7698459ede5425689465bcdf7fb991b614f22cc631968e4744108443eb0b4ed17439aa67606ccd611fd35d016f4f6db13a41bd0dac2423c18e5a90949a825f32a5ec6671d80e67ddbf733c708830dbd945358e8f2b86b8f2d6656b3d7089f59515ba6b03a95653c005c6d5361bcae1b7889d0e04c9aadb62b518b270df7b794923abd69000d8611b98fba54f383901b31de2156cc1708d1e623f75b54f9334f5550ad89fef3636cda1b3829ea4318a154e59834e4432d8eb878ba3be896a1c25351e6bb7073be5d4ebc116e6832437bd78ce3d64057a4d097711d1eb79355631e0794fe22718e8bbd0058f2008fce51b3ef3f7eb8ceafe0caa3882df1e2c8f1ffcd8bd85725484329eb619eaa5befde9840b2f0e24d12271393c485a3a5dea4fe5c6fb2f369b642d59d656202bf6651701b2d308e55c392ec8b88b0deda0285155038272985eb3a070a4a20209df0ab33e9ff14b8d98efdf5799a0c3d53d7c2e2e775b54e83800d1b1266708a74806067ca353b3f321805b55c26b2a03eb5494e2902e82f4093edfc49a3923b8efde377acf030bd9e5c6bf47216a1b23f7c4a59001d045767de86c63d60da7a099e0711c70f346aac690b8d3175cc129b81535bd4d90d6747d91c7720eab2c20d2df4b25a6062717d4488ea1de10898cd24154b882c7af7d732305f74e68ef6b49e347031c6336fb407926cc986dce23bf23e83a601a799fd2e8cd00cd57c488a01129f7741be75c26a1e8e2874a21cecb7579cf1fd608dd92382bd9e3e5e5b07a8bfd48ece1b807a90dbbabc92a576417895e083d8fd351ab092aa1be55171d49065c650f26d3641980fe4ce25fc10a5cad814b742edfafb2f184450479207d76e391205b3d8cfb768f44f2457a4203e6298a40171ab410b092a03eb2d3da69619c9ed6af9dcab727cacd2a653ec3b618228423d140eb1a31b3763273a1f25bffd109eb1e90fbcc3f60bec1df138e31a62ef62b77749c9cfe86a68fb84d789c0b7fadc2cb425a714fe046d0348f8a979a1c02e70c36170f78ffe17a572d58b29e955f46ddff992ffa8195456d03a882a04f3841e", 0x1000, 0x1}, {&(0x7f00000010c0)="711ffadc46231bdae5ebc68be7058a48be13ea4c55648633b2323420b9daa096dcd55f678fe37fc73eb832aabbf4dabdf6f2b16ac6c7698cf18c0e064edb13af933545922b851f0191cce5fa7a353248d7343ac68f33512849937f84c1fa466cd05800836318c7a8253a0c2343ac09d5ea38e67c6d9582b7a64285f93d92b48759648790d2b3d132ff01059ef6b58c9b0b18a91b2e192592236197ac84b71cc6738a2c0cb5124251cce740a010b1fe347872fd82dff8146737933dd0121e538d7bad647acab997f2b67ce2d59ec68fad24153e090623df14e4653b02fa4e11958386a75d196d1fa08000cc6384712e462415", 0xf2, 0x80}, {&(0x7f00000011c0)="856f57b5314a44263115ba945225718fdfae132370050ca14d381afc28412dc4e30307ef3d0acb40deffafc5e9a53076bd0ad6bca82faaf975b31810fabf15eb630a30db69b4ab90e5dbf88d9cfca594a1731762ef91ce288315d187c79b8ffa71cb870baf9162364c660775109e0cfd9d", 0x71, 0x4}, {&(0x7f0000001240)="572054162836ff5e8fe0e2ea6731f1e0", 0x10}, {&(0x7f0000001280)="d261b4f9245afd9adc1c70558cce6819b19748119bde0ddfa80ee17f0b93c964fa", 0x21, 0x4}, {&(0x7f00000012c0)="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", 0x1000, 0x5}], 0x0, &(0x7f0000002340)={[{@nointegrity}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@subj_type={'subj_type', 0x3d, ':-$({:^([](.\\'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/i2c-#\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, ')'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_lt}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f0000002400)={"6bc565b6773f0aa6deb555025711f4cb", 0x0, 0x0, {0x0, 0x1}, {0x400, 0xc220}, 0x10001, [0x4, 0x401, 0x0, 0x5, 0x8, 0x6, 0xfffffffffffff800, 0x0, 0x7, 0x847, 0x10000, 0x9, 0x1f000000000000, 0x1f, 0x0, 0x7]}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000002c40)={{r3}, r6, 0x7f22738fd42aa6fa, @inherit={0x78, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000000000000600e60000000000ffff000000cd81a06b48fd6cc800000018000000000000000500000500000000070000695dae16ed28a5fc000000000080f6ffffffffffff51fe9a8743c2020000000000008100000000000000400000000000000000000100000000006a020000000000008100000000000000"]}, @subvolid=0xe9e}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c09425, &(0x7f00000024c0)={"f1c84e05f52ad42196882819f38b0173", r2, r6, {0x80000000, 0xb93}, {0x3709, 0x2}, 0x256, [0x8000, 0x9, 0x7, 0x0, 0x540b, 0x0, 0x3, 0x2, 0xffffffff, 0x4, 0x2, 0x1, 0x6, 0x80000000, 0x4, 0x1]}) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000002580)=0x400, &(0x7f00000025c0)=0x4) r7 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r7, 0x116, 0x7f, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000003c40)={r5, r4, "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", "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"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000002600)={0x0, 0x100, 0x8000}) [ 1937.739225][ T3788] binder: 3787:3788 ioctl c0306201 20000000 returned -14 16:29:01 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xa000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x3}, @dead_binder_done], 0x62, 0x0, &(0x7f00000000c0)="9667c63ade5437eb6eacd7d0af9e6a0341f0cde5756d7b8f3c25de3127bcf1fa347fe47567b730a42947609b8a0033183c522ccc24313f6a05d141ea3f4fb5b27acb3cb37dd0b57fc9c132a0e01d603d2ec37f637af6db17ec76f125101b274dc093"}) creat(&(0x7f00000002c0)='./file0\x00', 0x22) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:01 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xa00}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:01 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0xffffffffffffffff, 0x1c, 0x4, 0x1, 0x3, [{0x7, 0x2, 0x1000, '\x00', 0x2}, {0x8, 0xffffffffffffff7f, 0x1, '\x00', 0x480}, {0x8, 0x9, 0x101, '\x00', 0x2}]}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) write(r3, &(0x7f0000000200)="0bac52e7ee1e73818726a3c8463b67a42da76bf6a1efb5bdf0d7556ea265716c074f67231195f04ecd5552e9ec93eda957d435bd3851283fb3df83951265995fa1d4c63d7a4cdd2a83cf6fc1abc1e64c3c4801f5074a0eb5f8", 0x59) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, 0x0, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000180)={0x0, r2, 0x1, 0x80000001, 0x868, 0x62}) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, &(0x7f00000001c0)=0x5, 0x4) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, 0x0, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="000a00002d30303030303030303004abfd55d88c55335e303030"]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xb000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:02 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xb00}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:02 executing program 3: sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0xf, 0x6, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:02 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x3c, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'ip_vti0\x00'}) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x34, 0x11, 0xe3b, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x34}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:02 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xc000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xc00}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x58, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0x1, 0x2}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x0, 0x1, 0x33}}, &(0x7f00000002c0)={0x0, 0x18, 0x30}}}, @acquire_done], 0xf7, 0x0, &(0x7f0000000480)="7647cbca07108ff2e124d8170bdd7d9fafbfb2864305b748bf9af2997f7236ad4e822d874a84461325b6dc9cb156fda3814b286f95e257e63f57b7d4a255dfe054b763cdd6f0f38f1ff45285a629ce1e3182b46484a726c4dce8e2b04b7ddc75f9067fb761b42d8da50cbc80f273d05acabec3a2542b4ff94a96e43ef8dbc503ca523f9550d6ad8ac102aff7d6729dfa74e502a85ea41392c1e35c01b2fa4439fa489dd8ba0df62967cf86187e9907637ddf6e3a9b35bd93bb8c4b9dd1cdf0cc119fb120f35229c38781bd7ce6896c312735181a5b13076d20705582e20b2bbfe54dfa0044ac4d2b050e75d026ecefad01b5ead0ffc939"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:03 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xd000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:03 executing program 2: ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xd00}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xe000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) write(r2, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x180, 0x0, &(0x7f0000000500)="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"}) 16:29:04 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x4, 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = syz_open_dev$char_raw(&(0x7f0000000100), 0x1, 0x10b801) r4 = fork() tgkill(r4, r4, 0xd) ptrace(0x10, r4) sendmsg$nl_generic(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x2c, 0x1, 0x70bd2d, 0x25dfdbfc, {0x1c}, [@nested={0xcb, 0x24, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x25, 0x0, 0x0, @pid=r4}, @typed={0x4, 0x17}, @generic="60d02f2e528af00e39db395bd7ceb160875490642163c8729265df560d8c5463d3b812b016d77ff705fc273b8c8fd683aa673bda02db820957d920fe822f1fa8c1ea932bf0e59b0bc0591592acdb1dd1a083365dfcf179ca21c562cb9a5b2e280fefe60b981e74dbf2bcc9410133d5a07df91486142a2922cad3dd611b164eb219f3c58221c9dcfd0cd5d8554adfce7b986f10ae555c2d9220f634220ac29710c5c75a", @typed={0x8, 0x6a, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x25, 0x0, 0x0, @u32=0x7}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) r5 = socket(0x2a, 0x6, 0x9c9c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/197, 0xc5) kcmp$KCMP_EPOLL_TFD(r6, 0x0, 0x7, r0, &(0x7f0000000080)={0xffffffffffffffff, r5, 0x9}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000000)=0xffffffffffffffff) syz_open_dev$ptys(0xc, 0x3, 0x1) 16:29:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:04 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xe00}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:04 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x10000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1941.732449][ T3877] binder: 3872:3877 ioctl c0306201 20000000 returned -14 16:29:05 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x1100}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:05 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x11000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:05 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000780)={&(0x7f0000000700)=[{0x101, 0x6011, 0x8e, &(0x7f0000000000)="b8ff67a9350fba1c36859207cb40c06d121d580c88c28410b1bc3cff40bf81aaa04b1e45701d1e305c6d55c54d5cba89dc014831af1c68bf2c16be337dd2db9f95341af1d2d5beb2491d35503f9cc94a5e74a5dbcc9bddb23e239800410e199066aaa0684f9929112c5202ed6a4a1322c60385db0ce490fa3a1ffd51e049a7ad1ef33545a83e44f02d79079467b7"}, {0x25, 0x4000, 0x56, &(0x7f00000000c0)="fd8c7d409a7cd17933b6c0994870b5925d5cd26a06f2bb213e793103445abb1fcef8b35fe1cab50c04cb61f974dd37010b00f9fd5e4175edd4fa3a8d9f5983498afec02af1f32db9cf8109bb855a11aa9bb4a58b94c5"}, {0xff, 0x200, 0xfc, &(0x7f0000000140)="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"}, {0x200, 0x800, 0xa2, &(0x7f0000000240)="a5a74f41593942445d6c71b808ef9ad2dc71fd4b0bcb43534fcca3fd93d215fc57ef1fd85d7eb719a88cf1a36ccee966610aa21772eea31e01e8ab985b8604051a17802693d43c65379683a7022859ecd37d13fdd5fb391b15a701ed5daa0759c16a434f46dd5905bd753c081067f359cd2fb37b250f0e04203a2dec7c6c57acaf42ca3d30a661cff566fa0b59ad4b9c7519ffc163cffa8de7b11bed64c17316c72f"}, {0x5, 