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", 0x801, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0, r1}, 0x0, 0x0, 0x0) 13:38:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:16 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) getsockname$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:16 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 13:38:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:16 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0, r1}, 0x0, 0x0, 0x0) 13:38:16 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:16 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 13:38:16 executing program 5: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:16 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)) [ 299.709770][T10559] MPI: mpi too large (16392 bits) 13:38:17 executing program 5: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:17 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) [ 299.883707][T10567] MPI: mpi too large (16392 bits) 13:38:17 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) getsockname$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:17 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)) 13:38:17 executing program 5: r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:17 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) 13:38:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 300.395375][T10581] MPI: mpi too large (16392 bits) 13:38:17 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:17 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)) 13:38:17 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:38:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 300.666244][T10592] MPI: mpi too large (16392 bits) 13:38:17 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:18 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:38:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) getsockname$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:18 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:38:18 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:18 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 301.411494][T10614] MPI: mpi too large (16392 bits) 13:38:18 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:18 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:18 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 13:38:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:18 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) [ 301.656546][T10629] MPI: mpi too large (16392 bits) 13:38:18 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:19 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:19 executing program 1: timer_create(0x3, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x9}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 13:38:19 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:19 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:19 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:19 executing program 1: close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x10, &(0x7f0000000100)=@assoc_value, 0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), 0x0) 13:38:19 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:19 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) [ 302.597276][T10663] sctp: [Deprecated]: syz-executor.1 (pid 10663) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.597276][T10663] Use struct sctp_sack_info instead 13:38:19 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 302.702345][T10670] binder_alloc: 10664: binder_alloc_buf, no vma 13:38:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:20 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x8, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="48250058ffdb3eedffacac048b64180530a66a2d96115164dd9d8511d65d406cba9074da642b12de3b0484fdd6e2975a05caa9fff865598c"]}, 0xb0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(r5, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 13:38:20 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:20 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 303.424171][T10693] binder_alloc: 10686: binder_alloc_buf, no vma 13:38:20 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:20 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 303.669468][T10706] binder_alloc: 10702: binder_alloc_buf, no vma 13:38:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:21 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 304.572940][T10690] mmap: syz-executor.1 (10690) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 13:38:24 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x8, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="48250058ffdb3eedffacac048b64180530a66a2d96115164dd9d8511d65d406cba9074da642b12de3b0484fdd6e2975a05caa9fff865598c"]}, 0xb0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(r5, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 13:38:24 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:24 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:38:24 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240), 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 307.083753][T10778] binder_alloc: 10773: binder_alloc_buf, no vma 13:38:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:24 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 307.288531][T10793] binder_alloc: 10790: binder_alloc_buf, no vma 13:38:24 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240), 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:24 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:24 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) [ 307.558905][T10799] binder_alloc: 10796: binder_alloc_buf, no vma 13:38:25 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x8, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="48250058ffdb3eedffacac048b64180530a66a2d96115164dd9d8511d65d406cba9074da642b12de3b0484fdd6e2975a05caa9fff865598c"]}, 0xb0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(r5, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 13:38:25 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:25 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:25 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240), 0x0, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:25 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:38:26 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:26 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) [ 308.794242][T10835] binder_alloc: 10827: binder_alloc_buf, no vma 13:38:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:38:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:26 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:26 executing program 4: perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) [ 309.099313][T10852] binder_alloc: 10847: binder_alloc_buf, no vma 13:38:27 executing program 1: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x8, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="48250058ffdb3eedffacac048b64180530a66a2d96115164dd9d8511d65d406cba9074da642b12de3b0484fdd6e2975a05caa9fff865598c"]}, 0xb0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(r5, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 13:38:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f22270fc76ca7baa00066ed66b91e0100000f320f20d8b135200000000f20d80f8822d80f3581d90c0066f2ba5f57160fc77c01", 0x34}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:38:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:27 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:27 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(0x0, &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:27 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 309.985719][T10884] binder_alloc: 10880: binder_alloc_buf, no vma 13:38:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:27 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:27 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:27 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', 0x0, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 310.284267][T10905] binder_alloc: 10900: binder_alloc_buf, no vma 13:38:28 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) 13:38:28 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) capget(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) gettid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x2, 0x8, [0x20000540, 0x0, 0x0, 0x20000748, 0x20000778], 0x90, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="48250058ffdb3eedffacac048b64180530a66a2d96115164dd9d8511d65d406cba9074da642b12de3b0484fdd6e2975a05caa9fff865598c"]}, 0xb0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'vlan1\x00', {}, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = shmget(0xffffffffffffffff, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r5, &(0x7f0000ffc000/0x4000)=nil, 0x1000004001) shmctl$IPC_RMID(r5, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0) 13:38:28 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:28 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:28 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 311.001484][T10933] binder_alloc: 10931: binder_alloc_buf, no vma 13:38:28 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:28 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:28 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:28 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 311.280504][T10951] binder_alloc: 10942: binder_alloc_buf, no vma 13:38:28 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:28 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) 13:38:29 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x148}) read(r0, &(0x7f0000000300)=""/128, 0x80) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13:38:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:29 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:29 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) 13:38:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:29 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:29 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x401, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:29 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:29 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x401, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x10020c5, 0x0}, 0x6000}], 0xc6, 0x0) 13:38:30 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff}, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121080, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) [ 312.786278][T11000] binder_alloc: 10992: binder_alloc_buf, no vma 13:38:30 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2", 0x401, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:30 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) 13:38:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:30 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x601, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:30 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x601, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:30 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:30 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:30 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x601, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:30 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x10020c5, 0x0}, 0x6000}], 0xc6, 0x0) 13:38:31 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x701, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:31 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:31 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff}, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121080, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) 13:38:31 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x701, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 313.933998][T11067] binder: BINDER_SET_CONTEXT_MGR already set [ 313.965659][T11067] binder: 11061:11067 ioctl 4018620d 200000c0 returned -16 13:38:31 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:31 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x701, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:31 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:31 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x781, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:31 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) [ 314.491384][T11091] binder_alloc: 11086: binder_alloc_buf, no vma 13:38:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg(r0, &(0x7f0000006d00)=[{{0x0, 0x10020c5, 0x0}, 0x6000}], 0xc6, 0x0) 13:38:32 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x781, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:32 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)) 13:38:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:32 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) clock_gettime(0x0, &(0x7f0000000180)) pselect6(0x40, &(0x7f00000002c0), 0x0, &(0x7f0000000340)={0x1ff}, 0x0, 0x0) semctl$IPC_INFO(0x0, 0x0, 0x3, 0x0) openat$full(0xffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x121080, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x400002172, 0xffffffffffffffff, 0x0) 13:38:32 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74", 0x781, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) [ 315.455749][T11112] binder_alloc: 11107: binder_alloc_buf, no vma 13:38:32 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)) 13:38:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:32 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7c1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:32 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7c1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:33 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)) 13:38:33 executing program 1: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) 13:38:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:33 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504", 0x7c1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:33 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)) 13:38:33 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 13:38:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:33 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348", 0x7e1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:33 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) 13:38:33 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7e1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:33 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) 13:38:33 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:33 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) 13:38:34 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7e1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:34 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) [ 316.811128][T11180] binder: 11176:11180 ioctl 4018620d 0 returned -22 13:38:34 executing program 4: perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) 13:38:34 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7f1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 317.020744][T11194] binder: 11190:11194 ioctl 4018620d 0 returned -22 13:38:36 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:36 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7f1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:36 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 13:38:36 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) 13:38:36 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7f1, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:36 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f00000002c0)='/dev/v4l-subdev#\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x7f) 13:38:36 