00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1376.769231][T22426] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1376.777836][T22444] binder: 22425:22444 ioctl c0306244 20000540 returned -22
[ 1376.791115][T22464] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1376.811098][T22501] binder: 22425:22501 ioctl c0306244 20000540 returned -22
15:54:01 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607035afffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:01 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc030625c, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:01 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1376.902511][T22503] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1376.926585][T22507] binder: 22505:22507 ERROR: BC_REGISTER_LOOPER called without request
15:54:01 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x100000})

[ 1376.949979][T22507] binder: 22505:22507 transaction failed 29189/-22, size 24-8 line 2995
[ 1376.959385][T22509] binder: 22508:22509 ioctl c030625c 20000540 returned -22
[ 1376.960761][T22510] binder: 22508:22510 ioctl c030625c 20000540 returned -22
[ 1376.982010][T18061] binder: undelivered TRANSACTION_ERROR: 29189
[ 1377.012452][T22514] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1377.103618][T22518] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:01 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040))
ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000280)={0x1, [0x2]})
r1 = socket(0x1e, 0x3, 0x0)
sendmsg(r1, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x100000001, 0x939, 0x8, 0x3, 0x9, 0x0, 0x100000001, 0x5, <r2=>0x0}, &(0x7f0000000140)=0x20)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r2, 0xf2ab}, 0x8)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)

15:54:01 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:01 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306263, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:01 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd940aa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:01 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x1000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:01 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x3ff7f8})

[ 1377.323538][T22636] binder: 22635:22636 ioctl c0306263 20000540 returned -22
[ 1377.340881][T22639] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1377.352814][T22644] binder: 22635:22644 ioctl c0306263 20000540 returned -22
15:54:01 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x2, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1377.392627][T22634] binder: 22633:22634 ERROR: BC_REGISTER_LOOPER called without request
15:54:02 executing program 1:
r0 = socket(0x1e, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)

15:54:02 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283000a200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1377.446200][T22634] binder: 22633:22634 transaction failed 29189/-22, size 24-8 line 2995
15:54:02 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xfdfdffff, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:02 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x3, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:02 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x3ff800})

[ 1377.557324][T22805] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:02 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x5, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:02 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1377.653382][ T7901] binder: undelivered TRANSACTION_ERROR: 29189
15:54:02 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830220200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1377.696889][T22867] binder: 22866:22867 unknown command 0
[ 1377.734334][T22867] binder: 22866:22867 ioctl c0306201 20000540 returned -22
15:54:02 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xfffffdfd, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1377.778257][T22917] binder: 22903:22917 transaction failed 29189/-22, size 24-8 line 2995
[ 1377.799264][T22980] binder: 22866:22980 unknown command 0
15:54:02 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x6, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1377.822465][T22980] binder: 22866:22980 ioctl c0306201 20000540 returned -22
15:54:02 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xf83f00})

15:54:02 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830320200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1377.908235][T23016] binder: 23002:23016 unknown command 0
[ 1377.930113][T23016] binder: 23002:23016 ioctl c0306201 20000540 returned -22
[ 1377.995328][T23063] binder: 23002:23063 unknown command 0
[ 1378.064826][T23063] binder: 23002:23063 ioctl c0306201 20000540 returned -22
[ 1378.131451][ T7901] binder: undelivered TRANSACTION_ERROR: 29189
15:54:02 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$SIOCRSGCAUSE(r0, 0x89e0, &(0x7f0000000040))
r1 = socket(0x1e, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000c307c1ecb7fcbd4cea641b6dcdff1d39bb2e1b3485d07e160fab6cfa47a55e418a80881fd6cb3d022df956fadb7211b194a07e916f51536cd6b17f299ec0e37390b47eaeb681f458d1664ce2955719ca2820264ed1c20c8cde308aa93c40fd44c7191b2260b1"], &(0x7f0000000140)=0x6)
sendmsg(r1, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000240)={{0x1f, 0x6}, 'port0\x00', 0x0, 0x0, 0x100, 0x8, 0x2, 0x7, 0x9, 0x0, 0x1, 0x4c})

15:54:02 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x100000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:02 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x7, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:02 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830420200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:02 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:02 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x1000000})

[ 1378.423029][T23213] binder: 23212:23213 unknown command 0
[ 1378.441334][T23213] binder: 23212:23213 ioctl c0306201 20000540 returned -22
[ 1378.445462][T23218] binder: 23211:23218 transaction failed 29189/-22, size 24-8 line 2995
[ 1378.461574][T23225] binder: 23212:23225 unknown command 0
[ 1378.479817][T23225] binder: 23212:23225 ioctl c0306201 20000540 returned -22
[ 1378.484798][ T7901] binder: undelivered TRANSACTION_ERROR: 29189
15:54:03 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830520200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:03 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:03 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x12, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:03 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xfdfdffff00000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:03 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x2000000})