0x800, 0x42, &(0x7f0000000340)="cb6e3748ca9b179ac04e5107c2b60180f72b65b47e401087475279a56ea94a4775c0cc554055452603af0b153c7ce70a40e937e9429461dfa3258a3f252ce8351cbb"}, {0x0, 0x800, 0x17, &(0x7f00000003c0)="009b4a6d49493c8382eea6d08027f1f564d79a5807310c"}, {0x9, 0x400, 0xd6, &(0x7f0000000400)="6f5b8d80b9174e8a594357161b9ffb181910cc8b38869ab24877fe7e78851a069636dc48f1ff31e222db763c391fea96cc7ca16944465b931d507705a14cdb41950266adc633584cc0e93defd8a16691927cff117ef70d373beb673e75039bafd178c4e2434aa95a8a1e6c1a09769dda43b6f6acd1ea0a8e2bc9dae4783af7738751c56f2985594f7cbe297cc27148f91ce7ab8fef3df6cd4690bb586ec6de9e3e12678219a491cd79adcc07f639e5674e2a31f39d2e1547151f3b73e3c1df4e1533680d6f25d57f3a8671f6e5eef84edec64e63049f"}, {0x4, 0x0, 0xdb, &(0x7f0000000500)="44a3f0aa8eec6313f195abdd2f4389c6287ec49f440259f57c788e1d0d820ee77806afd079612fd232b9891eeab7126a65d42b415b45e989040f217646e753051fb1432179b56de772aae53c6d14635d505e988d75907c147a5b1f7ededfc63ad825b6e4ada1b3cc4b254011d77dbed88ca0ceaa0116fffb4a54bc52ec2f90866af0fbb72a2783fedaa8b950a5d70e3dc644676701443254f3e6a4701f238e1d00d68a331209808e362ef233d14bb80b715d4cfe8a3e2d5a3cd96930d684db8b4862c50594acb332d556f7aeb23cf69219642275863adfbebaf519"}, {0x4, 0x8010, 0xcc, &(0x7f0000000600)="870f58dbdf0f7902629a56d7f06d9e47e50cad1d0f292b7d27ce8611b7126d8168b4aa1346a6dfba8a6adc3d6bd6a7972bd55ba83e45698e4ce6967bfe6326c2d692ce4f6428ce4cd6d4286c450eafa1935fd3effcacfa350ae480d028af30f75792013047aaa21aefa91df2ef7ca4c1e6d7b882ada78ce11a7b1b60fc3c6b5084567837cd6be534fc2bbd6019b3e16531b7a9532d341a2187c14fa1593ea26bd7f1e747aa97377b333dc5d9cc76d92632d5bfdea574a38c58673227542f6922dd8f0aba5a9aa13fce7a6d9c"}], 0x9}) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) 16:29:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1, 0x8002) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) ioctl$RTC_EPOCH_READ(r2, 0x8004700d, &(0x7f00000000c0)) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x1200}, @increfs_done], 0x0, 0x0, 0x0}) [ 1942.641889][ T3897] binder: 3889:3897 ioctl c0306201 20000000 returned -14 16:29:06 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x12000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:06 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40047602, &(0x7f0000000000)=0x9) 16:29:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:06 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x2500}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="a221ac63ca9b426ec4432653c5a786c34098deaf5a01a73c6eeff189d8b833eb15f3f138c4c7a34efcfb17bea1056dcdd2529d097e733a4e334842188315697c809acbdb8752a631bf445172d712c7ee4aeb5ee2e2953bd7be208a2a39cea742d719c0a8f0451c471944e4ed69bdffa71dc9054c0beb949eac911fcc45d966bc9a4c96d914"}) openat$mixer(0xffffff9c, &(0x7f00000000c0), 0x400400, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000080)="1f", 0x1) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x4, 0x1000}, 0x4) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) connect$caif(0xffffffffffffffff, &(0x7f0000000440)=@util={0x25, "79a378d89b776386b0070b4472bf9373"}, 0x18) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000180)=0x2) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000140)='./file0\x00', 0x8, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000080)="1f", 0x1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000080)=0x8, &(0x7f00000002c0)=0x4) 16:29:07 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x5, &(0x7f0000000000)={0x1a, "00000000000000000000000400007512c600ebb02e436b4000"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x13000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1943.644741][ T3909] binder: 3907:3909 ioctl 50009402 0 returned -22 [ 1943.742936][ T3913] binder: 3907:3913 ioctl 50009402 0 returned -22 16:29:07 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x5c00}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:07 executing program 3: getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:07 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x25000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:07 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x4, 0x80b80) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0x2, 0x5, &(0x7f0000000000)={0x7, "fcd52485902bbd7a7894dc31e25e44381470d1043bd457091b58b85c4d3e3d2b2b"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:08 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xff00}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x70, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x2, 0x2b}, @flat=@binder={0x73622a85, 0x100, 0x2}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @exit_looper, @release={0x40046306, 0x1}, @enter_looper, @acquire, @clear_death={0x400c630f, 0x1}, @register_looper], 0xbd, 0x0, &(0x7f0000000380)="9069b725ce99d7ef49217f5b2f80d95c128a9840288fbd1c7f6b0eb0a5efc1a7ff8c9275e205b49caa25048879ce658c63997bb426ddffb6ac4b2098c1f5f1ebcb133754dc38eeb4d11291f0d6b24b64642b9782467e686c028d970bb5e3fbc78bf1c70dec8a588321c03da3c96a656e0cc6c5b6cdf45d85668db8440bc6f0448075baf4f29b9b77b573782a99f906ceb81691304d33cc2c9fcc4c9788a21be4cb0c659b7e29c9b2b020ebdf167a8c8c9da509930fae4df6918241e502"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:08 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x4c000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:08 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup2(r0, r0) [ 1945.324228][ T3943] binder: 3940:3943 ioctl c0306201 20000000 returned -14 16:29:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xfeffff}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x5c000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:09 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup2(r0, r0) r1 = syz_open_dev$audion(&(0x7f0000000000), 0x9, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x586) 16:29:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:09 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xfdfdffff, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:09 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x1000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:10 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x30, 0x0, &(0x7f0000000240)=[@free_buffer, @decrefs={0x40046307, 0x3}, @clear_death={0x400c630f, 0x2}, @release={0x40046306, 0x2}, @exit_looper], 0xad, 0x0, &(0x7f00000013c0)="b60dbb8c57130b7cda07d9f49600a1f1f7a1d910bde088c0aba4f14af4c213cf0aa262fec6b88a8ea5d061db596f09b1e3efb2147a91b528d5373a1477a2229ddaa46b9ae6def7adcbacdce5005643c14d4c6a753b48af94815691f99539406a05b954dac107c73da84ee72c7b07b7f6c06f014918611e9f3b168330c8084930a913ad0e90b99d3773382a39a2240a15cb58f97587043ca4ae4019cb83811004994154579b4b7203e9c71ed81e"}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000080)="1f", 0x1) r4 = accept4$nfc_llcp(r3, &(0x7f0000001340), &(0x7f00000002c0)=0x58, 0x80800) write(r4, &(0x7f0000000080)="1f", 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x80, 0xae01, 0xb, &(0x7f0000000000)="f691ca0212b9ee1d42d0da"}, {0x8001, 0x4000, 0x88, &(0x7f0000000040)="16713ba3f552634eda72446292170ce56d181e88167decd7d7b09e61f6f2c0ed683010eb28f4bc74f63381efb60ccbf5f2c3993364d7636a56f5f2866b9eb6e8bfa429fc68f2720309b7025ae52776205263555c2a9a60152ebffdea2f98dd55dc6311f224de588bf264604b8173c41df63442521b044dab989c68752121577d4a7f709b6f1e9386"}, {0x8001, 0x0, 0x9b, &(0x7f0000000100)="933f54f4f250fd2687efbc47a24e8c8f058df71570e209b179524a6accd325a8ce8e1ca568716599ec2ca8367a1e607ff1b2b6c67c54279b1bd04d49d92d45ae8812d5098e766a6df14bfa58498a32e2625460d8617f8004ee0327981490993ec5f524a53259106ade08460fb0e9f2906bce319b540b64eb6a98a1de9a252ef1ac9407d00985ed60cd5f7db399b903546d7fa76d0c168f6462791f"}, {0x0, 0x8200, 0x1000, &(0x7f0000000340)="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"}], 0x4}) 16:29:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}, @enter_looper], 0x10, 0x0, &(0x7f0000000040)="aa671b5b4afe602c3d141ded1ea8d7f4"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000040)=[@free_buffer={0x40086303, r3}], 0x6a, 0x0, &(0x7f0000000100)="6136181ec2cfb5cb28b993a5b345d2f85ea803c7241226f18a6923d4ecfba177de859e653e1a512fc32f99a2a87a9e74faac8338ddeb499f8ec19fa5ae732282332a94f56bb99cbef8cb0c705b135184f05250360b224b884e0f9e9a76c2a6cef1d0f189032a2a8df77b"}) 16:29:10 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xff000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x2000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1947.042317][ T3977] binder: 3975:3977 ioctl c0306201 200000c0 returned -11 [ 1947.140571][ T3984] binder: BINDER_SET_CONTEXT_MGR already set [ 1947.146897][ T3984] binder: 3975:3984 ioctl 40046207 0 returned -16 16:29:10 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x3, 0x30040) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0xe6, 0x0, &(0x7f0000000200)="b06c45ddef920000f494d3c6ab9b22c2ee20742f8c0b0dc20f2a94af8cd1380081578124bdabd5d822a1409f95567c58a620e58ea05181df26fed4eb954b5109c773e97f5c4aed8499ba8ddb87cd45fc5b24a22d728840d956d1b0531a46e72bb5f6995c01fceeefa0db914d75c739c47f0d15d82416727ee2d2440bf14f8074ad35864520ac120242331c0f733104d11d2739b64b7f354e4b64f8c7e65dce37e0984c60d9a5b9bdd5492b89d48e668d11f596253f686a64cde675b183526b6f3f716d766d8d6a95ceba85ba15cec16548ca3d52c68b14304e32ffb8012730a326c5c775ec8e"}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000040), 0x9fe0, 0x10000) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000300)={{r2}, 0x0, 0x12, @unused=[0x2, 0xa759, 0x6, 0x9], @subvolid=0x7fff}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x6c, 0x0, &(0x7f0000001300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@flat=@handle={0x73682a85, 0x1, 0x1}, @fda={0x66646185, 0x5, 0x1, 0x1c}, @fda={0x66646185, 0x4, 0x0, 0x12}}, &(0x7f0000000180)={0x0, 0x18, 0x34}}, 0x1000}, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x3}], 0xf6, 0x0, &(0x7f0000001380)="817ff23780e529c6a40692977d8ef05f45d4132540cabaa55ceb5696682d3acf5ac9d576acc39102a60a8cb00fb26810e557d5d0e1b954232b6778d69c06a318fb51a83202057762376135d1aee9f2f10709c77b4e9386add308aef968d0feb8311bf71360ab222f23fbee1d8a0c2648afc43c662fd9e764fba4bb4a40f6153455f29bf600ea743fd383317ecb6092dbb87bc70996deddfddd9f79f4a3268b0bc8ef46eff6d4ee11631e70377a47c8e4fdb633f6fe0a6ced7f084d37a5276145a680685024ea4465ccf67a1020ed318d2c08cd4c7086aaf169ede20238ff1162602e33946a5028cff6aaaea35bd742a6d38ed224e408"}) 16:29:11 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x3000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:11 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xfffffdfd, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1947.974898][ T3999] binder: 3997:3999 unknown command 0 [ 1947.980413][ T3999] binder: 3997:3999 ioctl c0306201 200000c0 returned -22 [ 1948.051489][ T4000] binder: 3997:4000 unknown command 0 [ 1948.057124][ T4000] binder: 3997:4000 ioctl c0306201 