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x81) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"}) r5 = dup3(r0, r1, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000002a00)={{0x0, 0x0, 0x80, {0xffffffffffffffff}}, "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", "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"}) dup2(r5, r4) 13:38:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:37 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7f9, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:39 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:39 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7f9, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00050500000000000000000700"], 0x20}}, 0x0) 13:38:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:39 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:38:39 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7f9, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00050500000000000000000700"], 0x20}}, 0x0) [ 322.788564][ T2639] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 13:38:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 322.843067][T11258] (syz-executor.4,11258,0):ocfs2_get_sector:1777 ERROR: status = -5 13:38:40 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x24, 0x400, 0xc}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, r1}, 0x38) [ 322.906418][T11258] (syz-executor.4,11258,0):ocfs2_sb_probe:752 ERROR: status = -5 13:38:40 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 322.988707][T11258] (syz-executor.4,11258,0):ocfs2_fill_super:993 ERROR: superblock probe failed! [ 323.065355][T11258] (syz-executor.4,11258,1):ocfs2_fill_super:1175 ERROR: status = -5 [ 323.107508][ T2639] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 323.121770][T11258] (syz-executor.4,11258,1):ocfs2_get_sector:1777 ERROR: status = -5 [ 323.145801][T11258] (syz-executor.4,11258,0):ocfs2_sb_probe:752 ERROR: status = -5 [ 323.172452][T11258] (syz-executor.4,11258,0):ocfs2_fill_super:993 ERROR: superblock probe failed! [ 323.208897][T11258] (syz-executor.4,11258,0):ocfs2_fill_super:1175 ERROR: status = -5 13:38:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:42 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e", 0x7fd, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in=@remote, 0x0, 0x0, 0x33}}, 0x28}}, 0x0) 13:38:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:42 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:42 executing program 4: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 13:38:43 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e", 0x7fd, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 325.775656][ T2639] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.791557][T11305] (syz-executor.4,11305,1):ocfs2_get_sector:1777 ERROR: status = -5 13:38:43 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x24, 0x400, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000080), 0x1081, r1}, 0x38) [ 325.822128][T11305] (syz-executor.4,11305,1):ocfs2_sb_probe:752 ERROR: status = -5 [ 325.845790][T11305] (syz-executor.4,11305,1):ocfs2_fill_super:993 ERROR: superblock probe failed! [ 325.863119][T11305] (syz-executor.4,11305,1):ocfs2_fill_super:1175 ERROR: status = -5 13:38:43 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:43 executing program 4: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x24, 0x400, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={&(0x7f00000003c0)="fa361489c98f7d5eeeb24f220cde71c62e039a3855967f82d296cb4d3b5a6fdc263ee594022bde345a05946dd8608100ff9132036688d39e36ad49f46cf03776413bf8b48c41e5fd27fe5c14b9aeb81638c8b4c37094233c25142c76e274266982c42d8c832156d08e0e6624ae8e70ecd8aad1c11f", 0x0, &(0x7f0000000500)="407e85040bb0e0d2f26f24927f162fd1e1877c9555cdce11ba2f840ad4e32b1871e2ddb000ad05ca115d153669a47476bcd0d285e9756a46c42ff8b4b04766162e7b92ff20ffe10fcc3b6de2e046943147504950ee594901b2dac336a0ecf3c3aa0a15dd3d895a48f6bd2f6360d0f60d82ceb1146b4e242af9b1f94221f9bce0bc08ea46c2ad83a271207c", &(0x7f0000000600)="b5620a90b10089"}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000080)="b32fdfabfc03c5b54fa5bf08000000000000003b7ba5f3111096b0f9a1037d65e44b9d67c5434c228f95a3f440", 0x1081, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3, r1}, 0x38) 13:38:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:43 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7fd, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 326.201265][T11327] binder: 11323:11327 ioctl c0306201 0 returned -14 13:38:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:46 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:46 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7ff, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:46 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:46 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x1000000000000a) connect$rxrpc(r0, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x24) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}, {{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x2, 0x0) 13:38:46 executing program 4: r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}}, 0x78) pidfd_send_signal(r0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x9}, 0x0) 13:38:46 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7ff, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:46 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x7ff, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000000c0)={0x78, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x3, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9104, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x24, 0x400, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000080)="b32fdfabfc03c5b54fa5bf08000000000000003b7ba5f3111096b0f9a1037d65e44b9d67c5434c228f95a3f4401a46eafe0f399b1442c7dd7a627a56", 0x1081, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3, r1}, 0x38) 13:38:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:49 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) 13:38:49 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x800, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:49 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x800, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:49 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 332.168350][T11402] binder: 11391:11402 ioctl c0306201 0 returned -14 13:38:49 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 332.511975][T11424] binder: 11422:11424 ioctl c0306201 20000200 returned -14 13:38:52 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:52 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:52 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) 13:38:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:38:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 335.160083][T11439] binder: 11437:11439 ioctl c0306201 20000200 returned -14 13:38:52 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:52 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:38:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:52 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:52 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)='/proc/\x00\x00s/sy\x00\x00\x00\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(r0, &(0x7f0000000100)=""/153, 0x6c5b5f1f386a312d) [ 335.501630][T11461] binder: 11458:11461 ioctl c0306201 20000200 returned -14 13:38:53 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:53 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:38:53 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:53 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x1) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00000000c0)=0x9b, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) 13:38:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:53 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:53 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x3d) sendto$inet6(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) 13:38:53 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:53 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) [ 336.172395][T11487] binder: 11483:11487 unknown command 0 [ 336.191772][T11487] binder: 11483:11487 ioctl c0306201 20000200 returned -22 13:38:53 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:53 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 336.446380][T11508] binder: 11499:11508 unknown command 0 [ 336.462337][T11508] binder: 11499:11508 ioctl c0306201 20000200 returned -22 13:38:54 executing program 2: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:54 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002800)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2, @ANYBLOB="0480000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) 13:38:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:38:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:54 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) [ 337.092998][T11525] binder: 11522:11525 unknown command 0 [ 337.110938][T11525] binder: 11522:11525 ioctl c0306201 20000200 returned -22 13:38:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:38:54 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:54 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0xbae, &(0x7f0000000d40)={@broadcast=[0xff, 0xff, 0xff, 0x0], @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0xb78, 0x3a, 0xff, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0}, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xb, "a78c000005dc791153d5dea6b259b8e3cd2c8038336823493b87aa0568f00b1c71a8242373243ed2439adc07df0a69748e254c1e4a8a8b3f0ab0c430397754db3e340a14a2a1328c5f93037dc1435c11b3000000008403af736b41e5a8"}, {0x0, 0x16, "84f0da52ef24571313968050378ee824f4dffba7feed320557f7671975afc9c545c5ea6137c8ce680ba2d2e8794cc0ee661ab31313a50f67f637326bdc20eee126a2c281295ae9405b24d13dc48b7b6aa26e8a94498418f3472f7281922377d30a3b5ed2c6a2990e5ea6b275c1d5bddf59f3d1843df268e8c825c6b2cff208dfb5cd8283d0dcd52a6de228bf697d3d6506afec30ef7e07413c7afc1eb139e0fb1a5a643b4099519e31f3fd4457f0e6d586ad05e1"}, {0x0, 0x84, "062bf7b5e0f2dbbdc849b90d4e80a0e3f7af088060d01a1cfcfad88ef4512c6ef5c0ead4b9cc87484b106a060a9899d50f595204418f51e914c88c29078a5457de6a262cadf02b071d88e61703f037caded0b315701274012fa532ddd69499074e1a2df196e0afcffda08fb3d82ab8160253a47d3efc3d7cead55c28610ae20f69aaced0a1a6ce815344cf8d0bc8a0dfcdd1e8cd7242601777ec653c2d4b704397dcb1350982afd017eaa630c840d71589499fd68239ae0c0aa2fc9b949d1a716d40a24f078e92e8c268ff726290944b5f3a3bea9559f2d2a51405fba224411ecc49544dea47917a98bf79c3bfeed70429abf70a52ecbda21c9bf0f6a70cd2c2c887391e4095ad22b437c60abf829447b47bd231ca2a98d9da7519a4bd28e803fa000fafc0dc453ed56cdf4356d7abcfec4eed0b94a4f78ce44a7177c6684026ba4f26a17e52e326c8bb7be5e2ea5780d7169d8f4ff62cb2b223f1d6221f62e0ee0244d86042560edd36853c464b23be536c65b87cd5ea60932ed90607b369ed2017f645afcb5cd07f6896a08473bd5dea2bfb52ac501a39c338ede985aa4a7755db876cbe4d944f3cce0079d2ad9ba8d17f01a614052aadbd4af0fd282f594dc4530ee49b6c9ae6d5d80a073e678594be2e2f0869baa2a58dd2d0f6a995fb706c4d1b618d57da1c2d8f55611f746105a947b4f6bb74dbdbffb1b3c1f2316f6a28a07f0145b1bf8345b6aa4e9d5a819497856792121219ea151c1f8e2f86356439bc5b87fe4cad68b6afa08687e6e751803865165eac0c34bdddae1bbe52f55d08cc4a0865f8df372635e8a26ac4ac9716a124ac4e83349f17b612e2b1893b5eaccecc7d812bb4f4fc6b313f57c2035a90f782a4a97b5f5309b6c5798d72b9187f3d411e84041e3671fe35e39fa1887846721c38d501b471990b919d2ad9ca9bc71157a843d75838c1aa4ff0dabd74284709f1f87f324ec4f56eacd70e6bb5e9c3ff719786c4d4284e4cfdc828e0465ca168d04de1d8e884bc31006c112176ef3f8cffd1ae383cf5ea5d60dbbf4a74c942541b8ea4ed6e510893cb83ac90b7f9e15b7dbe796b45f3c5a5e27b01ca46f9b3c876013af4bec92641513fecb7ccefd439d56e21a4fadc52148e821ec4d1949f75a7f0e0f11f537dbbab42abc804b49bd485505def27a5f437a06d0a96571e0800d69df5229bfcd3162b90af3d87751f50c06541fba6e8d6ddc0d16546d0efda7eff96a819048e6a1510ef673fc6fd5a9fa64280eeb935bfe8f91b503941a5676c48d6c37c900281e275fc4cdfc843c86c149a8bb8287d2c14f174888259a1b264a0a79f708a0a5bb38071103c9e632a8be1523ad6402cfb7aabf222312a085628b7ed6d712567562753057b91cd677498ae80183ea868ed52d285dfce7e611a3adfab21c972002dd747e58609c1caa5cac1d9dc393dab20090c9e3147388978e20192c3a319023eb5a20bab5b180b4dc2"}, {0x0, 0x1, "b20360609ee68487"}, {0x0, 0x9, "c139276371aea9b7cdbd32b0a978030a03d23d9fca26dd1213e1010898b256e481da1018059f850b91347107a9dd38da31c1a16267a090b62089ee0d776d581b1bd756ff9010"}, {0x0, 0xbb, "54039a033f4f77534f4bac9b017e6f036a3926d6f8fccce6346d4b2516060f8bd635c5865582d3719faeec25f880fc5389a4b89149982545ca3ada77fa9a5dab4cca6b03b34b5a1cedd01f84a8e1b3c6a4b81ec194d3614e6871868cb3056fa3efc3fb593c6b253a3cbc359c648545203250cc70142ef9f25442d254391a03d44e148e9edd7dcc853d258bc2e88e31651f6eb8cbd4400f200c6d949766494a3890cbbd8b7ccc097f6879c8b2daf199ff9ff030dea73f14d75feb2384c5a840dc61c808a392c20cd35f66210b705863bed38be4eb2821f7f904a17ab5c1d36fd200feeec9091ffa2b1515aefc87f1d5e24c3e57eba0932df5962e8beda60998d42686563b56239930af024a0b7ca850c92f0267e8b52e3891479d2e40081202f256f698f6c88c0d6a0348b58c84668341f5456b108dd1488f528423d569131c9d74b37a55ddf0c0b33b8773097104cd9f93f05302af7ed7bf15f8160bdbde75102d2c530e5dfd3186122928c46e933adf2e7aeab562ef9126a35c60d550dc34af969eff4168a35d1cb22d52b43b5c73c84e6b5688a1f47d88cba3fd4f2e13ead5a1ca9d2b52ddab1ed995a75baf025bf1a37ce5ca0ec73d5012c87981839a2d62e62e4acad61ecb3f979f9d26e526472661e888d0f622f8f15e1f3b63f4392b37810c1fc1800ccff21bb5c5ad062ed1557b0ecc2d92a6b11bd6fefaea38f79ae0956fcd2539e92f5b6e6bab73d96b4ddf955faeb9ac05cc50fd6d34fbb5f5ac5bcd014006b2dc0c4aa4299e37d8bb69e6733107b0fc681118fb37babc35619e5e73b6e7ce772d61ffafdc72314cd66b38b94b0979e5ee382af539c2a69a1f5722a22df3935226d1260bc19317894be1e04954034c0a2ae466f45d4e3eca7e1e1014f4014038366031d4908158554d30bd544f3049da8ee828568da44d4e9807bf92ba8a09d3fc116b59eb27a531e1d98e8ec08c31ffb42b148f5f215a601ea54ab59fd622353302790c4765dd06c8bb5fb2b29f5ff8d0101f816af4d741e8fa953af087654dc2a83517eae123f1269e4ba639d8f402902ddb60b04d2cf650676220389a49fa9b2519959fb1d4dbd1f739d0c64e75644ec08f4791f0701c1a48afa89e02407cb8d92cb71f79a45318b37fe6b1ec6827aad511eb1ede5f0b488d69e562fb10d0f693272eaa3442ad0b43eb9ccaa28861a523f82d3bc9183ae4aa91be1086609d7f1ee82c40453f4feae886250a16a9c28ab719c33a029c2a8c3d38d7e14accd81794e7afa9e9d3a54dc0135680048e1180c5b3b5f765eb6c72eaa470cea40d399b4224afc99616511c379aafe6bd3988aabb26646ff60384a6f207bbe1cfea2e313a3e3db82390ed9afed4c59f543911c759a6d66d1cb6ba3a7852fdb2f4080256ecc34dd41e2f33b4b049019178285acb4b73d9143a1036dbfc401543652bd1aeae0671080bfc2e51420bdf0603a81137ec37e20e20346f0933dd681a902593308d582ee5b8d5966440a997316ef86375aa384bf2826ede7f50358c05736d75f79df1c6b1cbe48edc9d0878b18f8db681116a2528946c3948ebd95a6aefdc7191009163d9aea38488c440f16cca33666acf1c56613cfa34fb45b6886511c985cfd45b426271da579372b16ade924634ea30901e6a661f3544ac33ca3d4f7cbc7280758f2728b1c2d8aaa4f07a488afb72c5385e71703136a93edac8a37a0f605ad0c7e8f887804e66873c5bbe2dd91412972f9b8cf6ee0f0baa12c8c6df8d7072f92e3758c57203eaf8cda12efbcf97eb7e4250f2226dc83b7343038c9a4b246b36a45e00ba6bf2106a8a01a27565dffdc23e6693626b1bd39cf7aab52838dc13b0f97f48ec26fd2b68e590077a89f5a4500fc223bcf9be91fa7b9a1f96bbbb0baac1232d1574957dcaf76f65fa75fda2d3fda114ddc135f53fbe4112fb8929dc9ba709d6fd703d3182bb9fa9df542a312047225449cbbdcc376ddef3ad46ec3f96873bcf058f13e87b2c6775cd38735ae0c07a20c27c23e5fd581365ee633cc8115e3a53ac132a792f48fe6dc5b021df6aaeb0584063966d6969b477dbe50a1a5bf178a4b1bf1c1e3063e4de4c3d9918739401ea94"}]}}}}}}, 0x0) 13:38:54 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 337.351358][T11552] IPv6: addrconf: prefix option has invalid lifetime [ 337.403251][T11550] binder: 11545:11550 unknown command 0 [ 337.414684][T11550] binder: 11545:11550 ioctl c0306201 20000200 returned -22 13:38:55 executing program 2: perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:55 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1, r2}, 0x0, 0x0, 0x0) 13:38:55 