[ 1378.621279][T23334] binder_thread_write: 12 callbacks suppressed
[ 1378.621289][T23334] binder: 23333:23334 ERROR: BC_REGISTER_LOOPER called without request
[ 1378.656638][T23334] binder: 23333:23334 unknown command 0
15:54:03 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830620200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1378.667773][T23335] binder: 23332:23335 ERROR: BC_REGISTER_LOOPER called without request
[ 1378.681562][T23334] binder: 23333:23334 ioctl c0306201 20000540 returned -22
[ 1378.695523][ T7901] binder: undelivered TRANSACTION_ERROR: 29189
[ 1378.751361][T23356] binder: 23333:23356 ERROR: BC_REGISTER_LOOPER called without request
[ 1378.786030][T23356] binder: 23333:23356 unknown command 0
[ 1378.791687][T23356] binder: 23333:23356 ioctl c0306201 20000540 returned -22
15:54:03 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={<r1=>0x0, 0x4, 0x30}, &(0x7f0000000040)=0xc)
setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85)
getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0x2f59261e, 0x800, 0x80}, &(0x7f0000000140)=0x10)
r2 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f00000002c0)="716b08b774fb78c780771b9adc4f7527f6b114816609dc2a5d8d7c5e58dce31d09b01eb919d6584379f5", 0x2a, 0xfffffffffffffff8)
setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
keyctl$negate(0xd, r2, 0x100000001, r3)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)

15:54:03 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:03 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x630c}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:03 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:03 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830720200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:03 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x3000000})

15:54:03 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:03 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830a20200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1379.299769][T23461] binder: 23460:23461 ERROR: BC_REGISTER_LOOPER called without request
[ 1379.317255][T23461] binder: 23460:23461 unknown command 0
[ 1379.327871][T23461] binder: 23460:23461 ioctl c0306201 20000540 returned -22
15:54:03 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20200, 0x0)
ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x6, 0x4, [], &(0x7f0000000040)=0xfffffffffffffff8})
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)

15:54:03 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x5c, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:04 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x4000000})

15:54:04 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x630d}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1379.502859][T23583] binder: 23563:23583 ERROR: BC_REGISTER_LOOPER called without request
15:54:04 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1379.547218][T23583] binder: 23563:23583 unknown command 0
[ 1379.586702][T23583] binder: 23563:23583 ioctl c0306201 20000540 returned -22
15:54:04 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830e20200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:04 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4400, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:04 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x5000000})

15:54:04 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1379.771526][T23661] binder: 23646:23661 ERROR: BC_REGISTER_LOOPER called without request
15:54:04 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x6312}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1379.826350][T23661] binder: 23646:23661 unknown command 0
[ 1379.865642][T23661] binder: 23646:23661 ioctl c0306201 20000540 returned -22
15:54:04 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830f20200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:04 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x5c00, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1379.997504][T23715] binder: 23714:23715 ERROR: BC_REGISTER_LOOPER called without request
[ 1380.040165][T23720] binder: 23717:23720 unknown command 25362
[ 1380.050443][T23720] binder: 23717:23720 ioctl c0306201 20000540 returned -22
[ 1380.053813][T23715] binder_transaction: 1 callbacks suppressed
[ 1380.053829][T23715] binder: 23714:23715 transaction failed 29189/-22, size 24-8 line 2995
[ 1380.071506][T23722] binder: 23716:23722 ERROR: BC_REGISTER_LOOPER called without request
[ 1380.092762][T23721] EXT4-fs: 15 callbacks suppressed
[ 1380.092773][T23721] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1380.104031][T23722] binder: 23716:23722 unknown command 0
[ 1380.104059][T23722] binder: 23716:23722 ioctl c0306201 20000540 returned -22
[ 1380.152902][T23827] binder: 23716:23827 ERROR: BC_REGISTER_LOOPER called without request
[ 1380.162611][T23827] binder: 23716:23827 unknown command 0
[ 1380.170263][T23827] binder: 23716:23827 ioctl c0306201 20000540 returned -22
[ 1380.208884][T23874] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1380.230398][ T7901] binder: undelivered TRANSACTION_ERROR: 29189
15:54:04 executing program 1:
r0 = socket(0xa, 0x1, 0xffffffffffffffff)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x1, 0x2})
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400081, 0x20)
ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000100)=""/60)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)

15:54:04 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2834820200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:04 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:04 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40046302}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:04 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x2, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:04 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x6000000})

[ 1380.381930][T23940] validate_nla: 9 callbacks suppressed
[ 1380.381941][T23940] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1380.408813][T23942] binder: 23938:23942 unknown command 0
[ 1380.416044][T23945] binder: BC_ACQUIRE_RESULT not supported
[ 1380.418258][T23939] binder: 23937:23939 ERROR: BC_REGISTER_LOOPER called without request
[ 1380.437265][T23942] binder: 23938:23942 ioctl c0306201 20000540 returned -22
[ 1380.441133][T23945] binder: 23936:23945 ioctl c0306201 20000540 returned -22
[ 1380.447720][T23948] binder: 23938:23948 unknown command 0
[ 1380.463271][T23939] binder: 23937:23939 transaction failed 29189/-22, size 24-8 line 2995
[ 1380.473533][T23948] binder: 23938:23948 ioctl c0306201 20000540 returned -22
15:54:05 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1380.483659][T18061] binder: undelivered TRANSACTION_ERROR: 29189
[ 1380.491971][T23943] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:05 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x3, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:05 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2834c20200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1380.568353][T23979] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:05 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40046304}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:05 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x7000000})