200000c0 returned -22 16:29:11 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$DRM_IOCTL_RM_MAP(r1, 0x4018641b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) 16:29:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000001340), 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x2}, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000014c0)={0x4, 0x0, &(0x7f0000001380)=[@exit_looper], 0xd1, 0x0, &(0x7f00000013c0)="43b96ae5182c566bae40fca6b85af019633601ddbb504e00cbeffe0f66374afcdbe480da5d9bb8cfb6c247ff7b5c280ca668f5d111a0747fe09146b9c347155a344a9a4f13005c1fd56a5df2536fc36f30cc4bb785493ad051320782d3246b7e36a1645b66da3f3dd9934fef3a90cd0aba0eec67b4414f13c71f4997ef050744f360f7620a265c217bd3e977beb2c5ae9f9d43cab513c9a302265938752b41669b01977dc06bc7332e01f4b682cd02edca03ecb0b8878494e889a1112dc0bdbf3567736a4b34d69049a58756c10d19e004"}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000001200)=[@release, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x8, 0x1, 0x19}, @fda={0x66646185, 0x5, 0x2, 0x20}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/4096, 0x1000, 0x1, 0x25}}, &(0x7f0000000080)={0x0, 0x1c, 0x38}}}, @enter_looper], 0x8f, 0x0, &(0x7f0000001280)="7af015bb26ede0b336cf051dd1b6273e68194b537c9061da6996f09e81810944935285f88181c50ffef857e5896cfabab698726f7d5a9122848568e9f2bb3631fc8511a63ef218648bca0f149098b3b9cc40cbdeaa563647ab90e8b5ed0ea54927ebce0ea68c5fa170d5d0994534d181aa9e5ad1cafa1b22c55a9afaad4e7f1f4e6c9cc5794dd2fb2c8d04eb85607a"}) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000040)={0x2, 0xe59}) 16:29:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xfffffe00, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x4000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:12 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x202, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc01cf509, &(0x7f00000000c0)={r1, 0x3, 0x2, 0x1}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/resume_offset', 0x80000, 0x60) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) 16:29:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xffffffffffffffba, 0x0, &(0x7f0000000000)=[@exit_looper], 0x0, 0x0, 0x0}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) dup2(r2, r3) dup2(r0, r1) 16:29:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x1000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x5000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:13 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) r3 = getpid() write$FUSE_LK(r2, &(0x7f0000000500)={0x28, 0x0, 0x0, {{0x4, 0x101, 0x0, r3}}}, 0x28) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000480)={&(0x7f0000000440)=[{0x3, 0x4401, 0xc5, &(0x7f0000000100)="2978c7b3b4d37015ebb3f494d50455e987860b7dbc6c10a9a345958713d20a63aaf4a03f51d689c306dc3b55e56901f5114c9e589b5356d9d3042b2d6acc3bb09a5ce26b31c20bad9a5667cb999672b3f4331005fe994f077cfea149f0b62e1f701a9c87a4ff146a175fd8f66e56d5a0151c32126a556e06d5212dbd42188bcbf54a80d9434ac29eb864af8a1e6eed08afd3dcad3d92d47f46045403aa8af71caa942e61f9ad146255ce4cee3279deecde9fdef1b8922c0a5515afd1d86e967ae841cb4ae6"}, {0x1, 0x800, 0x41, &(0x7f0000000200)="895015fbd5d4e0888cc77f58b8ebafe9be3cad56c8dda864b450272a161bfdcbc1dcc36e2672a779218724b4095be6bc8d31960349738653b0764dd5dbcdc9d78f"}, {0x8, 0x1, 0x5e, &(0x7f0000000280)="9ae6527a39eb7215cd37eb317a6815b2d3fe7361287282ecb6e123cd5d76ba4e3e5910a3a36c2bbd06f33358f9f2426cf4102ee212755fcb6300a32d559dbbad54674d54c713740637069827386288a087aba468fd7d995cc5e79c824565"}, {0x9, 0x400, 0x16, &(0x7f0000000340)="e03f5cf9b8092b6c67defca8fc61fe4f9916d408d233"}, {0xdfb6, 0xac00, 0xb4, &(0x7f0000000380)="1ee8bf1c9e0abe99e266b06455f134524d35873399a9ef5eb80c0375ad2ab9921d0ee38ec6b721e9425af07d6a4e38fe8befdfe8c118f137d3f42ae8d9dd65154aec9123c7d9976e59cd2f8f452a0a73030c2abc938353bc8d54f0cc696108b86e01b6eb0393149dbbf57c347b5150e6dabcf382e05f4b91e685b78349727482e0b63545afaf59563f25ba8120f51d2727de1d18f66db76ce5bbc3e2b5838b4a7e57947931ab8743335fe40ac0d8bc184bcc8dab"}], 0x5}) ioctl$TIOCSCTTY(r1, 0x540e, 0x3) close(r0) ioctl$BLKGETSIZE64(r0, 0x80041272, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x14fd}, 0x4) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f00000004c0)) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000008c0)={&(0x7f0000000840)=[{0x82, 0x10, 0x1f, &(0x7f0000000540)="85e10bdc46771ee7e0e5b2a3d7090e0b4819ed02179d244760814551a639ce"}, {0x6, 0x2000, 0xe5, &(0x7f0000000580)="5804085d73b88a5516415f028dc4ea2b79bd9631867f76a5f4ef0460ecb925e6e89ac61a9800a64322cf32072648f94a9c89ccbf90b4f955002dfba065d1a2df1ec1ccf018404627e67e4bfbf5347d0fb672385dd2bb329d0c973ef5ea4de6bcb84daebdf52cad8376ada24d35b107d434b4245a3eeedd92428956e19d49bfae5ea3b5dab2412d00d2de775b30250bfc0ead4ea095e11d9a2adc34fcc45644f193425b37c4acfefb579ee585237670a478f75e248c2c338bb6da2450681deaf695fb64fd5ca8b8daa8aebe14bf7c5f6985fa39c88fe3788cd2040896eef873087f83b59f4b"}, {0x9, 0xc000, 0x3c, &(0x7f0000000680)="8cd55f18f7e6419dda5224d83e6d84380c34d15bd457a374bd181daf74236b635308b352cc777eea74862fac19bdd4d0af26aaba42c384a53c0a2e10"}, {0x4, 0x1200, 0x0, &(0x7f00000006c0)}, {0x7f, 0x2010, 0x5e, &(0x7f0000000700)="c97a29036d1d3546e4a413fbd53bd1ccc804537c40b5c05c6fb812acded295c00a79b0100db1d195f61f4e7229b60c529871098c2ee9f7dce5ad09247b1e585c6afd2aa05cf90694cdc380610ef829f4a136a595079c003735003f3dbe3d"}, {0x7fff, 0x610, 0xab, &(0x7f0000000780)="8a120b8567d1c25d9829b3f05d653c65dfd6c5be8457e7f8190dc04ed80f638aa2f473c70ca937da512e890741dbd1ed779f8879bf7be8052910e6ab0f77ad0b0b00a92e8491870c06abdb020b3186d0f30af9683b886035f3b88f0c5d5d1acd92b185241b12ad4ded2f95da477dd0e23d0a5cfb303225927df2b0533925e1719706d82dbcf6ef881b5ec3b54718d801e60d9ccbab29a1d7bf31bfade6632a67e2285405cf0cff3c13a218"}], 0x6}) 16:29:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000340), 0x0, 0x800) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xeda4) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x5c, 0x0, &(0x7f0000000200)=[@acquire, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1101, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/37, 0x25, 0x0, 0x34}}, &(0x7f0000000080)={0x0, 0x18, 0x30}}}, @decrefs, @decrefs={0x40046307, 0x3}], 0x81, 0x0, &(0x7f0000000280)="12f62a1aa06ea1b86b9f82886c68f19c831b63f24af2e53f612d39887127b7fd09792fd4fea563033b2e9ae8bf9932b9da5045fea0cc4a2367a94fc46b0c54980b447d4ee51ef403cd685df70649db0c1770a8e296b0cdaa368e05748a1baa7d506e762515362703cd78a2ada154349c74e9a09440510c4eb67d895889151e1809"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:29:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xfeffff00000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x6000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:14 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$I2C_TENBIT(r1, 0x704, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) dup2(r0, r0) 16:29:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20ncci(0xffffff9c, &(0x7f0000000040), 0x202100, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4) 16:29:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x7000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x100000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:14 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000000), 0x7, 0x80080) r2 = socket$pppl2tp(0x18, 0x1, 0x1) dup2(r2, r0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x8, &(0x7f0000000040)={0x2, "28fac628553e0494cb94e1589d96ecc24d9d32342850ef06b4ce5a9b7c8626b4d2"}}) 16:29:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:29:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x8000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x200000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:15 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0xfffffffe, 0x98341) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_dev$binderN(&(0x7f0000000000), 0x0, 0x800) 16:29:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x800) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:29:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x300000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x9000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:16 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, 0x0, 0x0) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000140)=0x1000, 0x4) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000000)=0x8, 0x4) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r5, 0x116, 0x7f, 0x0, 0x0) connect$caif(r5, &(0x7f0000000080)=@dgm={0x25, 0x57ac}, 0x18) splice(r2, 0x0, r1, 0x0, 0x400, 0x0) recvmsg(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@isdn, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)=""/69, 0x45}, {&(0x7f0000000340)=""/221, 0xffffffffffffff99}, {&(0x7f00000004c0)=""/167, 0xa7}], 0x3, &(0x7f0000000200)=""/92, 0x5c}, 0x40000140) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x400000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:16 executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000080)="1f", 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000100)="d11ee7edbc4dbc95dc42804ec66e0aa8d2d34cfcb2283801d7843848b2a19df84247d791afa9dd43fc6910c552cbba6b9fd18d97e4a222e1ad7c5a93b4005866da41b237ad40eca8e50741abf8d8e303370e3fde566764657dd6da59fa78a5be8b915780917d58ee67d68fdbedb59388713a25f20da3f70be3ffd21251ce704c5199fc43d163815415ce89df839a66cd1a092449fc0f9e013656cb2bff924a19", 0xa0}) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:29:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xa000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:17 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000001340)={&(0x7f00000002c0)=[{0x4, 0x0, 0xbd, &(0x7f0000000140)="b898d22cae74744f20c0ba2ef959a6601c33f8cae628a78f80d9db6353d6c32af900469b8ad4d29d6709d8968a1f11d3d3060c1b8c369468cb522943449ff3393defe281713d6e588e9f318bdd4d0a4160898f367adf05b82aef44192cf3830522c998377528bb089c6120801fc1908c518e89955e276cf67bb51a6a3e0b09392133cbbe6a0dd19995bd374de70f2cdc4988aaf349d327bd99c10bf9d7d8f129b6d72c326c32309cc57ed3e62196cfb653b43799d233ee9ec6c3b6a94a"}, {0x1000, 0x0, 0x1000, &(0x7f0000000340)="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"}, {0x0, 0x0, 0x83, &(0x7f0000000200)="d41fe8b6e59b4c2f934a2dfaeb218a4366819e913110da1d8ea671dea7fef445af27e569cf7cb06dbdbfa613c00ac2757bd8a6ea45f6f0ac5252133295842ca4e9ced52a7e46f92368120e19cd96d88772485ea14fc45ef8617a244fd680281ae0a5f466836d979ed08a4d674bd8da3e45df97e70f4079f509bd07182c13722d9881e4"}], 0x3}) r3 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0xa2600, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x4, 0x4, &(0x7f00000000c0)={0x14, "769417be9a2ebb0c435d95b61d151b24e6923c69227b7a1158b7c36514d76a2256"}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r1, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f0000000000)) socket(0xa, 0x5, 0xffff) 