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:55 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000240)={0x0, 0x1004}) 13:38:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:55 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:55 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 13:38:55 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 338.101421][T11570] binder: 11565:11570 unknown command 0 [ 338.127369][T11570] binder: 11565:11570 ioctl c0306201 20000200 returned -22 13:38:55 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() socket$inet6_tcp(0xa, 0x1, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 13:38:55 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 13:38:55 executing program 1: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 338.311152][T11588] binder: 11585:11588 unknown command 0 [ 338.329378][T11588] binder: 11585:11588 ioctl c0306201 20000200 returned -22 13:38:56 executing program 2: perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:56 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 13:38:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:56 executing program 3: 13:38:56 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0, r1}, 0x0, 0x0, 0x0) 13:38:56 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:56 executing program 3: 13:38:56 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 339.161613][T11619] binder: 11616:11619 unknown command 25349 [ 339.198382][T11619] binder: 11616:11619 ioctl c0306201 20000200 returned -22 13:38:56 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0, r1}, 0x0, 0x0, 0x0) 13:38:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 339.469900][T11642] binder: 11639:11642 unknown command 25349 [ 339.481393][T11642] binder: 11639:11642 ioctl c0306201 20000200 returned -22 13:38:57 executing program 2: perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:57 executing program 3: socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) chdir(&(0x7f0000000440)='./file0\x00') r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r0, 0x802) lseek(r0, 0x7fff, 0x0) r1 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8400fffffffa) socket$key(0xf, 0x3, 0x2) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r2, 0x3, 0x0, 0x1000f0) open(0x0, 0x40800, 0x0) 13:38:57 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r0, r1}, 0x0, 0x0, 0x0) 13:38:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:57 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="8ea7b15afe5e096878c6d82003c86ca8f1d126f3600e710452d10dee1e8612b6ae37fa151129a73c1e01c77ba42e5b12c4a9d6c634aadebafbd955fbf24b8e72542035001303e8133d2ee598c66a62cc769bd64911629804f1f3e586cedc4356bd7b988fd715ed5287f8dc568ecd08d8e73dec95a4f0739685eb3576abd26a1834ea9b194d182f06bf374c6d1e90e1fd1f21d9b1763a687bc94fe75326d45d6e4f1013b3e9bda5bfab310a767a171e0910fb1e4d1e3cd60d4b92a0fc243cb7c743f04188164bb52a16364f4b9054a8a1555ea8264a479ce9530a0e059fa599dc2635a9864be7f2e319ab8c9e6f2fa472e2b25293fd5cffa06848df6bae881645aee244fa1d21dc2c87ca97ffd58b9743c02d798ffda7c13128575dfffa1aa68f665c289da5ace4f26d73950b9b04716eaa6dd2c6223edc39ea33a1e85b6927d257105596f942e19d238e0c8ce19663fc7c3ca89d4e8e64486ed911888ec8659ec4acbb500c8434ac8a961d41d10d14e17ff64e1b7b87f37c84f1365194caab2badaffdb66a3d62c99ec25cd52059d16083cc83b5800c8445285a919d8169dbee6462011aa8d69b71b2b31b970c14ca39721e7a567cb26b9e195c86ec3922119de1d1f78df5eab6bb9ae8bb5bdbb9839dddb9268221589a8595cc8b7f42e52f549810fd2bc896be21588ac44aad8fa356bda9c2537eee03e789fdd41004806e291fc20a04ebc0b16beb62709fd55189354563c0a024dd5da4009daeeb8f5548f13011751dd0e1fecc0a8035684a93ac1bbba227510a647e2a9a3298010ea8cba0ce5e63a72a5e4c2d0f450e8ad602d19189f133c0aa1e4cb4fb42b9ad0e6b82f1a42e96a6fb58f6dd0f46fa1450fb71576feba01c5f7e89877d98843cc8e3c3c3187a0b604422c4127d4c6dda7fefdd70d58476316049f85ea3f3be4e21aecc2681b9cd97b96920c2730ef35708e336528a3bac137c40db8d64983ae9734f6a88b40bad526b6905f297f5b315b942faf9dbcd679b7d68803ba6cf5f672e46d1b78879d2739b505f5abce139a90fff01000071c27365311287703fdeeb1f0afdf366d15dab1123aeaf1993734e2823897e253d102941c1cdfcfd8c5f95db8d18cd2687ebd7ebd90873da4fe93e4038f69d4fd838bf646ccb52d61985d40ee36fd25064287238fd4798d527d00730b31aae5321f260042affb475efb0bd13ec478073cdec51e1864ad37e93a78f38a5af431f1dbe944ebc8a1e346c46f52ff78ad7b4978945c84370f7fb12a4204039516e31eb402e9f215cae451f35c844a7c234812b1a6f7441e71bedaf809fe484ab496229561c251eb28e9c859782206e81fafe468cb897b0ec652482d90bf68830ea7f032728da5fe589e4cd4648df656ea8a8d883d2d8e0321ffd03a57fc100a655830b2f5380209688b54e7fba12eb1347b2768c6a4a01a3c53b8cd6ea00ea447011e127d95d7cc2c70ca080ad7139c16b501cca0513f77c68e5b8e83b4e5e2af6864c0a0c2f865f9d3f65ce2c23708c8fad4d030156238e23dd9b643363b13a2d7c13b8a6603ce4d195a937d5889fdd39715d25dd20b595eb17e68e860e9d228de3336d102e3f2b4b712c7e37e48197df55943b8e764c89949f69d49089db134579dbe893aa476e0a299314b2c80cda20cc94926b8deb4f6cf353aa0bca15384c26b4ecc58ec1f6e25ea75c8f0b67755077f9cf51741cfbc1d4969ae77d91c5f1e59f62eb3620376afea9bea2efba4b49658b636c4b9e7163d651a8c638bcd5442c1f0ae41bd13fd513bc51c62e8e26270f51a2e8bda1e20997a8a6879e483d9d835e8a08ab258f075d75754a396b73f87bbe339343626f59bdbfb539ef6b339c38b8b7486e94332338442016812015b36f59c0a55d8fe01b7e780ede5106bf01016fc1693269aafe63bc86833e60a4a1fed9becaca0eebfe6408f85ff9111e02768186669feeb19377767b6a13266a4814cf0b59e936b3059a5a6bbe6fdb1ee7b78d54a0fb419f5fae243ee374f8ad64aaa24d2190f2df4331fa9b4566e3bb2d42bff496958c9fc45ba410bdf71296ab1a1206ce4cd994747506379534baab946d358e1d0efe3b2f2e1b8cc9df086979896ee52b2fa617327da2c9fedb40297d34a5b9028da74cb6820c1aec6dfaf1566f478e7f2602ed2d85945b354adad78951656dc8076f2f7e8e2e2bc6f520433ce30f1621b9988bb38936816cd36a55f2fca2e70df228ec53270407959e5e14dc75bc8a9029a1b43126ddc4e117287699bf9ead41c6f318966afe3321ca644d71788dda0b6ad52ee58b3aa6876e82d0b58226b31c468dd6f79ee4b56999ba7c6e1f41879a5e1c57964c5fb1cac83e1cf1951edb3ae048d4f36b69878f2efb6acc34bb8eabc38a657dfa1258a294af262a776349ae5e75c374ed69d024e4431c2c8b689c154c2b77b6aaea2a1f5a199f79df8722340d772405a1f33d1b16cb990028a8c4046a9793da9903ab15a5f24ee35572028f739db141c69155910ab661f511c71046eddc133f0a2c17e401a547170b5c0c1c401ce54cd5e223669dc02a4f8320b7e1e5023004152816a858bb1128db46fb4c42f102895d48d870261fb3ba7d600f32ab638bc3a5cfca405274a240fb7fa1a5626877c7ed78a4f26f3d5085eb62876ae3a8fdb03f1085d1690802d0cf02958630fadd8b5b0085e0f2e17a4c74b5b9f67fb5e693b7541ea5d5cc56b526d689f62e91408fdb6c7633ebdef18b4b56c439cac164526c7a48d895eefd6c3cf524c1146d89c9398195960239502504362d14bd4a74287de6c8c935034693ae12cf3b04fdbeef2d26543d45c562b348eae10c6bc17dbf600db2adf735b3518e7d49c0460af641ffd7e6200e5256f886", 0x801, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, 0x0, r1}, 0x0, 0x0, 0x0) 13:38:57 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:57 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, 0x0, r1}, 0x0, 0x0, 0x0) [ 340.132336][T11664] binder: 11658:11664 unknown command 25349 13:38:57 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 340.172927][T11664] binder: 11658:11664 ioctl c0306201 20000200 returned -22 13:38:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r5, @ANYBLOB="0880000004800000f2ff00000800010075333200c0010200bc0101"], 0x1ec}}, 0x0) 13:38:57 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, 0x0, r1}, 0x0, 0x0, 0x0) 13:38:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:58 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1}, 0x0, 0x0, 0x0) 13:38:58 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x7, 0xb, 0x0, "0000000000000000000000000000000000000000000000e600"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180)={0x200001, 0x101}, 0x8) close(r0) 13:38:58 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1}, 0x0, 0x0, 0x0) 13:38:58 executing program 5: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)='\x00', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000340)="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", 0x801, 0xfffffffffffffffd) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000040)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r1}, 0x0, 0x0, 0x0) 13:38:58 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002008100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() setsockopt$inet6_int(r0, 0x29, 0x12, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0) 13:38:58 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:58 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 341.062742][T11710] binder: 11701:11710 unknown command 287493 [ 341.085702][T11710] binder: 11701:11710 ioctl c0306201 20000200 returned -22 13:38:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 341.379725][T11732] binder: 11730:11732 unknown command 287493 [ 341.394455][T11732] binder: 11730:11732 ioctl c0306201 20000200 returned -22 13:38:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:38:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:59 executing program 3: 13:38:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:38:59 executing program 5: 13:38:59 executing program 5: 13:38:59 executing program 3: 13:38:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:38:59 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 341.961529][T11748] binder: 11744:11748 unknown command 287493 [ 341.984810][T11748] binder: 11744:11748 ioctl c0306201 20000200 returned -22 13:38:59 executing program 5: 13:38:59 executing program 3: 13:39:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:00 executing program 3: 13:39:00 executing program 5: 13:39:00 executing program 5: 13:39:00 executing program 3: 13:39:00 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:00 executing program 5: 13:39:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:01 executing program 3: 13:39:01 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:01 executing program 5: 13:39:01 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(0xffffffffffffffff, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:01 executing program 3: 13:39:01 executing program 5: 13:39:01 executing program 3: 13:39:01 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:01 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:01 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:01 executing program 5: 13:39:01 executing program 3: 13:39:01 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:39:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:01 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:39:02 executing program 3: 13:39:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:39:02 executing program 5: 13:39:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:39:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:39:02 executing program 5: 13:39:02 executing program 3: 13:39:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:39:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:02 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:02 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:39:03 executing program 5: 13:39:03 executing program 3: 13:39:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:39:03 executing program 3: 13:39:03 executing program 5: 13:39:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:03 executing program 5: 13:39:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:39:03 executing program 3: 13:39:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:03 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:04 executing program 5: 13:39:04 executing program 3: 13:39:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 346.954374][T11915] binder: 11911:11915 ioctl 4018620d 0 returned -22 13:39:04 executing program 3: 13:39:04 executing program 5: 13:39:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:04 executing program 5: [ 347.314537][T11931] binder: 11929:11931 ioctl 4018620d 0 returned -22 13:39:04 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:04 executing program 3: 13:39:04 executing program 5: 13:39:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x0, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:04 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:05 executing program 3: 13:39:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:05 executing program 5: 13:39:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x0, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:05 executing program 5: 13:39:05 executing program 3: [ 347.953025][T11954] binder: 11950:11954 ioctl 4018620d 0 returned -22 13:39:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:05 executing program 5: 13:39:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x0, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:05 executing program 3: 13:39:05 executing program 5: 13:39:05 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x0, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:06 executing program 3: 13:39:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 348.857924][T11984] binder_alloc: 11980: binder_alloc_buf, no vma 13:39:06 executing program 5: [ 349.144551][T11999] binder_alloc: 11997: binder_alloc_buf, no vma 13:39:06 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:06 executing program 3: 13:39:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x0, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:06 executing program 5: 13:39:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x0, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:39:07 executing program 5: 13:39:07 executing program 3: 13:39:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x0, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:07 executing program 3: 13:39:07 executing program 5: 13:39:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:39:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:07 executing program 3: 13:39:07 executing program 5: 13:39:07 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f00000001c0), 0x0}, 0x20) 13:39:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:08 executing program 5: 13:39:08 executing program 3: 13:39:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:08 executing program 3: 13:39:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:08 executing program 5: 13:39:08 executing program 3: 13:39:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x0, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:08 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:08 executing program 5: 13:39:08 executing program 3: [ 351.599496][T12087] binder: 12084:12087 ioctl c0306201 0 returned -14 13:39:08 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:09 executing program 5: 13:39:09 executing program 3: 13:39:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:09 executing program 3: [ 352.027559][T12102] binder: 12096:12102 ioctl c0306201 0 returned -14 13:39:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:09 executing program 5: 13:39:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:09 executing program 3: 13:39:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:09 executing program 3: 13:39:09 executing program 5: 13:39:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:09 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 352.688503][T12121] binder: 12118:12121 ioctl c0306201 0 returned -14 13:39:10 executing program 3: 13:39:10 executing program 5: 13:39:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 353.157956][T12142] binder: 12139:12142 ioctl c0306201 20000280 returned -14 13:39:10 executing program 5: 13:39:10 executing program 3: 13:39:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:10 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:10 executing program 5: 13:39:10 executing program 3: 13:39:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 353.597196][T12154] binder: 12151:12154 ioctl c0306201 20000280 returned -14 13:39:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:10 executing program 5: 13:39:11 executing program 3: 13:39:11 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:11 executing