[ 1380.630103][T24057] binder: 24020:24057 transaction failed 29189/-22, size 24-8 line 2995
[ 1380.653355][T24061] binder: 24058:24061 unknown command 0
[ 1380.661461][T24060] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1380.672896][T24061] binder: 24058:24061 ioctl c0306201 20000540 returned -22
[ 1380.683834][T18061] binder: undelivered TRANSACTION_ERROR: 29189
15:54:05 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1380.731986][T24066] binder: 24065:24066 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 1380.822472][T24068] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1380.883236][T24174] binder: 24167:24174 transaction failed 29189/-22, size 24-8 line 2995
[ 1380.897947][T18061] binder: undelivered TRANSACTION_ERROR: 29189
[ 1380.947494][T24177] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:05 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0xfffffdb0, 0x0, 0x0, 0x0, 0x2ff}, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000540), &(0x7f0000000480)=0xfef4715a5e88939e)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)
sendmsg$nfc_llcp(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x27, 0x0, 0x1, 0x7, 0x9, 0x5, "d147defa1c4fcf89f76adb06ac2b25af9d33298f4f0b28f7277cd5d4cb9a07540f39926efadf9ef122f45dd81ea2f2c2bd946a7652bee7a4ec89cdca1c87a5", 0x7}, 0x60, &(0x7f0000000280)=[{&(0x7f0000000240)="098e24c396559e7cc47f9d85a60e", 0xe}], 0x1, 0x0, 0x0, 0x810}, 0x15)

15:54:05 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2836020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:05 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x4, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:05 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40046307}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:05 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:05 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x8000000})

[ 1381.315622][T24188] binder: 24185:24188 DecRefs 0 refcount change on invalid ref 0 ret -22
[ 1381.329382][T24187] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1381.336877][T24193] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:05 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x5, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1381.360189][T24190] binder: 24189:24190 transaction failed 29189/-22, size 24-8 line 2995
[ 1381.402691][T18061] binder: undelivered TRANSACTION_ERROR: 29189
15:54:06 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:06 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40086303}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:06 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2836820200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:06 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1381.443718][T24300] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:06 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x7, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1381.572904][T24318] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1381.583511][T24317] binder: 24314:24317 BC_FREE_BUFFER u0000000000000000 no match
[ 1381.598911][T24319] binder: 24316:24319 transaction failed 29189/-22, size 24-8 line 2995
[ 1381.616733][T11110] binder: undelivered TRANSACTION_ERROR: 29189
15:54:06 executing program 1:
r0 = socket(0x1c, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)

15:54:06 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x9000000})

15:54:06 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:06 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2836c20200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:06 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x4008630a}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:06 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xa, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1382.225337][T24434] binder: BC_ATTEMPT_ACQUIRE not supported
[ 1382.235013][T24435] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1382.244392][T24434] binder: 24432:24434 ioctl c0306201 20000540 returned -22
[ 1382.254308][T24437] binder: 24429:24437 transaction failed 29189/-22, size 24-8 line 2995
[ 1382.267345][T24438] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:06 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x48, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:06 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1382.283761][T11110] binder: undelivered TRANSACTION_ERROR: 29189
15:54:06 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2837420200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1382.345814][T24499] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:06 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x4c, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:07 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40086310}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1382.414475][T24552] binder: 24549:24552 transaction failed 29189/-22, size 24-8 line 2995
[ 1382.451462][T18061] binder: undelivered TRANSACTION_ERROR: 29189
[ 1382.460194][T24555] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:07 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xa000000})

[ 1382.531020][T24562] binder: 24560:24562 BC_DEAD_BINDER_DONE 0000000000000000 not found
15:54:07 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000240)="137f187403def14ad4757d2f1c552a3c44c3a401ab78982877b6038e65287c81a1fc7f6223159861fa1d7c0128ef6b0d36721a622fff8331a100793a5d7285c464bde6e52dcf59bea556de8aa289a283e19f373808147f63a92f472278aa37f7450d7f706a5bbdf2a67e59febf153174ac7d6e9fb9b256d57da735eaa53c1b0a254691387fbe27efad8d11e7ffbf44323f1050d7bd592910bcbba7616648ee2cb4df04aec45ff229fbe9a85adf279a2de7e6f6", 0xb3}, {&(0x7f0000000100)="1c0dd59668fa9c133f4fd8b0314e06db038f23ae984a77dcd9f37fb8ac84e00ef02b9f8f1482ef1862ddc10719a49286371b32e54006f7e138", 0x39, 0xbe}, {&(0x7f0000000140)="9f9760c48655b4ec62f4d115", 0xc, 0x5}, {&(0x7f0000000300)="0282343cddc78963e210c3a1194ff326e98fcf34cb6ecaa0e6cb25fe65ff67a2a47b5df1d33fe0e9cfa968b3288c392bd5c70f08bea23980ef24522127105f07db3e18dc5246c3252085537edbe4788184928b31e5a81065e7957589e3bfc9c08a3b67334f41b239b70ef54de2f52af03720d8a31d3decdbe62489d02d112211f0d6bf4de648b85195e98c2c0309f31c1d50e202129551c4a0627aa34b4eef16b8493c84a6e9c7930ccc667a7a19de4fa836750bbad7123878b632d7a1b3e442e70b5d78649a78e797693bc5416e4c117e3ec21dd4c4b3914b2291568000f5ebb00ea86801d3a8af70ef9ddf186f9c41c8", 0xf1, 0xfffffffffffff800}, {&(0x7f0000000400)="3a7bd5b6ea226cc4201699591c15d118c4da0d56e09feacbae18ba2e5eaac08eae8b01592f1116af59c12c9618e369f3a5c4de801589c7bcbf4567a71f4625c9a287d74444be395c5ab01477e37fec86549540bd121b5a578cdf31380df99503829a300eb5c548368ddc5e4039dc9e9804ee0c3c4a6287bbca5665d91333d48bf675d2613727aa3b3ad21cc11d7de69dc32d9f97e776adbda57bb6a277f6ecc817ce8cab76fdbc871a0b2715b46dcfaa9c1bf585e75bc6c8acef02a7b9398a25", 0xc0, 0x48b}, {&(0x7f00000004c0)="6c2de7b520eb1c7ddecfee672e9c96f723c26794247b22c400b37e518e8e9ada2eedc44e07c9f2bdc9ee219f9012562c61c5d2ab5997f7be3f09ca28aed7d7709d0a066fcee0cd0f113db08636ac14f9c6caa722f0d4a8e888a6a1587bc3bf2ed067b33fb8b0b94e1a15db1f2a798c1bc9453bab69a10fd7aa1f860c6b00faab0d6869e278bfd5411e3808ca13ed49bca4e58c45873f6d506b32c0955096355468941a1ebd361cd28e57f744947c01fba7ff2704029cfe0456afe1c5bf798e0a374ea9bd", 0xc4, 0x2}], 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)