16:29:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x500000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xb000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:17 executing program 0: r0 = openat$btrfs_control(0xffffff9c, &(0x7f0000000100), 0x240000, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000080)={0x2b, 0x37, 0x1, {0x2, 0x6, 0x7, 0xffffffffffffffff, 0xd, '/dev/binder#\x00'}}, 0x2b) r1 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x5c, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/148, 0x94, 0x1, 0x6}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000040)={0x0, 0x28, 0x40}}, 0x40}], 0x6e, 0x0, &(0x7f0000000340)="cb0f1e745940d35ac6616ebb145ce269adb7299138f007c70b4b9574bc17c7988bc593b9bd4f009bd660c17547833dc3db33132e08159431d66eb5505ac44062d3362b38193038b41eb93834e661bcf2899c51de9179761465eb193ecc81bba50b6fe8790ec7e7bff7fe4b2072ec"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) 16:29:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:18 executing program 2: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x9, 0xd2], 0x2, 0x80000}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000001bd00)=ANY=[@ANYBLOB="3400000024000b0f00"/20, @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x1, 0xfff, 0x16, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8, 0x8db, 0xd0}}) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f000001bd00)=ANY=[@ANYBLOB="3400000024000b0f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000b0001"], 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) r6 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) 16:29:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x600000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xc000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1954.670355][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1954.740599][ T4143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:29:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}, @enter_looper], 0x10, 0x0, &(0x7f0000000040)="aa671b5b4afe602c3d141ded1ea8d7f4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03b708407249b3c5dfe980fc3558a827277ca4c7c2f59d797905d1faa7cf07c84b46e6fe6500002e258e9357b6b951aa679725aaa7473a21b7a5ee4198143fdc518d0ce76482ce6f646a4cb64ac863cfa7e1", @ANYRES64=r3], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1954.909696][ T4143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1954.926519][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 16:29:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1955.251964][ T4156] binder: 4154:4156 ioctl c0306201 200000c0 returned -11 [ 1955.296381][ T4156] binder: 4154:4156 unknown command 1074312963 [ 1955.302911][ T4156] binder: 4154:4156 ioctl c0306201 20000340 returned -22 16:29:19 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 16:29:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x700000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1955.364765][ T4157] binder: 4154:4157 ioctl c0306201 20000000 returned -14 [ 1955.423956][ T4157] binder: 4154:4157 ioctl c0306201 20000000 returned -14 [ 1955.423973][ T4156] binder: 4154:4156 unknown command 1074312963 [ 1955.431210][ T4156] binder: 4154:4156 ioctl c0306201 20000340 returned -22 16:29:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xd000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/44, 0x2c}, {&(0x7f00000000c0)=""/156, 0x9c}, {&(0x7f0000000280)=""/68, 0x44}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000000380)=""/78, 0x4e}, {&(0x7f0000000400)=""/156, 0x9c}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/200, 0xc8}], 0x8, 0x200, 0x7) 16:29:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:19 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) r1 = openat$procfs(0xffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x5, 0x2, &(0x7f0000000100)={0x3, "d76bab032aec96aa0fa58bc031a9ac094542723bb5b48b4e8a33c9f739b5bb9f1a"}}) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x0, 0x7a, 0x7, &(0x7f0000000040)={0x18, "7177c0b678d4910c9dbbb2219da754b1850dfd47b0414fb4c475bb3e2c0e5dad54"}}) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000000)=0x71) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x800000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xe000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1956.446264][ T4172] binder: 4168:4172 ioctl c0306201 20000000 returned -14 16:29:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x7f, 0x6, &(0x7f0000000500)=[{&(0x7f0000000180), 0x0, 0x400}, {&(0x7f0000000280)="01451e762261a4008dc42e8a16ae0e6479230b68005befb7a42c7bcbafca9b5c75a59cdc8d1e56439c136b7e8108c17af7980ab9398d6201140e81769c0651b924c41c8e2fc3a9a3a035198a5ed96ea00bb8d95e8811442139b71baa5490d0b65a63bcedf153a68c70d541fdd12a531718aea10026658d602ae801c6f5b48bfa221892cc301f0aee857d8981c985a3ae2d4f03223e8bccb16283e1b88fb8dede879be32a5d22f2fefe162aafa3", 0xad, 0x2}, {&(0x7f0000000380), 0x0, 0x7}, {&(0x7f00000003c0)="ef8c5055e3dd3c4a9c0484c697ffa283cd8f8090140f5f2a317c2dd1f47732a2d8ce9539a944ed69d7d4448eb50fa3c7d422183977a4196013f5b5900650783cfee31b590fe845ab81b1fa1182b05da58f3384f8ea04074081e1d589b7a1c817ed1adcb025f5017df75ea3995be1694d66c0ffdc7e3a8b4b3e080ed8daea5ef8", 0x80, 0xada0}, {&(0x7f0000000440)="fb507ee53443cade4fd715304f3dd7afafef34eff41f2cbee883897cb4760b2ce8c201088e6778588e", 0x29, 0x3f}, {&(0x7f0000000480)="66068acbd02e196d47fc8a2f22fa100d7a8da0c5cea2435f612b6599caed2a71f005d7e7fe67fb0063686539530bbf9486d959569234098df2ca026b1c81067f853aa60a1a2579dcc297d058e882c46ec7a3dd068985c505385ad923141fbb9ea2fd7160fc6b129cbc42ed82", 0x6c, 0x7ff}], 0x20a004, &(0x7f0000000580)={[{@dmode={'dmode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x6}}, {@check_relaxed}, {}, {@utf8}, {@hide}], [{@uid_eq}, {@permit_directio}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000640)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x1ff, 0x450800) close(r4) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0xfe7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x900000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:20 executing program 2: r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x11d500) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x181) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x9, 0x5, &(0x7f0000000040)={0x3, "798e5013d699929109c929700787703198ff305220839b8cf6f6867ac90878492d"}}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x0) 16:29:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x10000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1957.278406][ T4193] loop3: detected capacity change from 0 to 173 16:29:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:21 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x5c9, 0x602102) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x802) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, 0x0, 0x0) r2 = openat$ptmx(0xffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000ac0)={0x1fc, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x1, 0x0, 0x1}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000180)={0x0, 0x1c, 0x34}}, 0x400}, @request_death={0x400c630e, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0)=""/59, 0x3b, 0x2, 0x2e}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x1101, 0x3}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x2, 0x1, 0x15}}, &(0x7f0000000400)={0x0, 0x18, 0x30}}}, @acquire, @dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fda={0x66646185, 0x0, 0x1, 0x24}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000004c0)={0x0, 0x1c, 0x34}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000540)={@ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/36, 0x24, 0x1, 0x11}, @fda={0x66646185, 0x0, 0x2, 0x10}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f00000005c0)={0x0, 0x28, 0x44}}}, @clear_death, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/249, 0xf9, 0x2, 0x1b}, @fda={0x66646185, 0x2, 0x2, 0x2a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000780)={0x0, 0x28, 0x44}}, 0x400}], 0xcc, 0x0, &(0x7f00000009c0)="3324a1b07f1252927cdb4107a0575a83f9b9341161a0e964746520cc9457783853733671c60bd8d14ef0efbe82957af46cc33681b2f828f5952d69520212b7182995516bea61ea7678aca79c147f601fbe69e03b0e194ebe8b58a13f7e768e75cb37446c70ec58bb0f8238b569c13c921203196b894b6cf13e2a926ab8fe3604563489698c1387abca5f954e7e0aa1b1b339177826235003f361e97bc88e44a8da6b7e6bc75a2021ec66e46f8ebaba936e9961144e8a8b9727b66b9408e4026a110a7d08ac9bf550c88453e4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4ffe0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000700)=0x4) 16:29:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xa00000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x11000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:22 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1958.498930][ T4220] binder: 4212:4220 ioctl c0306201 20000000 returned -14 16:29:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000380)=[@register_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/190, 0xbe, 0x1, 0x15}, @fda={0x66646185, 0x6, 0x1, 0x27}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x28, 0x44}}, 0x40}], 0xa2, 0x0, &(0x7f0000000400)="c4d80a914869ba90f8389f0de785d7a0d9eedd5921e54a982ecfb40366058fe2253d6a004e31c5dd6be05a3406f81ddd2264bdb9825cb9879d8c190d6ef1ea505be1f7682f6d929c4f59b76b5d25c2839f59e8dd8b3d78c2479c41e0233da4e96ea36089d3c955d7071256783ba9ac6c313674808e6bf0b054ec7e8baa523ce90b173a02d30f8ac7541f16ea4fb559925f1edf39d2202982e3f839997e931a359cff"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xb00000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x12000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:23 executing program 2: setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'security.', '/dev/i2c-#\x00'}, &(0x7f00000001c0)='$-\xde}#\xa6&\x00', 0x8, 0x2) r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x3, 0x3, 0x101, 0x0, 0x0, {0x1f, 0x0, 0xa}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xaaa8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xdd7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 16:29:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xc00000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x80000001}) 16:29:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x25000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x2500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1959.985878][ T4254] binder: 4249:4254 ioctl c0306201 20000000 returned -14 16:29:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xd00000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:23 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000406050000000000000000000c00000a050001000700000005000100070000000900020073797a32000000000900020073797a3000000000000900020073797a320000000005000100070000000500010007000000"], 