program 5: 13:39:11 executing program 3: [ 353.920877][T12169] binder: 12166:12169 ioctl c0306201 20000280 returned -14 13:39:13 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:13 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:13 executing program 5: 13:39:13 executing program 3: 13:39:13 executing program 5: 13:39:13 executing program 3: 13:39:14 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 356.733007][T12186] binder: 12180:12186 unknown command 0 [ 356.753613][T12186] binder: 12180:12186 ioctl c0306201 20000280 returned -22 13:39:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:14 executing program 5: [ 357.065300][T12199] binder: 12196:12199 unknown command 0 [ 357.084206][T12199] binder: 12196:12199 ioctl c0306201 20000280 returned -22 13:39:16 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:16 executing program 3: 13:39:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:16 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:16 executing program 5: 13:39:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x0, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:17 executing program 3: 13:39:17 executing program 5: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) 13:39:17 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 359.898182][T12220] binder: 12217:12220 unknown command 0 [ 359.927045][T12220] binder: 12217:12220 ioctl c0306201 20000280 returned -22 13:39:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x0, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 360.172393][T12238] binder: 12237:12238 unknown command 0 [ 360.190235][T12238] binder: 12237:12238 ioctl c0306201 20000280 returned -22 13:39:20 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:20 executing program 5: mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) utime(&(0x7f0000000140)='./bus/file0\x00', 0x0) 13:39:20 executing program 3: 13:39:20 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x0, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:20 executing program 3: 13:39:20 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:20 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x0, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 362.993489][T12257] binder: 12253:12257 unknown command 0 [ 362.993990][T12256] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 363.018028][T12257] binder: 12253:12257 ioctl c0306201 20000280 returned -22 13:39:20 executing program 3: 13:39:20 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:20 executing program 5: [ 363.346041][T12273] binder: 12272:12273 unknown command 0 [ 363.364501][T12273] binder: 12272:12273 ioctl c0306201 20000280 returned -22 13:39:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x0, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:23 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) 13:39:23 executing program 3: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RREADLINK(r0, 0x0, 0x10) fcntl$setpipe(r0, 0x407, 0x0) 13:39:23 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[{@errors_continue='errors=continue'}]}) 13:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:23 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) 13:39:23 executing program 3: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1c35f8, 0x0, 0xf0000000000e803) [ 365.946076][T12291] REISERFS warning (device loop5): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 365.946076][T12291] 13:39:23 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 366.001103][T12293] binder: 12286:12293 unknown command 25349 [ 366.014559][T12293] binder: 12286:12293 ioctl c0306201 20000280 returned -22 13:39:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x0, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:23 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) [ 366.163736][T12291] REISERFS warning (device loop5): super-6506 reiserfs_getopt: bad value "continue" for option "errors" [ 366.163736][T12291] [ 366.183969][T12305] binder: 12304:12305 unknown command 25349 [ 366.215900][T12305] binder: 12304:12305 ioctl c0306201 20000280 returned -22 13:39:23 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x0, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0563"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:26 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f00000029c0)=[{&(0x7f0000001800)="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", 0xe00}]) 13:39:26 executing program 3: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x24, 0x400, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000080), 0x1081, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x3, r1}, 0x38) 13:39:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:39:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:39:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 369.226118][T12340] Dev loop5: unable to read RDB block 7 [ 369.236550][T12340] loop5: unable to read partition table [ 369.251908][T12340] loop5: partition table beyond EOD, truncated [ 369.292981][T12340] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 369.317524][T12342] binder: 12333:12342 unknown command 25349 13:39:26 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 369.348523][T12342] binder: 12333:12342 ioctl c0306201 20000280 returned -22 13:39:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:39:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 369.453457][T12340] Dev loop5: unable to read RDB block 7 [ 369.462113][T12340] loop5: unable to read partition table [ 369.500523][T12340] loop5: partition table beyond EOD, truncated 13:39:26 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) [ 369.541517][T12340] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 369.686065][T12362] binder: 12360:12362 unknown command 287493 [ 369.711511][T12362] binder: 12360:12362 ioctl c0306201 20000280 returned -22 [ 370.774261][ T0] NOHZ: local_softirq_pending 08 [ 371.416275][ T0] NOHZ: local_softirq_pending 08 [ 371.421268][ T0] NOHZ: local_softirq_pending 08 13:39:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:29 executing program 5: chdir(0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) 13:39:29 executing program 3: socket$inet6(0xa, 0x802, 0x0) setitimer(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) ioctl(r0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setresgid(0x0, 0x0, 0x0) setfsgid(0x0) setresgid(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f00000003c0)={&(0x7f0000ff8000/0x7000)=nil, 0x7, 0x4, 0x2, &(0x7f0000ffb000/0x4000)=nil, 0x4}) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9281a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{0x0}], 0x1, 0x0) 13:39:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) 13:39:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 372.327167][T12388] syz-executor.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed 13:39:29 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:29 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:29 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) [ 372.439305][T12383] binder: 12381:12383 unknown command 287493 [ 372.460901][T12383] binder: 12381:12383 ioctl c0306201 20000280 returned -22 13:39:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="056304"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) [ 372.676286][T12402] raw_sendmsg: syz-executor.5 forgot to set AF_INET. Fix it! 13:39:30 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:30 executing program 1: r0 = socket(0x400000000010, 0x2, 0x0) recvmsg(r0, &(0x7f00000027c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/144, 0x90}, 0x1) write(r0, &(0x7f0000000000)="2400000021002551071c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) [ 372.828724][T12403] binder: 12400:12403 unknown command 287493 [ 372.855612][T12403] binder: 12400:12403 ioctl c0306201 20000280 returned -22 13:39:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:32 executing program 1: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:32 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:32 executing program 3: sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0xac, 0x3, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_MARK_MASK={0x8}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xb, 0x1, 'amanda\x00'}}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @private2}}}]}]}, 0xac}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x23, &(0x7f0000000240)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) [ 375.489871][T12425] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 375.547988][T12425] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 375.573571][T12425] EXT4-fs error (device loop3): ext4_fill_super:4567: inode #2: comm syz-executor.3: iget: root inode unallocated [ 375.590396][T12425] EXT4-fs (loop3): get root inode failed [ 375.597008][T12425] EXT4-fs (loop3): mount failed 13:39:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:32 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x100, 0x7}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/87, 0x57}, {&(0x7f0000000440)=""/202, 0xca}], 0x2}, 0x2}, {{&(0x7f00000003c0)=@can, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/92, 0x5c}}, {{&(0x7f0000000ec0)=@tipc=@id, 0x80, &(0x7f00000023c0), 0x0, &(0x7f0000002440)=""/79, 0x4f}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/88, 0x58}, 0x7e}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1a7) io_submit(0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0xf, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000002e40)=ANY=[@ANYBLOB="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"/1765], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x9) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) 13:39:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:33 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x2, 0x0) 13:39:33 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:35 executing program 3: r0 = creat(&(0x7f00000003c0)='./bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x1}) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x2, 0x0, 0x4, 0x2, 0xffffffffffffffff}) 13:39:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/239, 0xef}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}, {&(0x7f00000048c0)=""/218, 0xda}], 0x6, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x2, 0x0) 13:39:35 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:35 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) 13:39:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 13:39:36 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1000000001e, &(0x7f0000000100)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x40) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) close(r1) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0}, 0x0) tkill(r0, 0x5000000000016) 13:39:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) 13:39:36 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) [ 379.061441][T12491] binder: 12487:12491 ioctl c0306201 0 returned -14 13:39:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:38 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 13:39:38 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x1}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) read(r0, &(0x7f00000000c0)=""/42, 0x2a) 13:39:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:38 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="18"], 0x18}}], 0x1, 0x0) 13:39:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setparam(r2, 0x0) sendmmsg(r1, &(0x7f0000007f00)=[{{&(0x7f00000056c0)=@can, 0x3000, &(0x7f00000000c0)}}, {{&(0x7f0000005900)=@pppoe={0x18, 0x0, {0x0, @link_local, 'syzkaller0\x00'}}, 0x80, &(0x7f0000007ac0), 0x1a9, &(0x7f0000007b00)}}], 0x3fffffffffffe0d, 0x0) [ 381.821011][T12519] binder: 12511:12519 ioctl c0306201 0 returned -14 13:39:39 executing program 1: 13:39:39 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) 13:39:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) readv(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:39 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:39 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 13:39:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:39 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:40 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 13:39:40 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:40 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) readv(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 13:39:40 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x1000000, 0x0}) 13:39:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:41 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:41 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:41 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) readv(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:41 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x1000000, 0x0}) 13:39:41 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:42 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:42 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:42 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x1000000, 0x0}) 13:39:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:42 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:42 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) readv(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:42 executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:42 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:43 executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:43 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:43 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:43 executing program 3: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:43 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x1000000, 0x0}) 13:39:43 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:43 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:43 executing program 3: r0 = socket$unix(0x1, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:44 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:44 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) readv(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:44 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:44 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:44 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:44 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:44 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) readv(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:45 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:45 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:45 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:45 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:45 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:45 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:45 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) readv(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:46 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:46 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:46 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:46 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:46 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, 0x0, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:46 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:47 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:47 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) creat(&(0x7f0000000080)='./bus\x00', 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) 13:39:47 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080), 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:47 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:47 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:47 