15:54:07 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:07 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x60, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:07 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2837a20200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:07 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:07 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xb000000})

[ 1383.142563][T24680] binder: 24679:24680 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1383.153421][T24687] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1383.163136][T24684] binder: 24681:24684 transaction failed 29189/-22, size 24-8 line 2995
15:54:07 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x68, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1383.198988][T11110] binder: undelivered TRANSACTION_ERROR: 29189
15:54:07 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:07 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830025200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:07 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x10000000})

15:54:07 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:07 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6c, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1383.421406][T24829] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1383.440475][T24892] binder: 24879:24892 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
15:54:08 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
lsetxattr$security_selinux(&(0x7f0000005180)='./file0\x00', &(0x7f00000051c0)='security.selinux\x00', &(0x7f0000005200)='system_u:object_r:anacron_exec_t:s0\x00', 0x24, 0x2)
recvmmsg(r0, &(0x7f0000005040)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000000140)=""/48, 0x30}, {&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f0000000440)=""/73, 0x49}], 0x6, &(0x7f0000000540)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000001540)=@rc, 0x80, &(0x7f00000025c0)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1, &(0x7f0000002600)=""/91, 0x5b}}, {{&(0x7f0000002680)=@pppol2tp, 0x80, &(0x7f0000002740)=[{&(0x7f0000002700)=""/63, 0x3f}], 0x1, &(0x7f0000002780)=""/159, 0x9f}, 0x3}, {{&(0x7f0000002840)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000003f80)=[{&(0x7f00000028c0)=""/80, 0x50}, {&(0x7f0000002940)=""/183, 0xb7}, {&(0x7f0000002a00)=""/206, 0xce}, {&(0x7f0000002b00)=""/161, 0xa1}, {&(0x7f0000002bc0)=""/242, 0xf2}, {&(0x7f0000002cc0)=""/201, 0xc9}, {&(0x7f0000002dc0)=""/65, 0x41}, {&(0x7f0000002e40)=""/4096, 0x1000}, {&(0x7f0000003e40)=""/21, 0x15}, {&(0x7f0000003e80)=""/243, 0xf3}], 0xa, &(0x7f0000004040)=""/4096, 0x1000}, 0x7}], 0x4, 0x40, &(0x7f0000005140)={0x77359400})

15:54:08 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283002f200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:08 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:08 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x1f000000})

15:54:08 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x74, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:08 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40106308}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1384.012181][T25036] binder: 25030:25036 BC_INCREFS_DONE u0000000000000000 no match
[ 1384.023718][T25034] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1384.025628][T25037] binder: 25028:25037 ioctl c0306201 0 returned -14
[ 1384.053746][T25037] binder: 25028:25037 transaction failed 29189/-22, size 24-8 line 2995
15:54:08 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x7a, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1384.070429][T11110] binder: undelivered TRANSACTION_ERROR: 29189
15:54:08 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40106309}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:08 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:08 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283005a200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:08 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)
ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e20, @empty}, 0x200, 0x0, 0x0, 0x0, 0x3f, &(0x7f0000000000)='veth0_to_bridge\x00', 0x8, 0x1000, 0x5})
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000100)={0x9, 0x4, 0xa3f0})

15:54:08 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x20000000})

15:54:08 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x300, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1384.250074][T25154] binder: 25153:25154 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1384.259659][T25158] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:08 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830060200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1384.312467][T25161] binder: 25157:25161 ioctl c0306201 0 returned -14
15:54:08 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:08 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x500, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:09 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40406300}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:09 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x230f0000})

15:54:09 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283000a200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:09 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x600, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:09 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:09 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x700, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:09 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
flock(r0, 0x4)
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0xfffffffffffffecc)