0x60}}, 0x8004) r1 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 16:29:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x100, 0x80000) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000100)) 16:29:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x5c000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:24 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x183082) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xe00000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x207576f611ea9304, 0x0, 0x3}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xfdfdffff}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:25 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x401, 0x66, 0x4}, 0x18) ioctl$I2C_TENBIT(r0, 0x704, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) fchown(r4, 0xee00, 0x0) fcntl$setlease(r4, 0x400, 0x2) fchown(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="84010020190010002cbd7000fddbdf251d010100150002000300004008030000baf1e39609aafb680400000008000e00", @ANYRES32, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000000) close(r3) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) [ 1961.670836][ T4283] binder: 4279:4283 ioctl c0306201 20000000 returned -14 16:29:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x1000000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000040)={0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:25 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xff000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:26 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = dup3(r0, r0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000003c0)={&(0x7f0000000340)=[{0xdc, 0x200, 0xa, &(0x7f0000000000)="41f9e4b784a7fef04711"}, {0x6, 0x0, 0x78, &(0x7f0000000040)="2c836e111bd6b513103406d816a232413bfac9eb554e1ff2c79879205ff356309e3a0cdacef89ab5c8373470ab606ce75bd21a528d381d32abcd9c410b5293d9c8e932e5ec177a38d756d45b85e05e4f6d097c1b3d98b85f0f4a0dfffc4541b7233a22806341b555db4a173b48216c34541a0c325500a4ec"}, {0x0, 0x400, 0x84, &(0x7f00000000c0)="9c603cf26830df6e303d956ce4f36975bfc1a37f84c2393e713de94ffcf2ea2c947d0de5a1740e74b29bc1c4be889bb462faa0e4469daddbf46ac7d88f11488f3bf5d97432ad9dca136fbc7d6835337e6c0b6b52f1b6879254b6384f4955a868d2de2e802c46dde3df226e45cde5edbe359a92ec503ef80c39b7b494f725536dc588749b"}, {0x81, 0x1010, 0x3d, &(0x7f0000000180)="e826ba1466bfe997f09272e8485f27e3e941e1578e70b3f376e10b6f3406ff5ca57ab580bbd89a75ae381079eb8dc92edcfd39d223cc56b8db0220784e"}, {0x8, 0x1400, 0x68, &(0x7f00000001c0)="08950c0ca88b2e16f26b74f672da7d933421f90524fce6542d615c09d78c47c5226cfe589d0b8e59bed3bc645c40a8418f2856b8a9030ded918a702e50a0c1eb1dd777275db6496044b5dac7897b1fc23c20b6ec844896c0bb3e063311f65153b36a7e9089d5c561"}, {0x7, 0x4801, 0xbf, &(0x7f0000000240)="bf1c1df7aaeda2d143bc68e6049eb3b4aaa7fadd2a450c7fdab2a57bf5705593aa2d7e7c62b4e0063a34767f0f1fb56a112c0fd1de515800db9078a916374a923fc64ace04fb04c22d48fe6803b44bb5dc8ca38ea45f179d2c379776bd00d9dd1140558a323928bac8e186676eeace7dc230776575655691de728f901530ac54c0c3f685d3c3d74313fd8e4776bc3d36896889623c46c53bf1c1630eac3b11b203df8165ec7fce01a7ba997a3b835ae3062ebf913265f4c03fabea379d3496"}], 0x6}) 16:29:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x1100000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1962.391596][ T4297] binder: 4295:4297 ioctl c018620c 20000040 returned -1 [ 1962.455875][ T4297] binder: 4295:4297 ioctl c0306201 20000000 returned -14 [ 1962.492352][ T4297] binder: 4295:4297 ioctl c018620c 20000040 returned -1 16:29:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) r1 = syz_mount_image$ntfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x3, 0x3, &(0x7f0000000300)=[{&(0x7f0000000100)="0c57195579bc09301a0e50ba0d78ebeaf426b138b73799fe603561dc8a349fcad6087e7e0e565cde56b839a1a4340fe6f7dcb7301e4b4286acd1d7711192166ee36b124f64ac29f6f486d53e5a1806e4baeeb2936518dc8244c95992ad49a399b055ee9f389a8c74984d1c3fecec510b21849f588258f719083f968336cc0e1235d469b2d155ea29f4eecd", 0x8b, 0x5}, {&(0x7f0000000200)="65fe15b2dc8f3f1a7e868632b619e074d33cebe9d47485a6a5e4b9924a5f27d347f4049f30df176602fc0766a7f471ee2e095659bc3c6ca72829482a1b05ac11262212ccae78042e405c9da0e775862f8fa68f0fc4899efc4850801acca64fecf4adfe647c21a9471ed36dd48e8a28d5628ab781a5fe83877b8655d64241ffb6ef231206850b7d6d", 0x88, 0x5}, {&(0x7f00000002c0)="e5eac532a040eb893c9b4756b044be856b4c98fcd0f141587f39", 0x1a, 0x10000}], 0x80001, &(0x7f0000000340)={[{@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x3}}, {@errors_recover}, {@gid={'gid', 0x3d, 0xee01}}, {@nls={'nls', 0x3d, 'cp1250'}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/binder#\x00'}}, {@obj_role={'obj_role', 0x3d, '(!'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x62, 0x36, 0x39, 0x63, 0x63, 0x65, 0x33], 0x2d, [0x39, 0x32, 0x4, 0x65], 0x2d, [0x61, 0x35, 0x33, 0x39], 0x2d, [0x35, 0x30, 0x3, 0x61], 0x2d, [0x38, 0x33, 0x35, 0x34, 0x34, 0x31, 0x38, 0x30]}}}, {@uid_gt}]}) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r3}, @enter_looper], 0x10, 0x0, &(0x7f0000000040)="aa671b5b4afe602c3d141ded1ea8d7f4"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000740)={0xbc, 0x0, &(0x7f0000000680)=[@enter_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}, 0x40}, @increfs={0x40046304, 0x1}, @increfs, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/159, 0x9f, 0x2, 0xc}, @flat=@binder={0x73622a85, 0xa}, @fda={0x66646185, 0x2, 0x1, 0x2a}}, &(0x7f0000000640)={0x0, 0x28, 0x40}}, 0x40}, @exit_looper, @free_buffer={0x40086303, r3}], 0x0, 0x0, 0xffffffffffffffff}) 16:29:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xfffffdfd}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x2, 0x28640) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/module/pata_amd', 0x301100, 0x100) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x17, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) [ 1962.804506][ T4304] loop0: detected capacity change from 0 to 256 [ 1962.881565][ T4304] binder: 4303:4304 ioctl c0306201 200000c0 returned -11 16:29:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1962.966598][ T4313] loop0: detected capacity change from 0 to 256 16:29:26 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xffffffff) 16:29:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x1200000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) [ 1963.296536][ T4321] binder: 4318:4321 ioctl c0306201 20000000 returned -14 16:29:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$nvram(0xffffff9c, &(0x7f0000000040), 0x82, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xd8, 0x0, &(0x7f00000003c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x8, 0x1, 0xd}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0xa}}, &(0x7f00000002c0)={0x0, 0x1c, 0x34}}}, @acquire={0x40046305, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x6, 0x1, 0x24a}, @flat=@binder={0x73622a85, 0x101, 0x2}}, &(0x7f0000000380)={0x0, 0x18, 0x34}}}, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x2}, @increfs_done={0x40106308, 0x3}, @acquire_done={0x40106309, 0x2}], 0xf8, 0x0, &(0x7f00000004c0)="b2797ce1e177b8c424208536f3f341849bc2b01896aef0617a3b5926984d6b4f525bf09436abeba1524eb26aa5de999726213936d232a62bbf2c548dc03591643d33de17b63d7457b8eba2dc19f4215345f7e1a8e6cd7f77737f1219bb4a908e8ad8c3634bf51517a4916493e1523c8e95cf589d5a2e9994ae78011dce4e0cb81956cd2818075c491dacefdd21eb5ceeffab8d5d62a901c64498612b80b081df316d77e7808c486aee76ecbcde768bfc9274b2ca015cfb2200e5b8e72d2e3ba7e9393c4ca05dd1230677e95a4c174fff36d664e43b5bb3c3024ca421172bf6b83d89f611cce5f5be3d8c1edf65ff9328fa82a4bc4a5adc37"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x18, 0x0, &(0x7f0000000080)=[@register_looper, @acquire={0x40046305, 0x1}, @exit_looper, @decrefs={0x40046307, 0x2}], 0x95, 0x0, &(0x7f0000000100)="b6178dee0ff1174be639739b769508612961d1009eb762f35c8cc9aa381104a6cfb9fa184fd526cdec2fdd2c5a6c659ad20454a5297210bd9520048cc6f2a98446db55fe2b9dde9a58cbcc77c0dfd015661f93aa0ffc28e72e226fc16bff220af166abde6be16a206e9b3a09d8b4ac67eaf977b9e2b134134ab0183bb84aa6fe340ce5ead3238bbcf1854fa353be839109fbb447e9"}) [ 1963.402028][ T4325] binder: 4318:4325 ioctl c0306201 20000000 returned -14 16:29:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:27 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xfffffe00}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:27 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000140), 0xaa8, 0x90080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_dev$binderN(&(0x7f00000000c0), 0x0, 0x802) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000080)="1f", 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000200)={r5, 0x0, r2, 0xce4}) r6 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r6, 0x116, 0x7f, 0x0, 0x0) splice(r2, &(0x7f0000000240)=0x1f, r6, &(0x7f0000000280)=0x5, 0x20, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000100)={0x200, 0x66d78034, 0x9, 0x7fff, 0xf832}) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000040)={0x0, 0x7f, 0x4, &(0x7f0000000000)={0x15, "ba5e1b313c6414d8a8cf0503c57c2eb218d84ed35d36d0770e661d62c826e40006"}}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x4ffe0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000002c0)={0x20000000}) 16:29:27 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x22, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x6}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1000000}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x800) r2 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) 16:29:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x1300000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:27 executing program 0: ftruncate(0xffffffffffffffff, 0x6) r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x40046304}], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r1, 0xc0045103, &(0x7f0000000080)) [ 1964.258283][ T4342] binder: 4337:4342 ioctl c0306201 20000000 returned -14 16:29:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x1000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:28 executing program 2: r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x6ca600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) splice(r1, &(0x7f0000000000), r3, &(0x7f0000000100)=0x2, 0x62, 0x1) ioctl$I2C_PEC(r2, 0x708, 0xad3) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x4ffe0, 0x0) openat(r4, &(0x7f0000000140)='./file0\x00', 0x200, 0x20) splice(r3, &(0x7f00000001c0)=0x100000000, 0xffffffffffffffff, &(0x7f0000000200)=0x3, 0x7f, 0x2) pipe(&(0x7f0000000040)) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) ioctl$I2C_PEC(r1, 0x708, 0xd45) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r7 = syz_open_dev$media(&(0x7f0000000180), 0x2, 0x880) fchdir(r7) 16:29:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) r3 = openat$urandom(0xffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000008c0)={0xa0, 0x0, &(0x7f0000000700)=[@register_looper, @enter_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@fda={0x66646185, 0x7, 0x2, 0x8}, @flat=@weak_handle={0x77682a85, 0x101}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000500)={0x0, 0x1c, 0x34}}}, @increfs={0x40046304, 0x3}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000640)={@fda={0x66646185, 0x7, 0x0, 0x2d}, @ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/163, 0xa3, 0x0, 0x27}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/58, 0x3a, 0x1, 0x5}}, &(0x7f00000006c0)={0x0, 0x1c, 0x44}}}, @decrefs={0x40046307, 0x1}], 0xdd, 0x0, &(0x7f00000007c0)="a26b500deac56f22eef66da88031b5ad066bdf39b7e38faa7486d9190a200b55279890ce43179ea1fd155b54f683b5ad05436d9b33aabb0c4a3d27804be585cdae385f41cbd4af849bdd5bad5cbdf773efa55ec99276e2701f8dc23a278642f4c4a386745d44b3ff84b37c328a83e53dd584aadb69c1775e1d3dfa641fd2971129b7580e689da4edda31cf9bd74f37a7d1d03c153bccc6ac173274beab889b1bdd768e4ffe6fad636c5e29f09a6bf34d54b9e7e570e2bc4fb2468796a8f58e11449f5dd6647fc2a0b93f0af4433bf020df0895326718611945a387eead"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) syz_open_dev$binderN(&(0x7f00000002c0), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000080)="1f", 0x1) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000280)={0x70, 0x0, &(0x7f0000000140)=[@acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x3}, @enter_looper, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x6, 0x1, 0x3b}, @fda={0x66646185, 0x1, 0x0, 0x2a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000040)={0x0, 0x1c, 0x38}}}], 0xf1, 0x0, &(0x7f0000000380)="928a5b0b002959a34189d2dc5e7b5f491b190d00202841317430a781c01296e809c0c6f9f1a39efdbd79e8f262e219dc41506e790ec6084344b47765987a9f9258c9ad9d364fcfc75df1e00f5509bcdadfab0d792f13f1f7021c0c1850fee54b4263980fd0f1e22f79f1c32263933a280eb81df77a6f71d871bc61d4e74c74ca36101604a0ac047e0546441cec156078572c42cfed68d1afe9da4f314772a97d4688d0f972e63706ad3cdda9c049d841373e8249aa4c222fc1c1152d5ca5ed162972b73c3e794ff7290f57e10fb125fdc977044bff97f4b11ca7f7251c386d64afe9524c21dbb23a1a7c24d7923c0ef1b2"}) 16:29:28 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x2500000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xfeffff00000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1965.306270][ T4360] binder: 4356:4360 ioctl c0306201 20000000 returned -14 16:29:29 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000080)="1f", 0x1) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x28, r1, 0x313, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x800) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xec, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x22e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x41}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40000000}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x800, 0x20c840) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) 16:29:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x4c00000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x30, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000080)="a221ac63"}) syz_open_dev$binderN(&(0x7f0000000040), 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x4ffe0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 16:29:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1966.062181][ T4374] binder: 4371:4374 ioctl c0306201 20000000 returned -14 16:29:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x100000000000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1966.146965][ T4375] binder: 4371:4375 ioctl c0306201 20000000 returned -14 16:29:29 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f0000000000)) 16:29:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x5c00000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:30 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x2e41) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x200000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xfdfdffff00000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x300000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:31 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) 16:29:31 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0xff00000000000000, &(0x7f0000000540)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x400000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:32 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, 0x0, 0x0) r4 = openat$misdntimer(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) write(r4, &(0x7f0000000540)="1f", 0x1) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000580)=0x32) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000500)={&(0x7f0000000480)=[{0x0, 0x1, 0x60, &(0x7f0000000000)="7ffb2046292f2861b318b74803433668534488de16a2326f521ec61c2cff15b9b4e2745af82c912b2c02d5c0ac94726ee419fda2493b7334c1437e84ab69d9b2ed7cbe4e6a56cbd0bb7e161dd091b90f6c86b90e3a29897b8a5ec7fbb146c283"}, {0x800, 0x800, 0xe, &(0x7f0000000080)="99d5d4cc2dee2192fd9be6ca9674"}, {0x20, 0x0, 0x0, &(0x7f00000000c0)}, {0x6, 0x10, 0xf2, &(0x7f0000000100)="256ecfeab2e79ec217d3aec1a293e147aced6370bda5ad2030db7bbb1609fb418ee5dee1e0b99d31f2025bfada96ecb555be387c3634f0acd074cf502b6a9e7f45064dc95be8487a0c73814dad41e8133cd4fd0ff29db2e953286b4ed19c58b6b88deaf67f2fef1e6df6f5a82ccbaf33555818a7f0f0c93fd5bac66b2e0125ef2d7b29d4964ff1803066c2a69b91ecb775a4cd0f7e0a58a4a433ce16cd997b4c522711c6a2ded7b357ddbebeadc71b2743417a2b5c472051cf79208c653af8190ae9817cf897bb5bb0dc117b4ab954f39933cf803159eb2908e740befa766be4b72ddf9c0db1643b116068a9d67f4893ccf7"}, {0x32cf, 0x0, 0x3d, &(0x7f0000000200)="61ae1c0cee77aa6349abe524ab96e65fc0596d83d74861ab0eefa33cc495b202325985ffb1d3898d51b247cd6d7b2b181e88b154494a02c773e47860f7"}, {0x7, 0x800, 0x61, &(0x7f0000000240)="a57b50617f232ac4afbd67bc9b634c3a0965498c8029c66f6f7fa44441b5b1373ca8f0437c2e925023e3a7ba34b923852346c7eddb97899c0f2a529ffcf692f8e1f7ec3720ce11c0a7574ea56db47ceb403250488f94198944be19f513f493144f"}, {0x5, 0x3a02, 0x50, &(0x7f0000000340)="9922e1b24e7541d38e69207abd0139c4fbdbf1c304209a59605b8663eb52959c5d5900e2bdcab418f3a3fc10e430b55cb946d7a9f67a654c20bbbcc88d3aac8b69dfaf6742c4e0b5fb366c0e1d2d3229"}, {0xfffc, 0x8800, 0x89, &(0x7f00000003c0)="8f242efa5248d4caf885fab15636b14d109726268613fb5b9dbe15ba6f7ceabed4114876a3c7a0ae008aa727a8ed0be9f8cc98cdcd702a4953a492faaf61a5057eb237fafcabf82bd32c1729e02d24526572912df352b2ec840b137032049c44eb27bc7e7ffedcb4a33056c218465f434bcd6a61480c628bb666d45f8a0240961f7a27fd39ed74385c"}, {0x6cea, 0x0, 0x10, &(0x7f00000002c0)="9c8ceaf099b0c608ae8b04955d11cc33"}], 0x9}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1968.766804][ T4412] binder: 4410:4412 unknown command 0 [ 1968.772692][ T4412] binder: 4410:4412 ioctl c0306201 20000600 returned -22 16:29:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x500000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:32 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:32 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x5, 0x22c300) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x105000, 0x90) ioctl$I2C_PEC(r0, 0x708, 0x9) [ 1969.484742][ T4423] binder: 4420:4423 unknown command 0 [ 1969.490240][ T4423] binder: 4420:4423 ioctl c0306201 20000600 returned -22 16:29:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x600000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xb000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:33 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:33 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x700000000000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1970.256191][ T4435] binder: 4432:4435 unknown command 0 [ 1970.261765][ T4435] binder: 4432:4435 ioctl c0306201 20000600 returned -22 16:29:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xc000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:34 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 16:29:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x800000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1971.048591][ T4445] binder: BC_ACQUIRE_RESULT not supported [ 1971.054771][ T4445] binder: 4444:4445 ioctl c0306201 20000600 returned -22 16:29:34 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:35 executing program 2: syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x18) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x6, &(0x7f0000000040)={0x20, "76de61a6814766b2f50a0eb36e059a1f6d9416f4533d59ccfe92d35fcf606ec071"}}) 16:29:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0x900000000000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1971.751130][ T4454] binder: 4453:4454 unknown command 0 [ 1971.756815][ T4454] binder: 4453:4454 ioctl c0306201 20000600 returned -22 16:29:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:35 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40046305, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:35 executing program 2: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000013c0)={&(0x7f0000000100)=@phonet={0x23, 0x4, 0x3f, 0x3}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="4e503b699cec14accb1b1564a248ce8fe6c18e6d98e5fbaf72a5bab520cd17c3ebfea29df932e5b77cbbb01ba2200c68cdab407a1407bc0f95f786f9467d2a29bef06c4c4cc29269a57206b2ef22cfe64323b27bd9b2b130b48d2768ad92d46d5503f350afea666c011bad06cb03f4e42a9552950cc87a4eca776a7b3521", 0x7e}, {&(0x7f0000001200)="d889cbc30bbdd9cbca36d27cdfd5126017524f2231119403282391f99dfc39bf5d5b9daf4e75c0aaf0c438912fd16f77e85ae30a09fac8df219bc82d5d7b86b6985efbce1d3d166e3a29", 0x4a}, {&(0x7f0000001280)="17e981d8e5ab841fc880d1d4c401a627b18bb994298cbe731ae6a30a8ab9616bc44b50b00eba9f49bcb0aeaf711dca929d2ccf17ad750ffb0e5972efd26f31273e2304181fd219", 0x47}], 0x4, &(0x7f0000001340)=[@mark={{0x10}}, @mark={{0x10}}, @timestamping={{0x10, 0x1, 0x25, 0xffff0001}}, @mark={{0x10, 0x1, 0x24, 0x6}}, @mark={{0x10, 0x1, 0x24, 0xe37}}, @mark={{0x10, 0x1, 0x24, 0x1}}], 0x60}, 0x20008014) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x3, 0x0, 0x3f, &(0x7f0000000040)="0c55a80f99a36f0003d8c4e64c1961d28acd0b6ad522076f775106ab864057cdd782ee07e710f11f95245802a3985ac30de4ccd3d915187ea16a14d69b53fa"}], 0x1}) 16:29:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xa00000000000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1972.467716][ T4465] binder: 4463:4465 unknown command 0 [ 1972.473558][ T4465] binder: 4463:4465 ioctl c0306201 20000600 returned -22 16:29:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:36 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40046306, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:36 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000080)="1f", 0x1) r2 = openat$adsp1(0xffffff9c, &(0x7f0000000640), 0x102, 0x0) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000005c0)=[{0x9, 0x410, 