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:47 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080), 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:47 executing program 0: perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/66, 0x42) 13:39:47 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) 13:39:47 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:47 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080), 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ftruncate(0xffffffffffffffff, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:48 executing program 0: perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/66, 0x42) 13:39:48 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) 13:39:48 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:49 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:49 executing program 0: perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/66, 0x42) 13:39:49 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:49 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x0) 13:39:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/66, 0x42) 13:39:49 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ftruncate(0xffffffffffffffff, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:49 executing program 5: creat(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:49 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:39:49 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/66, 0x42) 13:39:49 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:50 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/66, 0x42) 13:39:50 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:39:50 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:50 executing program 5: creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:50 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) ftruncate(0xffffffffffffffff, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:50 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) 13:39:50 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:50 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, 0x0, 0x0) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:51 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:51 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) 13:39:51 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:51 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:51 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) 13:39:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:51 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:51 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:52 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:52 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0xd}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x100000001, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xff64, 0x0}, 0xffffffffffffff36) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r1, 0x0, 0x0}, 0x20) 13:39:52 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:52 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:52 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:52 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:52 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:52 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000002c0)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80005}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="ea0010e800440f20c066350e000000440f22c00f21720f21c1c3f40f3803760f650f01c26a06ea00005600", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfe51) connect$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x3f, 0x6, 0x0, 0x0, 0x5, 0x4d04, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0x1ff}, 0x51500, 0x6, 0xffff, 0x0, 0x120, 0xf4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x84000) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:39:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:52 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:53 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:53 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:53 executing program 4: bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) pipe(&(0x7f00000002c0)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003b80), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000040)={0x80005}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000000)="ea0010e800440f20c066350e000000440f22c00f21720f21c1c3f40f3803760f650f01c26a06ea00005600", 0x2b}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0xfe51) connect$inet(r3, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x3f, 0x6, 0x0, 0x0, 0x5, 0x4d04, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x6, 0x1ff}, 0x51500, 0x6, 0xffff, 0x0, 0x120, 0xf4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SG_FREE(0xffffffffffffffff, 0x40106439, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x84000) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @local, 0x8}, 0x1c) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 13:39:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:53 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:53 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, 0x0, 0x0) 13:39:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:54 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, 0x0, 0x0) 13:39:54 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:54 executing program 4: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x1}}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) 13:39:54 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, 0x0, 0x0) 13:39:54 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:54 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:54 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:54 executing program 4: mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f0000000240)='overlay\x00', 0x1ab0434, 0x0) 13:39:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:55 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:55 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 398.390566][T13069] EXT4-fs (sda1): re-mounted. Opts: (null) 13:39:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) 13:39:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:56 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0xfffffffd, 0x4) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 13:39:56 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:56 executing program 4: mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x2812, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2005000, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0xd800, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0/file0/file0\x00', &(0x7f0000000240)='overlay\x00', 0x1ab0434, 0x0) 13:39:56 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:56 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000100)={0x6, 0x8d}, 0x0) r0 = getpid() sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x6}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0x38, 0x0, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r3, &(0x7f0000002ec0), 0x29e, 0x1a, &(0x7f00000001c0)={0x77359400}) 13:39:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 399.356597][T13091] EXT4-fs (sda1): re-mounted. Opts: (null) 13:39:56 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) add_key(0x0, 0x0, &(0x7f0000000140)="dee7030022cf9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622dba33ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3", 0x55, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88", 0x12}], 0x1) splice(r0, 0x0, r2, 0x0, 0x80fffffffb, 0x0) 13:39:56 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:58 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000840)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000840)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) close(r3) 13:39:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 13:39:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xef, 0x0, 0x1, 0xd6, 0x6, @local}, 0x14) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1070c5, 0x1) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) sendfile(r0, r1, 0x0, 0x1c575) 13:39:58 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:58 executing program 4: prctl$PR_SET_FPEXC(0xc, 0x20000) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667", 0x12}], 0x1) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000180)="f016cdc64e98e5553847db6d9617cdfa2d8d78cee4d95b1c6859c0975b198a5ef70f370ec91d4d4423ac4e94535f2909b367c7f58a539747fca629e4fc43f1bfeb90d819ad694411a54c047cde4c8db862f3da762fef93427c4cc341a6", 0x5d, 0xfffffffffffffffb) 13:39:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 13:39:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:58 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x400086) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:39:59 executing program 2: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x807284, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000340)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 13:39:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) r2 = getpgrp(0xffffffffffffffff) r3 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r2, 0x7, r0, &(0x7f0000000100)={r1, 0xffffffffffffffff, 0xfffffffffffffffd}) 13:39:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:59 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 13:39:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:39:59 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:39:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:39:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:39:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 13:39:59 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) [ 402.702665][T13206] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 402.737850][T13206] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 402.749248][T13206] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 402.759418][T13206] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 402.769525][T13206] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:00 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:40:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)) [ 402.801691][T13206] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:00 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:40:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4000000000000071, 0x0) 13:40:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x0, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:00 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:40:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 403.443722][T13256] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 403.452157][T13256] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 403.460734][T13256] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 403.471387][T13256] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 403.482070][T13256] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 403.525662][T13256] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:00 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) read(r1, &(0x7f00000000c0)=""/66, 0x42) 13:40:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 13:40:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/66, 0x42) 13:40:01 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x0) 13:40:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:01 executing program 0: perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/66, 0x42) 13:40:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 404.420199][T13309] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 404.469034][T13309] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 404.530671][T13309] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 404.583377][T13309] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 404.616045][T13309] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 404.655781][T13309] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:02 executing program 0: perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(r0, &(0x7f00000000c0)=""/66, 0x42) 13:40:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:02 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/66, 0x42) 13:40:02 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x9000, 0x0, 0x0, 0x5, 0x5, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13:40:02 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/66, 0x42) 13:40:02 executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 405.323499][T13345] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 405.332010][T13345] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 405.341395][T13345] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 405.352381][T13345] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 405.362951][T13345] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:02 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(0xffffffffffffffff, &(0x7f00000000c0)=""/66, 0x42) 13:40:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) [ 405.396123][T13345] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:02 executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:02 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, 0x0, 0x0) 13:40:03 executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 405.896290][T13376] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 405.984691][T13376] EXT4-fs (loop2): failed to parse options in superblock: /dE 13:40:03 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, 0x0, 0x0) 13:40:03 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 406.063849][T13376] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 406.114361][T13376] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 406.165228][T13376] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:03 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, 0x0, 0x0) [ 406.241018][T13376] EXT4-fs (loop2): corrupt root inode, run e2fsck 13:40:03 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 406.288025][T13376] EXT4-fs (loop2): mount failed 13:40:03 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x7ffffc, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) fallocate(r0, 0x100000003, 0x0, 0x7) 13:40:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:04 executing program 0: 13:40:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:04 executing program 0: 13:40:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 407.189317][T13418] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value 13:40:04 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 407.353387][T13418] EXT4-fs (loop2): failed to parse options in superblock: /dE 13:40:04 executing program 0: [ 407.474660][T13418] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:40:04 executing program 0: [ 407.567050][T13418] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:40:04 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 407.643655][T13418] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:05 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}}]}, 0x60}}, 0x0) pipe(0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) [ 407.727406][T13418] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 407.798935][T13418] EXT4-fs (loop2): mount failed 13:40:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:05 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:05 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:05 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:06 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:06 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 408.809003][T13451] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 408.837693][T13451] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 