15:54:09 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830025200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:09 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40406301}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:09 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:09 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x2a000000})

15:54:09 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xa00, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1385.179984][T25418] binder: 25417:25418 got reply transaction with no transaction stack
[ 1385.194549][T25422] binder_transaction: 4 callbacks suppressed
[ 1385.194566][T25422] binder: 25419:25422 transaction failed 29189/-22, size 24-8 line 2995
[ 1385.205614][T25418] binder: 25417:25418 transaction failed 29201/-71, size 0-0 line 2900
15:54:09 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283002f200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1385.230350][T25423] EXT4-fs: 12 callbacks suppressed
[ 1385.230363][T25423] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:09 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:09 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x2000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:09 executing program 1:
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x20, 0x200)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0xfcbd, 0x6, 0xfffffffffffffff9, 0x401, 0x8000, 0x6, 0x800}, 0xc)
lseek(r0, 0x0, 0x3)
r1 = socket(0x1e, 0x1, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)

[ 1385.332673][T25478] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:09 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283005a200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:10 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x2d000000})

15:54:10 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40486311}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1385.448374][T25540] binder: 25513:25540 transaction failed 29189/-22, size 24-8 line 2995
[ 1385.476335][T18061] binder_release_work: 5 callbacks suppressed
[ 1385.476343][T18061] binder: undelivered TRANSACTION_ERROR: 29201
15:54:10 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x3f00, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1385.493800][T25544] validate_nla: 4 callbacks suppressed
[ 1385.493810][T25544] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:10 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830060200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1385.579254][T25602] binder: 25558:25602 transaction failed 29189/-22, size 0-0 line 2995
[ 1385.614502][T25591] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:10 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1385.629308][T11110] binder: undelivered TRANSACTION_ERROR: 29189
[ 1385.664800][T18061] binder: undelivered TRANSACTION_ERROR: 29189
15:54:10 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x4800, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1385.710670][T25704] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1385.750235][T25753] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:10 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40486312}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:10 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x3f000000})

[ 1385.790568][T25742] binder: 25718:25742 transaction failed 29189/-22, size 24-8 line 2995
[ 1385.827544][T18061] binder: undelivered TRANSACTION_ERROR: 29189
15:54:10 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x4c00, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:10 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1385.934972][T25776] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1385.988868][T25785] binder: 25779:25785 got reply transaction with no transaction stack
[ 1386.008022][T25781] binder: 25778:25781 transaction failed 29189/-22, size 24-8 line 2995
[ 1386.013300][T25785] binder: 25779:25785 transaction failed 29201/-71, size 0-0 line 2900
[ 1386.036498][T18061] binder: undelivered TRANSACTION_ERROR: 29189
[ 1386.058144][T25786] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1386.139802][T11110] binder: undelivered TRANSACTION_ERROR: 29201
15:54:10 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@empty, @dev={0xac, 0x14, 0x14, 0xd}, 0x1, 0x3, [@empty, @dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x25}]}, 0x1c)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)={0x6e9f, 0x3f, 0x4, 0x400, 0x2, [{0x2e4, 0x3, 0x2, 0x0, 0x0, 0x400}, {0x3, 0x4, 0x7, 0x0, 0x0, 0x1000}]})
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040)=0x7fffffff, 0x4)

15:54:10 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa28300200a0a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:10 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:10 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:10 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x40000000})

15:54:10 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x1000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1386.341662][T25902] binder_thread_write: 4 callbacks suppressed
[ 1386.341672][T25902] binder: 25900:25902 ERROR: BC_REGISTER_LOOPER called without request
[ 1386.363200][T25907] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1386.365087][T25905] binder: 25896:25905 ERROR: BC_REGISTER_LOOPER called without request
[ 1386.385375][T25899] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:10 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6800, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:11 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1386.386979][T25902] binder: 25900:25902 ioctl c0306201 20000540 returned -14
[ 1386.406671][T25905] binder: 25896:25905 transaction failed 29189/-22, size 24-8 line 2995
[ 1386.416942][T11110] binder: undelivered TRANSACTION_ERROR: 29189
15:54:11 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020250a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:11 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6c00, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:11 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfdfdffff, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1386.518341][T26003] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1386.548743][T26020] binder: 25997:26020 ERROR: BC_REGISTER_LOOPER called without request
15:54:11 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x7400, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1386.582144][T26020] binder: 25997:26020 transaction failed 29189/-22, size 24-8 line 2995
[ 1386.613157][T11110] binder: undelivered TRANSACTION_ERROR: 29189
[ 1386.618901][T26026] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1386.675888][T26030] binder: 26029:26030 ERROR: BC_REGISTER_LOOPER called without request
[ 1386.699791][T26030] binder: 26029:26030 ioctl c0306201 20000540 returned -14
15:54:11 executing program 1:
r0 = socket(0x1e, 0x1, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'dummy0\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}})

15:54:11 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x48000000})