0x46, &(0x7f00000000c0)="115df4b70211a0bb1a959f729953b4818a6ced36c49959f4df6a56a92e2feff2d0ad7f535a2ddb93c410ab980c6113e5b694d07cef86c64dc13317adf57868b4b08eb7832d8b"}, {0x5, 0xa11, 0x6b, &(0x7f0000000140)="eab6873e8a752574b3155a239d267b4dabd54170eb1582a9362a7ecff51d455b347d4342f203f6f4181ef5a1b743773e5df2ede761f785870215519f7ac1538d1cb49ef472324ccd0fb37b987fced921dd491a9a2e16319ace14f1f96393b0c39aa329100bafc5ada7d8b4"}, {0x1ac, 0x200, 0xa8, &(0x7f00000001c0)="db96daed08418ecaded4a488cf3edef337ee414086f7e28164ffe255f50b2ea87fb5c95575665b50779090d55bfba7e569b7e4eef6221b52e489f0f0983a5966e1b2066dac751c029893f523ffaeab855bb91a4b6a7607800a8b1e72a2244387647ac9cb356a1e2927a1ef361184e3facaadff29fe2d8f5ba1fcf4d6fc45b50acaeff37155970cd11727f0ae2b7a73e2cfb965fc0207c2a4b1f18e86de0e1fea6599cf6b5b0480a0"}, {0x0, 0x800, 0xdd, &(0x7f0000000340)="d23117a12166d1968672683b16cce4af3e33339af4a56722de936b8b69fdbf083ae8071c158af281a92ef676fc022c08e550a56045cc93b1d6da3b30608a4d4deec45e6f9120ea3a2c416e5dd7d6bcbb55b4db0a35a44805a2cda3d697579444046615235437c57b6cab3a97a160ebb683070ba4a5f19587c0a02c6ac76785f5d11555362a5defaf230d9a0e1dd6d377234490974258a0d48d60a619e232e6060a305fa0186ebc6bc8eb7c3e07c8605a5d70c715a6a085e7b35ebd67486f799c4d6e74dfb7e236486f789afddc4dbb4493cc02f4f4b075606932eccf64"}, {0x1, 0x2000, 0x3c, &(0x7f0000000280)="fc94f9c013b25ab11204743c73de9bdaeb5f1d2d8e1c2e9679a18ca4486a72ae03cda3a2c4564e3232e511d9eb442ddae591115dda244f3b4f33d35e"}, {0x7f, 0x5800, 0x9c, &(0x7f0000000440)="7850d7dd26c19075c775c9db55a9314da5e681cb310651738714035822e325a14e1419ae439c3c02bb2b4a1bf36d1d98eae5b0f8a25a8755a004d52fe743ba667b82c8ff9ea23abad78b649cb29a90fe772b1f99fa2560e6f00a9788d748c292b013992510434977d5ff2daa363b3df3cf3a2795d50e3344a13efb4abb236a7f474f573cdfd5c7f8fb9590165bdd72309ee4e0f89de604708d3e31ef"}, {0x4, 0x0, 0xb0, &(0x7f0000000500)="8ce5e549afb9cf149ed5d1f55d6dc2854af56916912a5e56805648fe6fc893bde6d084a79980fa4316a3b695884bb843cf85afb31087433520ae2cccd1311ff74a2609e2568ff60f1dce56e7a869ac3b762cfd5e4ed2b8f50fa597dc6f6c6473182018190dc48169ea6408d355587e27fa68698128b95ccd936a6d83b8b3e2d227b8441e9a75c15ef9f285fe534ce1dd91e269dd0ade877ed71b57f32099ffbf70114721ad03265d40bd92836719a4ff"}], 0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r3 = dup3(r0, r0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x1}, @register_looper, @decrefs={0x40046307, 0x2}], 0x16, 0x0, &(0x7f0000000040)="b59d5377b8d5aef83dad0e99544ae1d2d57689d876ff"}) 16:29:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xb00000000000000}, @increfs_done], 0x0, 0x0, 0x0}) [ 1973.348266][ T4477] binder: 4474:4477 unknown command 0 [ 1973.355031][ T4477] binder: 4474:4477 ioctl c0306201 20000600 returned -22 16:29:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:37 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:37 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xc00000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:37 executing program 2: getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x1, 0x3, &(0x7f00000000c0)={0xc, "e9f6d0bcd8ff8dcd629eb8b2d5de7da79d5d49b7a25ce08fa96386556c5af73d61"}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1974.102135][ T4487] binder: 4483:4487 unknown command 0 [ 1974.107809][ T4487] binder: 4483:4487 ioctl c0306201 20000600 returned -22 16:29:38 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:38 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xd00000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:38 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000000)={0x2a, 0xffffffffffffffff, 0x7ffe}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000040)="15851d95558ceb605b554a813562718614a09bf40eca922c0ad0610e0f480e0114050dc91e09dfa29b438b03e3d8779c1d2cc4b5c8b33034c61ab18401b3e2bf9151aa10ecb8b154bafab80d69618eda3475af7b1764b8e70830a001cd904bea48de3f95d4835abc1cd76eae681badeb3c1d34180af794686ba5bd7a390ce1e9324d036fde4d92ea40b9404e33fd7201823e5143f21f08cbd3c51c05d52cb01caeba016cf7c439874df6b13d4f68786639f5c9e4b3640d4b9dddc60be46dd59c01a740f6ae209a", 0xc7}, {&(0x7f0000000140)="a5990fdf3cb556a15f1ce582b6d5b092296afe4c81dec40888efede877", 0x1d}, {&(0x7f0000000180)="ddb147d1454ec0f9d2444b241b9e1a9b445b13156a1b6aa2eba3a0a6969f194b3aa3", 0x22}, {&(0x7f00000001c0)="e0ade50ac42ed5872e77ff0cdf09811ab4559a504e04960ec84cb8fd2ddf4167064c3a0fef20ae00eebf699a72ab4c84b312492922049a6b25446bb28df46e1755d8b26ac41db13a1b3f1f028c62c2dfb5d49cde31a4d1c0857b729d24b980731e1200225d304944b8b50e5c6d01b5fd8a7c1f871123e97e133f87fcb09ad20ba15944", 0x83}, {&(0x7f0000000280)="e174ef2bfd4bc4b64ca171e9888cdaa631f7ebc6ee11e11fb9241bd32f", 0x1d}, {&(0x7f0000000340)="d0bb6ea7e6451da79d6893df26b5a485aeb21a1e3266d94a7218ceff6cb15da055a6ed65dd88a26c6e27bf300f2fe27216c57c798a47bd20f49b55ef2668c5512c72da6b9ed720186ac1c242a57f8c1b5b840495ea571c5ba1e2cdb92254c1811e4d33fc6302ddffeeb02c43343b761e2613e8bafd1d60c20041b2af075648718eb84edab9226e8d7c767bf348d6793aa929c5612620421a416c3035a058a6594c336017", 0xa4}], 0x6, &(0x7f0000000400)=[{0x7c, 0x104, 0xf0c, "8aa038eed448f4567091edfb37fdcb55dc80ad6cc88288241fc941670fece0fc41113f4679511ab740d44fc4531d452ef00bfe647c929df2045481decf362feae30bb5254427d6e69804a43e5e19001b66efde726aa36cf913c55faffe8dd8451595ae395489a5b1143fc09c1a161ebf"}, {0xe8, 0x10f, 0x7, "8fab323fe6a7a52cbb9fde70a9fd815322027ae2984296901cead110490ff093608a8ab3bfd01ddb268990d1fbb70b8932f028a722e25bf63b8a313de375f91903e21cbe5f50a1fc11bc3ba306cea25020f9d4fbc37ae3681cac44df06ba38f74430e8f92d70b76b6a3fd2cb3675c58d229d55484461a6813457855cd7d22143f94cf0ec4dab528b182b01f7e313e5ba7696d83789957c6aaab909899e8ea7bf968309ff4984530a60eed3cfcfc3330fe9ef67fdac4a96b4bd8cca2d6463e063d9ea307962b1e07e006c7cd26a4f5dc9723318ea764eed706e7805fa"}, {0xc4, 0x110, 0xfffffff7, "8aa95fe689b66d1b70f5a9f3b743e6a283966336de05c4382562a91a2d56a5bc8c4772f1cdb68fb128f9711f226ae4f26ae208415059328a5cf954f965a8865377afd50eece4799b1c373145f95aa6163a82c4f224b1216db00ee0a342c555483440aea3ff3d502657b958880a233dd8446880e4fbd315fe85c237bf51754ec2a088104799ce2c23fd4870a3c265cb48d883d401950ddcf451a97d225add2fb8c3ddd53a5316f927e3c5179a23e9b0ae2f8b06db2d3b174e"}, {0xc8, 0x109, 0x24f, "39a5e5ef30243b58d903a6c197dc644fc31799ac4993192d5fd26ad8cffef9fb6204bc86bd251d90914abbebfb17a2a9ad60971e1a7b45ae5b01ee255e42c0f9516c04b2c5df72cb3971f465f672e26eadd5365cd70595d3b384f8e2c910b55096469988eab5c7605b46b1baf0c4048ec0bbe43206c8a84e0d4eefa88f272f1737f1362e9b576df9810f7632ea1a797be5f73efbcb36be1e3e703bc473d64d97d5c5602d4c28f7c102a102e81a6c0bee1b402cb602ec976fb1c96993"}, {0x64, 0x1, 0x800, "940bdedf8b592191a9bec08387d224629382a76f6214a5fc4d19652742d125443d3825f44d0e131dc90f122ac5e1d5fa738bacc0ecc7aae1fcde676f56ae996d3bd5eecf89718a0177719d2920181e69c9916e100169a89b"}, {0x100c, 0x118, 0x415e, "5bd0ce8448b6d3ad126a3ce3d6d316fc0e85bd921b0db4f2b2ce44d86b98de68cb5f87f82b9b36cfdebb4f8c7b5454ca41b131e0e4204c3f03411d4a38b66f943d19b477a972721a2f29123cc5b1276c966fde1d8456661fb21f9cfabf5d2094212b8bfdbbdfa39a3b026c3a9a1f91d0a32fe8016834a4beee0104e1f3d227a9b5535b0debc3d667564d66be2d495a0c3ac17ecc682528220f0253a3334b9c25984ac083b2627581a2c3dfe7838db59945060b44daf7b5cdcb7e08a9bd29345439571dbac97408e514ea99866d66a3f00d516eef67cc834eebf9374ccf1541d1c27ef7fa6329a715000ebcfe7677e0d10a582e9a6ee59ac4db8435126af2e502ffb577b9da4d396cfab98c47c9317469a871caf6670dcd6ed0fb1beb1361daf12a499c0ceff4aa5eb3a454f7b59843d92404056ce85bbf7227b8bef64e1231b81a05c9cb8d2eb4656c6213882207b46990a01e70fe669890abc074ce27c1c8c91643cf753b9ed2abcd0d208b1f1da0e18e72978fb080be1566757460a09191743f51051e5e40393992a186fdc4bde2ddfa4b99f496d5799dc7b29417781e0e5f9afa7d63ff6feed0701d51434cc372cb3dcf3cf7b14dbae27a24d255196ea82e142bfd4a3fa62e73eb0aef436d310081eb0e1c7ee7159dffa6168b9c6e88d3aedf28919aa56ab91abd9cc3a0e0b45d315fbcd4601beb67c16e941a9add01d00163b417ee1ef6b8be266e07dc81cd078bfe4ccedde11d1f5fb137f2b13b173f88877181dd212defa3684486c7acff2985d32728047b45a344ccef7a43c63e09cddb9b75a2960974dddbf14a2d074f7cd954df8d6d87d8ce90c2fb696727525c103a5e256627d114aafbe8a34aa23dbed74fd3d6eb83f091857912e58b23fe866b40166bc32ae64f9dd1b602f0b5f45bd3257032ea3faa7f3c7bb0ebbeb3345120f6aec3436608f0a8c7daee59c8a08ba5ce791701ba658ea1ef0d1710a16c5894f6c8ccf7d654e8f5e5e75e6d74ab3e4c5efc2c657ee4651c75f0ece21695dbb6d5471c0741be7df44c0dd5b9e5c9940d705df4fac0cd8cc91d1140f7ec7cdaf57c203f86c2916c09844d7b9e28929b16086ef8f1e6d3c4843c2f18c405b52140e21c079852e90334494bbe6017df084cd9f661e9a9a47bdb9d9f9056ddedd0ec03ca228b2e225ba35289edf0baa71014260935e48830cd50621103b51fed527b8fcb9968bbc145c94a4e4233989bbc048204558c74f43fe4a516d4b7ac7c2fe820ebe0c5df2e4f4429ce099b2367d8aa704683531fea58775690ad5002e6ad76d8ef3cc019f30fec9f8f380ec5689de1c0151fc1a9fe999b683ba8151a9069a1e89eee53a08c105caf1098372e414ee6078e587c78946a4e6a5948fefe061f7e9d631b8aa5b81ef7befbedb1a0f872d6026e3bb2ddba5c45a6e0244dd7f4292f07eec0f469af9efde66e548dba5f4718c5b817f1d37c74e72e57a2950cd1c1af4105b938981447b08e2c7386f606370c4fff9aefaef0e8a94bd5e82de8ea8de7756b91065363bf39786040710a3a1f30a8d72b3e7695e4c9386d23cbf28aa973c83df854db40eef3bf69ed8582267850c85ea97a85da20f7003c007e4bd724447604e176ba6498a8292bde80b7d601021049f05b0b83721b33a411d0d92c35b346e5e8195c93c83469a0bdb5a07fbf0155665cc398e784d2e709f75f602278d840e57c4693bea894840c864a53d867b875bf89714431118a6e959bbc35b4ac8ffc72518363c7323c056c4afdf35ada45eecf4e5a3525f599a8aab9a1e5f2186984c5b2a2bbcd62231f953aeded6299f7a81ff07a59f7508e0afe7ff5f913f33ee092b0ed46bb7259cf8cc417414b1d20ac6e6b381dfd31bca07b0f891bd1bc0c546b07dcad2be435b7208ecdf67df7fe456a6552d4df2cdc4ab8572cede4309b50e85deecfe39f6816b30b4c5d8da1b1e2c12fde279fc42b23d72df33ba3665b6ccff6fb63880f6a43bf9c185d5324fd3ad7ed8b1b363f3547ba81bb6d88c205cd32d41f7e6626c4a42095cc78ea405bbd7cca714929e32a456c56dca2f2fb4ecdeece1785ddb0ce202a3c8ffb1d26fbdd9572f13bd2a24eab58c333c782c188a45585699f93763b587830be240d5f1cd57fc5706ebc3f88ccb2bd4ce4a1d0b2342b8f674e45119428e1b87f0983d4d97ea4865ca15468cb5ec7ab547e57048296977290076a53ff9ea335ad3648f9facc390f2882b10adcb3188bc21e60c9ba83c8f911f03bf4efb88e2caf828ea7bf7b8f1ee49709708b15dc6e66c21facffec065ece0173dc124b9e45128c35fcf55467da316a43cacdbfb949181d1f3de2b79cf9c7f26e4f5357965d24f972b0b55b07bfa4eb4c325a3f2bec8502eb3b9968cbde40eeda6fb795872b8cf68cb86adcf8704bb462305e32c8eb8757215e0998b5d0a6b1381da39333f2d8031b43c4ac766854f2a5d4b10a20a887671f619dffbf0c2d55d37bcc7a89d87a09c884d1d195b190ec12aea9df69490aeb59c1a502be99220336f0a8298a675dcca3a3251991ef274ed217f99d204019a1825b14bffbeb191a49e8edd7e512fe2de6107a411f09b6c218f4c29539606b61e3d7f66c1dbd72f0b5ed0f49fd167f1cf8a6b889d1222e37e6d59d99722f12a19af72c842d31d9b1f92d8f2050ca5bc95b17541edc81b7c65201e711ca933f257f73dd87045520eddd9d995a84d18a633b3fea5022d417c4242bf0cf672079f5b67f042162e36ccfd081ea7acef9e202fae98104ce1db3201bb7b970edb41971262808533ae63f2e54ca47123e154915f8d241cac793f8457664417ac1262d7c6a76af94a371ccdd010f1870a73806da8c1d9b74ec4a27639409c286fc454502cbcd5104a6b42ff713d653c97435c1f42cb57e21cd2fe