408.882339][T13451] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:40:06 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) [ 409.035887][T13451] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 409.159269][T13451] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:06 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 409.263133][T13451] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 409.314108][T13451] EXT4-fs (loop2): mount failed 13:40:06 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:07 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:07 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:07 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:07 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:07 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:07 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) [ 410.536215][T13494] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 410.569256][T13494] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 410.661586][T13494] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:40:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 410.762098][T13494] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 410.772369][T13494] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 410.820045][T13494] EXT4-fs error (device loop2): ext4_fill_super:4567: inode #2: comm syz-executor.2: iget: root inode unallocated 13:40:08 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) [ 410.906404][T13494] EXT4-fs (loop2): get root inode failed [ 410.932437][T13494] EXT4-fs (loop2): mount failed 13:40:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:08 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:08 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) [ 411.591083][T13535] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 411.657203][T13535] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 411.782389][T13535] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 411.812051][T13535] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:40:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:09 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:09 executing program 0: creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) [ 411.842586][T13535] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 411.872148][T13535] EXT4-fs error (device loop2): ext4_fill_super:4567: inode #2: comm syz-executor.2: iget: root inode unallocated [ 411.903091][T13535] EXT4-fs (loop2): get root inode failed [ 411.908770][T13535] EXT4-fs (loop2): mount failed 13:40:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:09 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:09 executing program 0: creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) 13:40:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:09 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:09 executing program 0: creat(&(0x7f00000001c0)='./bus\x00', 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) [ 412.373423][T13563] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 412.461990][T13563] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 412.499834][T13563] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:40:09 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 412.539218][T13563] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 412.553318][T13563] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:09 executing program 0: write$input_event(0xffffffffffffffff, &(0x7f0000000080), 0x18) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) [ 412.669657][T13563] EXT4-fs error (device loop2): ext4_fill_super:4567: inode #2: comm syz-executor.2: iget: root inode unallocated [ 412.729336][T13563] EXT4-fs (loop2): get root inode failed [ 412.792501][T13563] EXT4-fs (loop2): mount failed 13:40:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x400086) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r2, 0x8008200) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000300)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:10 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:10 executing program 0: write$input_event(0xffffffffffffffff, &(0x7f0000000080), 0x18) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) 13:40:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:10 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:11 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:11 executing program 0: write$input_event(0xffffffffffffffff, &(0x7f0000000080), 0x18) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) [ 413.820604][T13603] EXT4-fs (loop2): bad geometry: block count 1080 exceeds size of device (1 blocks) 13:40:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:11 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:11 executing program 0: r0 = creat(0x0, 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) [ 414.246955][T13629] EXT4-fs (loop2): bad geometry: block count 1080 exceeds size of device (1 blocks) 13:40:12 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:12 executing program 0: r0 = creat(0x0, 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54f"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000041c0)=[{{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000800)=""/55, 0x37}, {0x0}, {&(0x7f0000001100)=""/4096, 0x1000}, {0x0}], 0x4}, 0x401}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:12 executing program 0: r0 = creat(0x0, 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 415.040394][T13654] EXT4-fs (loop2): bad geometry: block count 1080 exceeds size of device (1 blocks) 13:40:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:12 executing program 0: creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000080), 0x18) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) 13:40:12 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 415.392416][T13674] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 415.418535][T13674] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 415.427070][T13674] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 415.437371][T13674] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 415.447565][T13674] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 415.485736][T13674] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:13 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:13 executing program 0: creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000080), 0x18) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) 13:40:13 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) socket$inet6(0xa, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:13 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000280)={0x38, 0x2, 0x0, 0x0, 0x8}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:13 executing program 0: creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000000080), 0x18) r0 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) 13:40:13 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:13 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) getpid() mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 416.414155][T13703] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value 13:40:13 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) [ 416.471502][T13703] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 416.527556][T13703] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 416.607811][T13703] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 416.679119][T13703] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 416.728725][T13703] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:14 executing program 3: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8d, 0x400000008d}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:14 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:14 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:14 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:14 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) 13:40:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], 0x0, 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 417.668023][T13741] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 417.701179][T13741] EXT4-fs (loop2): failed to parse options in superblock: /dE 13:40:15 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(0x0, 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) [ 417.743535][T13741] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 417.771590][T13741] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 417.782510][T13741] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:15 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) [ 417.798839][T13741] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:15 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:15 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:15 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(0x0, 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:15 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) [ 418.286186][T13776] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 418.296464][T13776] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 418.305007][T13776] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 418.315156][T13776] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 418.325373][T13776] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 418.362847][T13776] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:16 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:16 executing program 3: mkdir(0x0, 0x0) 13:40:16 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:16 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(0x0, 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:16 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:16 executing program 3: mkdir(0x0, 0x0) 13:40:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13:40:16 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:16 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13:40:16 executing program 3: mkdir(0x0, 0x0) [ 419.031810][T13796] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 419.084046][T13796] EXT4-fs (loop2): failed to parse options in superblock: /dE 13:40:16 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) [ 419.116037][ T28] audit: type=1804 audit(1591018816.368:18): pid=13811 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir680176975/syzkaller.LNcY6F/307/bus" dev="sda1" ino=15702 res=1 [ 419.173922][T13796] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 419.226560][T13796] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 419.260386][ T28] audit: type=1804 audit(1591018816.508:19): pid=13818 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir680176975/syzkaller.LNcY6F/308/bus" dev="sda1" ino=15825 res=1 [ 419.264159][T13796] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 419.364220][T13796] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:17 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:17 executing program 3: 13:40:17 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) 13:40:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 13:40:17 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:17 executing program 3: [ 420.082008][ T28] audit: type=1804 audit(1591018817.338:20): pid=13839 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir680176975/syzkaller.LNcY6F/309/bus" dev="sda1" ino=16131 res=1 13:40:17 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) 13:40:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:17 executing program 3: [ 420.271235][T13841] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value 13:40:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:17 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) [ 420.353991][T13841] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 420.410393][T13841] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 420.453787][T13841] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 420.475861][T13841] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 420.499423][T13841] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:18 executing program 1: syz_mount_image$vfat(0x0, &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:18 executing program 3: 13:40:18 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000}, 0x28) 13:40:18 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0xfffffeff000) 13:40:18 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:18 executing program 3: 13:40:18 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x40) 13:40:19 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x0, 0x0, 0xfffffeff000) 13:40:19 executing program 3: [ 421.832987][T13885] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 421.943383][T13885] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 421.965237][T13885] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock 13:40:19 executing program 3: 13:40:19 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x40) [ 422.078351][T13885] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 422.167432][T13885] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 422.254060][T13885] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:20 executing program 3: 13:40:20 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x0, 0x0, 0xfffffeff000) 13:40:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x40) 13:40:20 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:20 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:20 executing program 3: 13:40:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x8000}, 0x40) 13:40:20 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x0, 0x0, 0xfffffeff000) [ 423.635301][T13923] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value 13:40:20 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x8000}, 0x40) 13:40:20 executing program 3: 13:40:21 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0x0) [ 423.700937][T13923] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 423.735876][T13923] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 423.748501][T13923] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 423.758918][T13923] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 423.772084][T13923] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:22 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:22 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x8000}, 0x40) 13:40:22 executing program 3: 13:40:22 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0x0) 13:40:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:22 executing program 3: 13:40:22 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x7, 0x0, &(0x7f00000000c0)="61df712bc884fe", 0x0, 0x8000}, 0x40) 13:40:22 executing program 0: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$input_event(r0, &(0x7f0000000080), 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x161042, 0x0) fallocate(r1, 0x20, 0x0, 0x0) 13:40:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 425.099916][T13963] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 425.129809][T13963] EXT4-fs (loop2): failed to parse options in superblock: /dE 13:40:22 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x7, 0x0, &(0x7f00000000c0)="61df712bc884fe", 0x0, 0x8000}, 0x40) 13:40:22 executing program 3: [ 425.188783][T13963] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 425.199598][T13963] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 425.210139][T13963] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 425.223698][T13963] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', 0x0, 0xfffffffffffff57a, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:23 executing program 0: 13:40:23 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:23 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x7, 0x0, &(0x7f00000000c0)="61df712bc884fe", 