15:54:11 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:11 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x7a00, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:11 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa28300202f0a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:11 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfffffdfd, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1387.233420][T26146] binder: 26143:26146 ERROR: BC_REGISTER_LOOPER called without request
[ 1387.242760][T26148] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1387.243761][T26145] binder: 26139:26145 ERROR: BC_REGISTER_LOOPER called without request
15:54:11 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x1000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1387.277060][T26146] binder: 26143:26146 ioctl c0306201 20000540 returned -14
[ 1387.292881][T26149] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1387.310899][T26145] binder: 26139:26145 transaction failed 29189/-22, size 24-8 line 2995
[ 1387.333498][T11110] binder: undelivered TRANSACTION_ERROR: 29189
15:54:11 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x2000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:11 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:12 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa28300205a0a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:12 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x4c000000})

15:54:12 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x100000000000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1387.502383][T26268] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1387.549234][T26270] binder: 26269:26270 ERROR: BC_REGISTER_LOOPER called without request
[ 1387.576699][T26273] binder: 26272:26273 ERROR: BC_REGISTER_LOOPER called without request
[ 1387.602167][T26273] binder: 26272:26273 ioctl c0306201 20000540 returned -14
[ 1387.633845][T26276] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:12 executing program 1:
r0 = socket(0x1c, 0x80f, 0x0)
sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0)
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, &(0x7f0000000180)={0x100}, 0x8)

15:54:12 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x3000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:12 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020600a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:12 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:12 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfdfdffff00000000, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:12 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x60000000})

15:54:12 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1388.169314][T26496] binder: 26493:26496 ERROR: BC_REGISTER_LOOPER called without request
[ 1388.177613][T26498] binder: 26491:26498 ERROR: BC_REGISTER_LOOPER called without request
[ 1388.178036][T26498] binder: 26491:26498 unknown command -1795162112
[ 1388.187906][T26497] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1388.201132][T26498] binder: 26491:26498 ioctl c0306201 200002c0 returned -22
15:54:12 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x4000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1388.251837][T26496] binder: 26493:26496 ioctl c0306201 20000540 returned -14
15:54:12 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x5000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:12 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283002020020009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:12 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x68000000})

[ 1388.360956][T26564] binder: 26530:26564 unknown command -1795162112
15:54:13 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1388.414827][T26564] binder: 26530:26564 ioctl c0306201 200002c0 returned -22
[ 1388.428358][T26619] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:13 executing program 1:

15:54:13 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:13 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:13 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283002020250009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:13 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xfdfdffff, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:13 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x6c000000})

15:54:13 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x7000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1389.154758][T26843] binder: 26842:26843 ioctl c0306201 0 returned -14
[ 1389.173626][T26846] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1389.191274][T26843] binder: 26842:26843 unknown command -1795162112
15:54:13 executing program 1:

15:54:13 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020205a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:13 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xfffffdfd, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1389.258011][T26843] binder: 26842:26843 ioctl c0306201 200002c0 returned -22
15:54:13 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x74000000})

15:54:13 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xa000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1389.367321][T26973] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:14 executing program 1:

15:54:14 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:14 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x7a000000})

15:54:14 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283002020000509000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:14 executing program 1:

15:54:14 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x20000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:14 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x100000000000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1389.671073][T27178] binder: 27176:27178 ioctl c0306201 0 returned -14
15:54:14 executing program 1:

15:54:14 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x3f000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1389.713737][T27178] binder: 27176:27178 unknown command -1795162112
[ 1389.733602][T27178] binder: 27176:27178 ioctl c0306201 200002c0 returned -22
15:54:14 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:14 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xfdfdffff00000000, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:14 executing program 1:

15:54:14 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x8cffffff})

15:54:14 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa283002020905d09000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:14 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x48000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:14 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1f630000"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:14 executing program 1:

[ 1390.026041][T27406] binder: 27404:27406 ioctl c0306201 0 returned -14
[ 1390.044409][T27406] binder: 27404:27406 unknown command -1795162112
[ 1390.064728][T27406] binder: 27404:27406 ioctl c0306201 200002c0 returned -22
15:54:14 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0003000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:14 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x4c000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1390.167831][T27575] binder: 27563:27575 unknown command 25375
15:54:14 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x97ffffff})

[ 1390.223426][T27618] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1390.230063][T27575] binder: 27563:27575 ioctl c0306201 20000540 returned -22
15:54:14 executing program 1:

15:54:14 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:14 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x60000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:14 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0005000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1390.367472][T27640] EXT4-fs: 11 callbacks suppressed
[ 1390.367484][T27640] EXT4-fs (sda1): Unrecognized mount option "ÿ" or missing value
15:54:15 executing program 1:

[ 1390.439990][T27665] binder: 27641:27665 unknown command -1795162112
[ 1390.470350][T27665] binder: 27641:27665 ioctl c0306201 200002c0 returned -22
[ 1390.479302][T27728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:15 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\va\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1390.496152][T27744] EXT4-fs (sda1): Unrecognized mount option "ÿ" or missing value
15:54:15 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x68000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:15 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0006000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:15 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xc0000000})

15:54:15 executing program 1:

[ 1390.648601][T27838] binder: 27837:27838 unknown command 24843
[ 1390.676158][T27838] binder: 27837:27838 ioctl c0306201 20000540 returned -22
[ 1390.688387][T27858] validate_nla: 1 callbacks suppressed
15:54:15 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:15 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6c000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1390.688396][T27858] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1390.704622][T27858] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:15 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0007000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:15 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x1}, 0x28, 0x3)
syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x4081)

15:54:15 executing program 1:

[ 1390.834710][T27967] binder: 27928:27967 unknown command -1795162112
[ 1390.865467][T27936] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1390.895867][T27967] binder: 27928:27967 ioctl c0306201 200002c0 returned -22
[ 1390.914670][T27975] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:15 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x74000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:15 executing program 1:

[ 1390.951960][T27975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1390.955132][T27982] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:15 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xc0ed0000})

15:54:15 executing program 1:

15:54:15 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x7a000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:15 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0209000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:15 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:15 executing program 1:

15:54:15 executing program 2:
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1391.208603][T28147] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1391.229736][T28198] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:15 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xfdfdffff, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1391.330559][T28202] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1391.332577][T28201] binder: 28199:28201 unknown command -1795162112
15:54:15 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0309000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:15 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xfffffdfd, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1391.371398][T28209] binder_thread_write: 13 callbacks suppressed
[ 1391.371408][T28209] binder: 28208:28209 ERROR: BC_REGISTER_LOOPER called without request
[ 1391.377965][T28201] binder: 28199:28201 ioctl c0306201 200002c0 returned -22
15:54:16 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xe0ffffff})

15:54:16 executing program 1:

15:54:16 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1391.497935][T28339] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:16 executing program 2:
r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
request_key(0x0, 0x0, 0x0, r0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x501000, 0x0)
clock_gettime(0x0, &(0x7f0000000700)={<r3=>0x0, <r4=>0x0})
recvmmsg(r2, &(0x7f0000000680)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/121, 0x79}], 0x1, &(0x7f0000000940)=""/4096, 0x1000}, 0x7fffffff}, {{&(0x7f0000000200)=@sco, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/237, 0xed}, {&(0x7f0000000380)=""/83, 0x53}, {&(0x7f0000000400)=""/80, 0x50}, {&(0x7f00000004c0)=""/85, 0x55}], 0x4, &(0x7f00000005c0)=""/138, 0x8a}, 0x1000}], 0x2, 0x2040, &(0x7f0000000740)={r3, r4+10000000})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:16 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x100000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:16 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0409000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:16 executing program 1:

[ 1391.676053][T28425] EXT4-fs (sda1): Unrecognized mount option "ÿ" or missing value
[ 1391.690163][T28432] binder: 28426:28432 ERROR: BC_REGISTER_LOOPER called without request
[ 1391.700518][T28431] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:16 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = dup2(r0, r0)
getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=<r2=>0x0, &(0x7f0000000040)=0x4)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={r2, 0x4, 0x0, 0x3621, 0x7}, &(0x7f00000000c0)=0x18)
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)

15:54:16 executing program 1:

[ 1391.729889][T28433] binder: 28429:28433 ERROR: BC_REGISTER_LOOPER called without request
[ 1391.762760][T28433] binder: 28429:28433 unknown command -1795162112
15:54:16 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x200000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1391.807225][T28433] binder: 28429:28433 ioctl c0306201 200002c0 returned -22
[ 1391.844512][T28465] EXT4-fs (sda1): Unrecognized mount option "ÿ" or missing value
15:54:16 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0509000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:16 executing program 1:

15:54:16 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xf5ffffff})

15:54:16 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:16 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x300000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1391.933926][T28540] binder: 28478:28540 ERROR: BC_REGISTER_LOOPER called without request
15:54:16 executing program 1:

[ 1392.000579][T28570] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:16 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x400000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:16 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0609000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:16 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x81, 0x0)
lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
write$FUSE_ATTR(r0, &(0x7f00000001c0)={0x78, 0x0, 0x7, {0x8000, 0x3, 0x0, {0x6, 0x0, 0x100000000, 0x5, 0xfffffffffffffffe, 0x44, 0x6b, 0xffffffffffff5418, 0x4, 0x0, 0x3, r1, r2, 0x7, 0x4}}}, 0x78)
r3 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='[v\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1392.112804][T28626] binder: 28618:28626 ERROR: BC_REGISTER_LOOPER called without request
[ 1392.146800][T28624] EXT4-fs (sda1): Unrecognized mount option "ÿ" or missing value
15:54:16 executing program 1:

15:54:16 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x500000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:16 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1392.271691][T28754] EXT4-fs (sda1): Unrecognized mount option "ÿ" or missing value
15:54:16 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_init_net_socket$ax25(0x3, 0x7, 0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6a4731456a6bf329841f806c38848d79ee3605d07e4d10607ee14ae03c016f6177bb25220d794fe6d771943b01ea0e2ffe27d7d7684f9b0072a40087860b5849460291f1e873705eff28e0ed7e43ae15c6a64a0dffc1bb1a680cea235d3956acb490f6b6a4fc680aec10f1dc47a01ce3e07ef939435418141f245a241d550f0817573bce45b18e37a30121266beee4260684a79b469bb03e649608917f8d4b0c468142f2d5e0416cfb51ec30dff0d3890453255dc075941b2ca161e9e047247f539e838625092a247a01779adfdbaca0a4df04daa839367db09e931dbcb249ab460300865fa743"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101002, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000280)=0x8, 0x4)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x401, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
getpeername$inet6(r1, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c)

15:54:16 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xf6ffffff})