34ce76136157f660950c8f27014e7a97405ffa03723daaf3c36c87d39aa32ec27ecbd9893459b18d981ee6fb4d0c789a84938534c3ac5f88478c000ac76328d2b2e303db9c1074afa20edabdbe319397173487afe7e52f13896757476d10b89d32e1ac58b57cca448b3cedeadec906d88211a52a08a4677ca881e7a3f17962dd8d1f8ba50b2e646efeb2cf5c3b24934c552b913e37efc16a2079d75fb943f467a763f5b97c6e835bb02aff9d687629c1f26fd2d0357b6ff404e6e1c7c702d6c5183f9228a005b56336953da89ddc48f866795cabcd7d8e51f9f2d20d1b753475d18105c4f435c2d3bf116268667522d3902d24b9f4ab2883cd2bb36aa4a75f268912772091cb5fc8ce252354d33f173e11c6a8af46907586a24938c9fe67c3c9c19dab1ab58cc61175c98667cf8b75f41fb6789121d1d1621a106c04149815876baf8e133b683cfe4de3a66036b0f5591621fd867432965179dc312c46dd24187448a42181ebf6b93baf28a3471bd24a41d17079d7069cad12ec34820cdf5472fa116dce7daebb1d9ae5f15e75dd5091d8dbf07034ec86563e892e47f95d5786bab2756ac55ae0fb83dfecaf929c619f774a3cf7ce79044fe171a0417b2091a637128e43ecdebf524c0c24ba381c64e592e20937c0ed2e6b96ea83d2bacb2db53aa92859923f752dbd61f3241349abf172d99fad71d3c3f3036da972a5484064e54ba8bbc8cffcbf962fac489e530b521bd5c6e854732ff1285b494ff15c7e9b95780ab05b58f34d4d49b4320425849199e29f2215291d23ca47933da6942dfc2d6042a0f0e626319ec6f58c5e7feb04f8a914caba8ec44c31093b987d09af3a179c356eee6aa32b5df903327ac16464687e4c266f3cdfba25c372b34665ee41161b5aa4c3889424cc09e7718e7579e9168f46217acd36f2a9aae0c8c1aea01384ecb79c90b99c28550936dc898ce46ebb42625d4ff47e6a52db1759c05b3994711392f27488cd9f7cdf5c8f0a820913c7dc3c86f8545b67e433b01633aae9e2051e871456255c1d1e6646cef75e0782d0cbe7604963a9959794b1ac6817a1536568931c1bf52f742df30b11f8cf1a42c4b82bde3728b4019677e7735b75182381adfe76fe09e656865603d72c3a44d504e223d83de9bafd402f46dfb738ab66129fa78357e80cdc453ca009a2d977ce19522a375c2979e35d4231aa23ada664277fc9b6961a479261646e1ec79447b0f0b04b8c0f63e1557496b2f1aa4e8b3602138901b3254e5573ac2b423ebc6a0df79eac8c86a4faae45281dfc19a3fce598a4a28199a7bb74e6400b2779b6f7c63572732bdf270b05f486357db9ada568a76f63f43936adba197b8e6e75a2a57b65e19d7a090135e08bb161596e5f04f33525aaaa35a361e64dd59225f3843cc2cdf59ecc00dc8b9a963cae301c4ee4c2455636bccb2a5f2d6584445438d9b7289da2606185104510e5de3486328a654155430c18ace67b000dbb322f8fb05aab059ad5bf641c757d411a28be9249ef8f8e3d4bc617a307686f33436a19533a1e3fb24d19672beb0039eeaf4541f33e5d09b20de2f748d91013098adffd3effb239fe681e39b60b7fedaaa46f7b462fdd390b7096e4f2a13e9f38d8b7273ed02518a135ae3ac059189d16e9d1d66cb8876e4a3fad62bcd689754aa46c7bf4a8e58ead7f6d005df3fc8e11d8883128f11f527ae151968252690f07c8b03f2e120dd6f385c32118f0d38d9c2ec4c453e3bb86c09651029d3601ea6322ffced8382b827b4715776ca61b913eae53c49397b1af75822f759cf4d0a3dd1937ccf0bd9004b7b386a14994a2088cde04af627e384c3094d4fa52afc1f0325d3f083bae2d2d91da046d084e6f33bdd175ca79a25fc99caf3be4c03983e387d9201ca9dcc05b659d8529b1489efd10efbb71cab69f86d2ce591e969018f34500a8146c3603153590350bbb4a7f880a7cd6450552715038655628101c91d5e181c099c02b34cf6cd3ae709ffff15de6188fffc294e2c4b0249d9637ac9e454d108cbb4e2ac1e998718bc6eca033dba6e4d80a1268d0655864057757e05550fc30a01c78e9e1cf9df6e0b577d7d6ffb1f972feca5424116ff548f87f7e748fb8ee6d812e51eb5a334d2cf5fd3b7b2a085f4c93cbbdc0c024fcd0bd22d18c5bac56281acc59dd3412a1515670a2f966d94ac2d56259550f78abfccd5ef3be2d86eb43b744ddd429d9aa9de630332b73519bbb8e1d3ed342d84c0fa7defe9c34c5e3c4fa073c60555858a008605adfc091c7e56ef16c1226821268bf88eebe234175189538e35431e744537953a785e737cb332289bd9b56114e3d2b86bb583aca3a0c96afb0680c35e7d9729d9d5dabfea0241a894fa9620b22fb4177f85f34a14031e329d0d4a501d98bb97137e68cf492628ff9ab3483e77b78d4affcb33d6676d206f9c4a2cecd769dbb82c7de00055babe64c5622ed4024dbe366b6770fd87910a1ceef6cc5570e300951981b8b699ab4ca49b5c02589d0bfd9dc86a0b5ce64cb413cb14c7e3f820d3eb11f6fae342487510bdbac48257437d3a8d9a1f12f8989e0f7703058954bdd15be22815a5c5bbfa79b0064a4b02abd2b1c322d9ea6416a93c638c15e99edb37c5dea8fcae319b86891c8ebe5d787ce4d0d40feacd9c994d61c9170c9ea08b3a2542ae74af146248b03612f94d6cc3ea6192597c83466d37ec0b6db2d3015bb3579e5ff161c3ff476490f79f4bb71dc99ac2170e5752ecccde7599b1f0f905cac9a16f570145cc1fca9c957b7735ae812498a3b2b8d9ca6cec5fcb07a142c77241f2f84cdba4cbbd7697b24db34139eadd8249dbf91c5f56"}, {0xe0, 0x10e, 0xffff8000, "86868d346b1b42ce9e49467b5efed58abf64602f50b9f58a715a79c7a0052579a967eddaa1d1694d24509551f06705bdee431003aedab4a4f0639bfbb8fd963faa27844451b91905dde445c8422a23a38b9ecedf9865a97e1ed20aa66975c25edf2d526418708e65b7aaae64dda462c211b2474c26f0d0e8738de4ef006a7d7f7ac9f073f71a0e975d6c6029602486e26450d7958e78af94f64a26ed94498f953eff4e0bd93f9a3694fcd9a24062ab4f9e13a0bb2b954d25d6b8a4ce48be202bd6a8dbe39f9802d21685fd59b483a36f52cf"}], 0x1440}, 0x1c) [ 1974.954442][ T4497] binder: 4493:4497 unknown command 0 [ 1974.959952][ T4497] binder: 4493:4497 ioctl c0306201 20000600 returned -22 16:29:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0x5c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 16:29:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000200)=[@request_death={0x400c630e, 0x0, 0xe00000000000000}, @increfs_done], 0x0, 0x0, 0x0}) 16:29:39 executing program 4: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000540)=[@transaction={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f00000005c0)="a59d33c8"}) 16:29:39 executing program 2: r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/197, 0xc5}, {&(0x7f0000000100)=""/28, 0x1c}], 0x2) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x4000c0, 0x180) [ 1975.756001][ T4509] binder: BC_ATTEMPT_ACQUIRE not supported [ 1975.761911][ T4509] binder: 4508:4509 ioctl c0306201 20000600 returned -22 16:29:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x4c, 0x0, &(0x7f0000000480)=[@reply_sg={0x40486312, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1975.934388][ T4512] ===================================================== [ 1975.941346][ T4512] BUG: KMSAN: kernel-infoleak in kmsan_copy_to_user+0x9c/0xb0 [ 1975.942531][ T4512] CPU: 1 PID: 4512 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0 [ 1975.942531][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.942531][ T4512] Call Trace: [ 1975.942531][ T4512] dump_stack+0x24c/0x2e0 [ 1975.942531][ T4512] kmsan_report+0xfb/0x1e0 [ 1975.942531][ T4512] kmsan_internal_check_memory+0x469/0x500 [ 1975.942531][ T4512] ? i2c_transfer+0x370/0x620 [ 1975.942531][ T4512] kmsan_copy_to_user+0x9c/0xb0 [ 1975.942531][ T4512] _copy_to_user+0x1ac/0x270 [ 1975.942531][ T4512] i2cdev_read+0x23d/0x350 [ 1975.942531][ T4512] do_iter_read+0x6a7/0x1100 [ 1975.942531][ T4512] ? put_i2c_dev+0x2c0/0x2c0 [ 1975.942531][ T4512] do_readv+0x41a/0x7e0 [ 1975.942531][ T4512] ? kmsan_get_metadata+0x116/0x180 [ 1975.942531][ T4512] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1975.942531][ T4512] ? kmsan_get_metadata+0x116/0x180 [ 1975.942531][ T4512] ? kmsan_get_metadata+0x116/0x180 [ 1975.942531][ T4512] __se_sys_readv+0x9b/0xb0 [ 1975.942531][ T4512] __ia32_sys_readv+0x4a/0x70 [ 1975.942531][ T4512] __do_fast_syscall_32+0x127/0x180 [ 1975.942531][ T4512] do_fast_syscall_32+0x77/0xd0 [ 1975.942531][ T4512] do_SYSENTER_32+0x73/0x90 [ 1975.942531][ T4512] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.942531][ T4512] RIP: 0023:0xf7f04549 [ 1975.942531][ T4512] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1975.942531][ T4512] RSP: 002b:00000000f54fe5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 1975.942531][ T4512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 1975.942531][ T4512] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1975.942531][ T4512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1975.942531][ T4512] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1975.942531][ T4512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1975.942531][ T4512] [ 1975.942531][ T4512] Uninit was created at: [ 1975.942531][ T4512] kmsan_internal_poison_shadow+0x66/0xd0 [ 1975.942531][ T4512] kmsan_slab_alloc+0x8e/0xe0 [ 1975.942531][ T4512] __kmalloc+0x387/0x550 [ 1975.942531][ T4512] i2cdev_read+0x128/0x350 [ 1975.942531][ T4512] do_iter_read+0x6a7/0x1100 [ 1975.942531][ T4512] do_readv+0x41a/0x7e0 [ 1975.942531][ T4512] __se_sys_readv+0x9b/0xb0 [ 1975.942531][ T4512] __ia32_sys_readv+0x4a/0x70 [ 1975.942531][ T4512] __do_fast_syscall_32+0x127/0x180 [ 1975.942531][ T4512] do_fast_syscall_32+0x77/0xd0 [ 1975.942531][ T4512] do_SYSENTER_32+0x73/0x90 [ 1975.942531][ T4512] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.942531][ T4512] [ 1975.942531][ T4512] Bytes 0-196 of 197 are uninitialized [ 1975.942531][ T4512] Memory access of size 197 starts at ffff8881565ab500 [ 1975.942531][ T4512] Data copied to user address 0000000020000000 [ 1975.942531][ T4512] ===================================================== [ 1975.942531][ T4512] Disabling lock debugging due to kernel taint [ 1975.942531][ T4512] Kernel panic - not syncing: panic_on_kmsan set ... [ 1975.942531][ T4512] CPU: 1 PID: 4512 Comm: syz-executor.2 Tainted: G B 5.12.0-rc6-syzkaller #0 [ 1975.942531][ T4512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1975.942531][ T4512] Call Trace: [ 1975.942531][ T4512] dump_stack+0x24c/0x2e0 [ 1975.942531][ T4512] panic+0x4c6/0xea7 [ 1975.942531][ T4512] ? add_taint+0x17c/0x210 [ 1975.942531][ T4512] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 1975.942531][ T4512] kmsan_report+0x1de/0x1e0 [ 1975.942531][ T4512] kmsan_internal_check_memory+0x469/0x500 [ 1975.942531][ T4512] ? i2c_transfer+0x370/0x620 [ 1975.942531][ T4512] kmsan_copy_to_user+0x9c/0xb0 [ 1975.942531][ T4512] _copy_to_user+0x1ac/0x270 [ 1975.942531][ T4512] i2cdev_read+0x23d/0x350 [ 1975.942531][ T4512] do_iter_read+0x6a7/0x1100 [ 1975.942531][ T4512] ? put_i2c_dev+0x2c0/0x2c0 [ 1975.942531][ T4512] do_readv+0x41a/0x7e0 [ 1975.942531][ T4512] ? kmsan_get_metadata+0x116/0x180 [ 1975.942531][ T4512] ? kmsan_get_shadow_origin_ptr+0x84/0xb0 [ 1975.942531][ T4512] ? kmsan_get_metadata+0x116/0x180 [ 1975.942531][ T4512] ? kmsan_get_metadata+0x116/0x180 [ 1975.942531][ T4512] __se_sys_readv+0x9b/0xb0 [ 1975.942531][ T4512] __ia32_sys_readv+0x4a/0x70 [ 1975.942531][ T4512] __do_fast_syscall_32+0x127/0x180 [ 1975.942531][ T4512] do_fast_syscall_32+0x77/0xd0 [ 1975.942531][ T4512] do_SYSENTER_32+0x73/0x90 [ 1975.942531][ T4512] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 1975.942531][ T4512] RIP: 0023:0xf7f04549 [ 1975.942531][ T4512] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 1975.942531][ T4512] RSP: 002b:00000000f54fe5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000091 [ 1975.942531][ T4512] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000140 [ 1975.942531][ T4512] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1975.942531][ T4512] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1975.942531][ T4512] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1975.942531][ T4512] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1975.942531][ T4512] Kernel Offset: disabled [ 1975.942531][ T4512] Rebooting in 86400 seconds..