0x0, 0x8000}, 0x40) 13:40:23 executing program 3: 13:40:23 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:23 executing program 0: 13:40:23 executing program 3: 13:40:23 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xb, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780", 0x0, 0x8000}, 0x40) 13:40:23 executing program 0: [ 426.568149][T14001] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 426.596615][T14001] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 426.658099][T14001] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 426.762824][T14001] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 426.797742][T14001] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:24 executing program 3: 13:40:24 executing program 0: [ 426.859165][T14001] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:24 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:24 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xb, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780", 0x0, 0x8000}, 0x40) 13:40:24 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:24 executing program 0: 13:40:24 executing program 3: 13:40:25 executing program 0: 13:40:25 executing program 3: 13:40:25 executing program 3: 13:40:25 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xb, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780", 0x0, 0x8000}, 0x40) 13:40:25 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:25 executing program 0: [ 428.083838][T14045] FAT-fs (loop1): bogus number of reserved sectors [ 428.127368][T14045] FAT-fs (loop1): Can't find a valid FAT filesystem [ 428.319374][T14054] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 428.369747][T14054] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 428.424652][T14054] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 428.434759][T14054] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 428.445346][T14054] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 428.469121][T14054] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:26 executing program 0: 13:40:26 executing program 3: 13:40:26 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xd, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2", 0x0, 0x8000}, 0x40) 13:40:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:26 executing program 0: 13:40:26 executing program 3: 13:40:26 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xd, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2", 0x0, 0x8000}, 0x40) [ 429.281567][T14077] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value 13:40:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:26 executing program 0: [ 429.349076][T14077] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 429.358750][T14077] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 429.370017][T14077] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 429.380712][T14077] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:26 executing program 3: [ 429.397114][T14077] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue [ 429.749719][T14099] FAT-fs (loop1): bogus number of reserved sectors [ 429.763230][T14099] FAT-fs (loop1): Can't find a valid FAT filesystem 13:40:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:27 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xd, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2", 0x0, 0x8000}, 0x40) 13:40:27 executing program 3: 13:40:27 executing program 0: 13:40:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000240)=[{&(0x7f00000000c0)="eb3c906d6b66731f66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:27 executing program 3: 13:40:27 executing program 0: 13:40:28 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0}, 0x40) [ 430.778279][T14112] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value 13:40:28 executing program 3: open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0xd000000, [], [{}, {0x801}]}) [ 430.865180][T14112] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 430.894266][T14112] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 430.915967][T14112] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 430.930072][T14112] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:40:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 430.964664][T14112] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue [ 430.998348][T14124] FAT-fs (loop1): bogus number of reserved sectors [ 431.041869][T14124] FAT-fs (loop1): Can't find a valid FAT filesystem 13:40:28 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0}, 0x40) 13:40:28 executing program 0: clone(0x800100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0xd7a69000, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) [ 431.294656][ T28] audit: type=1804 audit(1591018828.548:21): pid=14136 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir450339402/syzkaller.8bGVPI/275/bus" dev="sda1" ino=16365 res=1 13:40:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 431.379432][T14141] ptrace attach of "/root/syz-executor.0"[14138] was attempted by "/root/syz-executor.0"[14141] 13:40:28 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0}, 0x40) 13:40:28 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000300)={r1}, 0x8) [ 431.453316][T14138] IPVS: ftp: loaded support on port[0] = 21 [ 431.535994][T14146] IPVS: ftp: loaded support on port[0] = 21 [ 431.757885][T14152] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 431.849701][T14152] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 431.929539][T14152] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 431.952992][T14152] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 431.969031][T14152] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 432.054374][T14152] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue 13:40:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:29 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)='+', 0x1}], 0x1, 0x0) 13:40:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0}, 0x40) 13:40:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="2321202e2f66696c6552b6fc0a"], 0x17) 13:40:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0}, 0x40) 13:40:29 executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0xffffffff, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) [ 432.716358][T14194] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value [ 432.730259][T14194] EXT4-fs (loop2): failed to parse options in superblock: /dE [ 432.739779][T14194] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 432.752192][T14194] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 432.765658][T14194] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 432.832629][T14194] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue [ 432.860744][T14215] FAT-fs (loop1): bogus number of reserved sectors [ 432.867519][T14215] FAT-fs (loop1): Can't find a valid FAT filesystem 13:40:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 13:40:33 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0}, 0x40) 13:40:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140), 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:33 executing program 3: open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa, 0x5}}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3) r1 = dup(0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x40000) 13:40:33 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) [ 436.476752][T14250] FAT-fs (loop1): bogus number of reserved sectors 13:40:33 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/1281], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) 13:40:33 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) [ 436.519703][T14250] FAT-fs (loop1): Can't find a valid FAT filesystem 13:40:33 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140), 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:33 executing program 0: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) exit_group(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'io'}]}, 0x4) [ 436.664674][T14246] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value 13:40:34 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000024001b00"/20, @ANYRES32=r2, @ANYBLOB="00000400ffffffff"], 0x34}}, 0x0) 13:40:34 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) [ 436.753846][T14246] EXT4-fs (loop2): failed to parse options in superblock: /dE 13:40:34 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="f4", 0x1}], 0x1}}], 0x4000000000001ea, 0x0) [ 436.909792][T14246] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 436.989469][T14281] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.993004][T14246] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock 13:40:34 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000050000003500000000ab4d00850000002a00000095000000000000006c39295f6e9ce150b7ad86ec4f136a632687f0ac1d74e75c0e40532e56654597cf04f2963bade3e1797f9b7a71708bb143f54fa85e69f6b3"], &(0x7f0000000140)='GPL\x00', 0x0, 0xa0, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) [ 437.090155][T14284] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 437.107678][T14246] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 437.176878][T14246] EXT4-fs: failed to create workqueue [ 437.219599][T14246] EXT4-fs (loop2): mount failed 13:40:34 executing program 3: open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0xd000000, [], [{}, {0x801, 0x0, 0x80000001}]}) 13:40:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:34 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140), 0x4) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 13:40:34 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:34 executing program 4: creat(&(0x7f0000000380)='./bus\x00', 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x40000000001e, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mbind(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x3) 13:40:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}) 13:40:34 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x8200) fcntl$setstatus(r0, 0x4, 0x6100) write$binfmt_misc(r0, 0x0, 0x1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='g'], 0xfde0) [ 437.556756][ T28] audit: type=1804 audit(1591018834.809:22): pid=14299 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297460219/syzkaller.kO8LG9/354/bus" dev="sda1" ino=16364 res=1 13:40:35 executing program 4: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000001500)="8a", 0x1, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffb, r1, 0x0) 13:40:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 437.707074][ T28] audit: type=1804 audit(1591018834.849:23): pid=14299 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir297460219/syzkaller.kO8LG9/354/bus" dev="sda1" ino=16364 res=1 13:40:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:40:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x3c) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000040)="b125") 13:40:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001900070200000000000008000a"], 0x1c}}, 0x0) [ 437.749799][T14312] FAT-fs (loop1): bogus number of reserved sectors [ 437.749916][T14312] FAT-fs (loop1): Can't find a valid FAT filesystem [ 437.755378][ T28] audit: type=1804 audit(1591018834.869:24): pid=14299 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir297460219/syzkaller.kO8LG9/354/bus" dev="sda1" ino=16364 res=1 13:40:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 437.797779][ T28] audit: type=1800 audit(1591018835.049:25): pid=14315 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15705 res=0 [ 437.799221][ T28] audit: type=1800 audit(1591018835.049:26): pid=14315 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15705 res=0 [ 437.815387][T14300] EXT4-fs (loop2): Unrecognized mount option "/dE" or missing value 13:40:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, {}, {}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2}) [ 437.815402][T14300] EXT4-fs (loop2): failed to parse options in superblock: /dE 13:40:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) [ 437.818655][T14300] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 437.818668][T14300] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 437.818680][T14300] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 437.866460][T14300] EXT4-fs (loop2): mounted filesystem without journal. Opts: /dE; ,errors=continue [ 438.515674][T14338] EXT4-fs (loop2): bad geometry: block count 1080 exceeds size of device (1 blocks) 13:40:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000240), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:40:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:41:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}) 13:41:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 13:41:35 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x2}) 13:41:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYBLOB="00000000000000000000110000002c00038008000200aa6c392830ed33c7000000000800020000000011080002000000160008000200000000000800010000800c0001006574683a776731002400038008000300000000000800010000000000080003000000000000800000000000003000058008000100756470001c00028008000200000000000800019e000000000800020000000000080001"], 0xa4}}, 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a943", 0x79, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 13:41:35 executing program 1: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x0, &(0x7f0000000240), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x400086) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x8008200) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000400)=ANY=[], 0x87ffffc) 13:41:35 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 13:41:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) 13:41:36 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000240), 0x0, 0x2, 0x0) [ 439.043856][T14358] EXT4-fs (loop2): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 439.207969][T14369] FAT-fs (loop1): bogus number of reserved sectors [ 439.207982][T14369] FAT-fs (loop1): Can't find a valid FAT filesystem [ 452.052876][ T0] NOHZ: local_softirq_pending 08 [ 498.452185][T14391] FAT-fs (loop1): bogus number of reserved sectors [ 498.452198][T14391] FAT-fs (loop1): Can't find a valid FAT filesystem [ 498.702590][T14398] EXT4-fs (loop2): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 501.637369][ T292] tipc: TX() has been purged, node left! [ 502.181341][T14457] IPVS: ftp: loaded support on port[0] = 21 [ 502.333216][T14457] chnl_net:caif_netlink_parms(): no params data found [ 502.449311][T14457] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.449429][T14457] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.450742][T14457] device bridge_slave_0 entered promiscuous mode [ 502.454091][T14457] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.454200][T14457] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.455339][T14457] device bridge_slave_1 entered promiscuous mode [ 502.502021][T14457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.507298][T14457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.541482][T14457] team0: Port device team_slave_0 added [ 502.544993][T14457] team0: Port device team_slave_1 added [ 502.701463][T14457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.701482][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.701491][T14457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.704777][T14457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.704795][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.704804][T14457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.789997][T14457] device hsr_slave_0 entered promiscuous mode [ 502.826952][T14457] device hsr_slave_1 entered promiscuous mode [ 502.865664][T14457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.865711][T14457] Cannot create hsr debugfs directory [ 503.155188][T14457] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.155277][T14457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.155982][T14457] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.156052][T14457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.249414][T14457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.388355][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 503.389787][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.390892][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.394143][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 503.407688][T14457] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.414068][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 503.414734][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 503.415215][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.415257][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.426949][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 503.427630][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 503.428804][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.428846][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.435311][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 503.450081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 503.459977][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.460989][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.461818][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.473157][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 503.474181][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 503.485246][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.486756][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.497564][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.498266][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.503832][T14457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.534044][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 503.534181][ T2692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.549473][T14457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.669505][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 503.670325][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 503.707428][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 503.708467][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 503.709341][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 503.709949][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 503.726368][T14457] device veth0_vlan entered promiscuous mode [ 503.757909][T14457] device veth1_vlan entered promiscuous mode [ 503.788949][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 503.789687][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 503.790339][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 503.791017][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 503.798790][T14457] device veth0_macvtap entered promiscuous mode [ 503.807614][T14457] device veth1_macvtap entered promiscuous mode [ 503.951950][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 503.951990][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.952001][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 503.952007][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.952017][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 503.952023][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.952034][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 503.952041][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.952051][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 503.952057][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.952068][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 503.952074][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.953849][T14457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.953958][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 503.954714][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 503.955573][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 503.956315][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 503.973545][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.973554][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.973565][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.973572][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.973582][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.973588][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.973599][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.973611][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.973621][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.973628][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.973638][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 503.973644][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.981925][T14457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.982095][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 503.983101][T11182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 505.780640][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.780770][ T292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.783384][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.783404][ T292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.790736][ T292] device bridge_slave_1 left promiscuous mode [ 505.791394][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.842875][ T292] device bridge_slave_0 left promiscuous mode [ 505.843060][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.908951][ T292] device veth1_macvtap left promiscuous mode [ 505.909221][ T292] device veth0_macvtap left promiscuous mode [ 505.909616][ T292] device veth1_vlan left promiscuous mode [ 505.909967][ T292] device veth0_vlan left promiscuous mode [ 514.018768][ T292] device hsr_slave_0 left promiscuous mode [ 514.046165][ T292] device hsr_slave_1 left promiscuous mode [ 514.188789][ T292] team0 (unregistering): Port device team_slave_1 removed [ 514.200790][ T292] team0 (unregistering): Port device team_slave_0 removed [ 514.219855][ T292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.262997][ T292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.452921][ T292] bond0 (unregistering): Released all slaves [ 535.245209][ T0] NOHZ: local_softirq_pending 08 [ 557.642114][ T0] NOHZ: local_softirq_pending 08 [ 596.035720][ T1145] INFO: task syz-executor.0:14311 blocked for more than 143 seconds. [ 596.035745][ T1145] Not tainted 5.7.0-syzkaller #0 [ 596.035751][ T1145] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.035758][ T1145] syz-executor.0 D25992 14311 7050 0x80004002 [ 596.035781][ T1145] Call Trace: [ 596.036073][ T1145] __schedule+0x937/0x1ff0 [ 596.036110][ T1145] ? __sched_text_start+0x8/0x8 [ 596.036134][ T1145] schedule+0xd0/0x2a0 [ 596.036152][ T1145] schedule_preempt_disabled+0xf/0x20 [ 596.036165][ T1145] __mutex_lock+0x7ab/0x13c0 [ 596.036207][ T1145] ? fb_release+0x4e/0x140 [ 596.036227][ T1145] ? mutex_trylock+0x2c0/0x2c0 [ 596.036264][ T1145] ? debug_check_no_obj_freed+0x213/0x449 [ 596.036321][ T1145] ? fsnotify+0x7df/0xb50 [ 596.036336][ T1145] ? fsnotify_parent+0xbf/0x2d0 [ 596.036378][ T1145] ? locks_remove_file+0x329/0x590 [ 596.036416][ T1145] ? task_work_run+0xd3/0x1b0 [ 596.036429][ T1145] ? fcntl_setlk+0xcc0/0xcc0 [ 596.036447][ T1145] ? unregister_framebuffer+0x30/0x30 [ 596.036459][ T1145] ? fb_release+0x4e/0x140 [ 596.036470][ T1145] fb_release+0x4e/0x140 [ 596.036548][ T1145] __fput+0x33e/0x880 [ 596.036572][ T1145] task_work_run+0xf4/0x1b0 [ 596.036608][ T1145] do_exit+0xb34/0x2dd0 [ 596.036651][ T1145] ? find_held_lock+0x2d/0x110 [ 596.036667][ T1145] ? mm_update_next_owner+0x7a0/0x7a0 [ 596.036686][ T1145] ? lock_downgrade+0x840/0x840 [ 596.036709][ T1145] do_group_exit+0x125/0x340 [ 596.036752][ T1145] get_signal+0x47b/0x24e0 [ 596.036807][ T1145] do_signal+0x81/0x2240 [ 596.036827][ T1145] ? preempt_schedule_common+0x5e/0xc0 [ 596.036844][ T1145] ? get_sigframe.isra.0+0x730/0x730 [ 596.036862][ T1145] ? debug_smp_processor_id+0x2f/0x185 [ 596.036920][ T1145] ? kick_process+0x121/0x170 [ 596.036937][ T1145] ? task_work_add+0x97/0x120 [ 596.036972][ T1145] exit_to_usermode_loop+0x26c/0x360 [ 596.036991][ T1145] do_syscall_64+0x6b1/0x7d0 [ 596.037029][ T1145] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 596.037043][ T1145] RIP: 0033:0x45ca69 [ 596.037059][ T1145] Code: ff 48 8d 3d c9 90 23 01 e8 b4 22 00 00 e9 ec fe ff ff e8 aa 04 00 00 e9 85 fe ff ff cc cc cc cc cc 90 90 90 90 90 90 90 90 90 <90> 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 596.037068][ T1145] RSP: 002b:00007f4da1275c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.037082][ T1145] RAX: 0000000000000000 RBX: 00000000004e4b00 RCX: 000000000045ca69 [ 596.037091][ T1145] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000004 [ 596.037100][ T1145] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 596.037109][ T1145] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 596.037118][ T1145] R13: 00000000000002f2 R14: 00000000004c5708 R15: 00007f4da12766d4 [ 596.037150][ T1145] [ 596.037150][ T1145] Showing all locks held in the system: [ 596.037167][ T1145] 1 lock held by khungtaskd/1145: [ 596.037172][ T1145] #0: ffffffff899bea80 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 596.037244][ T1145] 1 lock held by in:imklog/6734: [ 596.037249][ T1145] #0: ffff888093ae8670 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 596.037308][ T1145] 1 lock held by syz-executor.0/14311: [ 596.037313][ T1145] #0: ffff888218fb0078 (&fb_info->lock){+.+.}-{3:3}, at: fb_release+0x4e/0x140 [ 596.037345][ T1145] 2 locks held by syz-executor.4/14359: [ 596.037354][ T1145] 1 lock held by syz-executor.3/14392: [ 596.037359][ T1145] #0: ffff888218fb0078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 596.037390][ T1145] 1 lock held by syz-executor.3/14413: [ 596.037395][ T1145] #0: ffff888218fb0078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 596.037426][ T1145] 1 lock held by syz-executor.0/14661: [ 596.037430][ T1145] #0: ffff888218fb0078 (&fb_info->lock){+.+.}-{3:3}, at: fb_open+0xd3/0x430 [ 596.037460][ T1145] [ 596.037465][ T1145] ============================================= [ 596.037465][ T1145] [ 596.037472][ T1145] NMI backtrace for cpu 0 [ 596.037486][ T1145] CPU: 0 PID: 1145 Comm: khungtaskd Not tainted 5.7.0-syzkaller #0 [ 596.037495][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.037504][ T1145] Call Trace: [ 596.037540][ T1145] dump_stack+0x188/0x20d [ 596.037578][ T1145] nmi_cpu_backtrace.cold+0x70/0xb1 [ 596.037614][ T1145] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 596.037628][ T1145] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 596.037660][ T1145] watchdog+0xa8c/0x1010 [ 596.037680][ T1145] ? reset_hung_task_detector+0x30/0x30 [ 596.037694][ T1145] kthread+0x388/0x470 [ 596.037708][ T1145] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 596.037724][ T1145] ret_from_fork+0x24/0x30 [ 596.037748][ T1145] Sending NMI from CPU 0 to CPUs 1: [ 596.038459][ C1] NMI backtrace for cpu 1 [ 596.038465][ C1] CPU: 1 PID: 14359 Comm: syz-executor.4 Not tainted 5.7.0-syzkaller #0 [ 596.038471][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.038475][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x27/0x50 [ 596.038494][ C1] Code: 00 00 00 65 48 8b 04 25 00 1f 02 00 65 8b 15 08 df 8e 7e 81 e2 00 01 1f 00 48 8b 34 24 75 2b 8b 90 d8 13 00 00 83 fa 02 75 20 <48> 8b 88 e0 13 00 00 8b 80 dc 13 00 00 48 8b 11 48 83 c2 01 48 39 [ 596.038498][ C1] RSP: 0018:ffffc900017d74d8 EFLAGS: 00000246 [ 596.038505][ C1] RAX: ffff88808dd4a600 RBX: 0000000000000000 RCX: ffffffff83bf3c05 [ 596.038510][ C1] RDX: 0000000000000002 RSI: ffffffff83bf3c39 RDI: 0000000000000005 [ 596.038514][ C1] RBP: 0000000000000000 R08: ffff88808dd4a600 R09: 0000000000000040 [ 596.038519][ C1] R10: ffff888218f97a9f R11: ffffed10431f2f53 R12: 0000000000000008 [ 596.038524][ C1] R13: ffff8880000a0040 R14: 0000000000000000 R15: 00000000ffffffff [ 596.038529][ C1] FS: 00007f21fc11f700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 596.038533][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.038537][ C1] CR2: 0000000000ca9550 CR3: 00000000a8be2000 CR4: 00000000001406e0 [ 596.038542][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 596.038546][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 596.038549][ C1] Call Trace: [ 596.038552][ C1] bitfill_aligned+0x199/0x200 [ 596.038555][ C1] cfb_fillrect+0x418/0x7a0 [ 596.038558][ C1] ? cfb_fillrect+0x7a0/0x7a0 [ 596.038561][ C1] vga16fb_fillrect+0x68f/0x1960 [ 596.038564][ C1] ? memcpy+0x39/0x60 [ 596.038567][ C1] bit_clear_margins+0x2d5/0x4a0 [ 596.038570][ C1] ? bit_bmove+0x210/0x210 [ 596.038573][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 596.038576][ C1] fbcon_clear_margins+0x1de/0x240 [ 596.038579][ C1] fbcon_switch+0xcde/0x16f0 [ 596.038583][ C1] ? fbcon_set_def_font+0x370/0x370 [ 596.038586][ C1] ? fbcon_cursor+0x477/0x650 [ 596.038589][ C1] ? bit_clear+0x4e0/0x4e0 [ 596.038592][ C1] ? is_console_locked+0x5/0x10 [ 596.038595][ C1] ? fbcon_set_origin+0x26/0x50 [ 596.038598][ C1] redraw_screen+0x2ae/0x770 [ 596.038602][ C1] ? vesafb_probe.cold+0x1162/0x1162 [ 596.038605][ C1] ? respond_string+0x290/0x290 [ 596.038608][ C1] ? fbcon_set_palette+0x3b1/0x4a0 [ 596.038611][ C1] fbcon_modechanged+0x581/0x720 [ 596.038614][ C1] fbcon_update_vcs+0x3a/0x50 [ 596.038617][ C1] fb_set_var+0xad0/0xd40 [ 596.038620][ C1] ? fb_blank+0x190/0x190 [ 596.038623][ C1] ? mark_held_locks+0xe0/0xe0 [ 596.038627][ C1] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 596.038630][ C1] do_fb_ioctl+0x390/0x6e0 [ 596.038633][ C1] ? fb_mmap+0x550/0x550 [ 596.038637][ C1] ? tomoyo_execute_permission+0x470/0x470 [ 596.038640][ C1] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 596.038643][ C1] ? do_vfs_ioctl+0x50c/0x1360 [ 596.038646][ C1] ? ksys_dup3+0x3c0/0x3c0 [ 596.038649][ C1] fb_ioctl+0xdd/0x130 [ 596.038652][ C1] ? do_fb_ioctl+0x6e0/0x6e0 [ 596.038655][ C1] ksys_ioctl+0x11a/0x180 [ 596.038658][ C1] __x64_sys_ioctl+0x6f/0xb0 [ 596.038661][ C1] ? lockdep_hardirqs_on+0x463/0x620 [ 596.038664][ C1] do_syscall_64+0xf6/0x7d0 [ 596.038667][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 596.038670][ C1] RIP: 0033:0x45ca69 [ 596.038680][ C1] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 596.038683][ C1] RSP: 002b:00007f21fc11ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.038691][ C1] RAX: ffffffffffffffda RBX: 00000000004e4b00 RCX: 000000000045ca69 [ 596.038696][ C1] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000004 [ 596.038700][ C1] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 596.038705][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 596.038709][ C1] R13: 00000000000002f2 R14: 00000000004c5708 R15: 00007f21fc11f6d4 [ 596.046326][ T1145] Kernel panic - not syncing: hung_task: blocked tasks [ 596.046343][ T1145] CPU: 0 PID: 1145 Comm: khungtaskd Not tainted 5.7.0-syzkaller #0 [ 596.046351][ T1145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.046356][ T1145] Call Trace: [ 596.046376][ T1145] dump_stack+0x188/0x20d [ 596.046443][ T1145] panic+0x2e3/0x75c [ 596.046458][ T1145] ? add_taint.cold+0x16/0x16 [ 596.046476][ T1145] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 596.046491][ T1145] ? preempt_schedule_thunk+0x16/0x18 [ 596.046511][ T1145] ? watchdog+0xa8c/0x1010 [ 596.046525][ T1145] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 596.046542][ T1145] watchdog+0xa9d/0x1010 [ 596.046560][ T1145] ? reset_hung_task_detector+0x30/0x30 [ 596.046576][ T1145] kthread+0x388/0x470 [ 596.046589][ T1145] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 596.046607][ T1145] ret_from_fork+0x24/0x30 [ 596.048304][ T1145] Kernel Offset: disabled [ 598.006839][ T1145] Rebooting in 86400 seconds..