15:54:16 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1392.321932][T28776] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:17 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:17 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x600000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:17 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0709000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1392.483865][T28791] binder: 28789:28791 unknown command 1160857450
[ 1392.524830][T28791] binder: 28789:28791 ioctl c0306201 20000540 returned -22
[ 1392.543071][T28794] binder: 28790:28794 ERROR: BC_REGISTER_LOOPER called without request
15:54:17 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:17 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x700000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1392.583571][T28794] binder: 28790:28794 unknown command -1795162112
[ 1392.599801][T28827] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1392.603149][T28794] binder: 28790:28794 ioctl c0306201 200002c0 returned -22
15:54:17 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xf8f73f00})

15:54:17 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b634f94"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:17 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0a09000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:17 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:17 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:17 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xa00000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1392.862033][T29019] binder: 29015:29019 unknown command -1806736629
[ 1392.885604][T29024] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:17 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1392.921906][T29019] binder: 29015:29019 ioctl c0306201 20000540 returned -22
[ 1392.949408][T29029] binder: 29023:29029 ERROR: BC_REGISTER_LOOPER called without request
15:54:17 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x2000000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:17 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:17 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0e09000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:17 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfcfdffff})

15:54:17 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0be300403988f7cbfb3221a7685a09cd4200fef62b6e3b62af87ed32aae18bf8a4bb34a142eedf3de1dd93373754216ed0d88d10d1296d657017dcbe5a158c08"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x6080, 0x0)
setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e21, 0x4, @ipv4={[], [], @local}, 0x7}, {0xa, 0x4e21, 0x5, @ipv4={[], [], @multicast1}, 0x5}, 0x779b, [0x100000000, 0xffff, 0x9, 0x266c83ec, 0x7fffffff, 0x2, 0x1ca8, 0x2]}, 0x5c)

15:54:17 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:17 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x3f00000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1393.242371][T29168] binder: 29157:29168 unknown command 1073799947
[ 1393.248478][T29150] binder: 29145:29150 ERROR: BC_REGISTER_LOOPER called without request
[ 1393.276825][T29168] binder: 29157:29168 ioctl c0306201 20000540 returned -22
15:54:17 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0f09000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:17 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x230f0000})

15:54:18 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x4800000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:18 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfdfdffff})

15:54:18 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1393.438802][T29427] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:18 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a4809000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1393.636580][T29479] binder: 29476:29479 ERROR: BC_REGISTER_LOOPER called without request
[ 1393.674191][T29479] binder: 29476:29479 ioctl c0306201 0 returned -14
15:54:18 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:18 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x230f0000})

15:54:18 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x4c00000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:18 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x230f0000})

15:54:18 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a4c09000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1393.809221][T29544] binder: 29524:29544 ERROR: BC_REGISTER_LOOPER called without request
15:54:18 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6000000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:18 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:18 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfdffffff})

15:54:18 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)

15:54:18 executing program 1:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a4809000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:18 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a6009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:18 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6800000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1394.026945][T29611] binder: 29610:29611 ioctl c0306201 0 returned -14
[ 1394.050928][T29608] binder: 29606:29608 ioctl c0306201 0 returned -14
15:54:18 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:18 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a6809000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:18 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:18 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x6c00000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:18 executing program 2:
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc)
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x8602, 0x0)
ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x1, [<r2=>0x0]}, &(0x7f0000000140)=0x8)
accept$packet(r0, 0x0, &(0x7f0000000280))
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x8}, &(0x7f00000001c0)=0x8)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000200)={0x9, 0x52424752, 0xfffffffffffffffa, 0xfffc000000000000, 0x2, @discrete={0x800}})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000eb815b6f123949076220785377b94866820871b80b3c234e41d2ac80793da7c4d92eb0864414225c17f896270740f3828fa8b453a2c331435fec3e7b864d33cab83255d4dcb47e94eef88069a31654c24ee64e75e77c38f245fcd68f7aaaf1595427c2ecddc199b458952da05f5b6838dc610ea09696228145b37cdc0fe01b567ccc86b019d659583ac5701f00"/159], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0x17}, 0x4}, @in6={0xa, 0x4e24, 0x80000000, @ipv4={[], [], @loopback}, 0x22e}], 0x38)

15:54:18 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfffffdfc})

15:54:18 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1394.306091][T29730] binder: 29721:29730 ioctl c0306201 0 returned -14
15:54:18 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:18 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a6c09000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:19 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x7400000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:19 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="f0193589"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2f0, 0x0)
write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x2}, 0x7)

15:54:19 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1394.521332][T29755] binder: 29750:29755 ioctl c0306201 0 returned -14
15:54:19 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:19 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a7409000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:19 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x7a00000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1394.614682][T29763] binder: 29757:29763 unknown command -1993008656
15:54:19 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfffffdfd})

[ 1394.663719][T29763] binder: 29757:29763 ioctl c0306201 20000540 returned -22
15:54:19 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:19 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:19 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a7a09000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:19 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0xfdfdffff00000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:19 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040)=0x1, 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000100)=0xc)
setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={r2, r3, r4}, 0xc)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=<r5=>0x0)
sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000180)={&(0x7f0000000940)={0x116c, 0xf, 0x9, 0x218, 0x70bd2d, 0x25dfdbfe, {0x5, 0x0, 0x3}, [@nested={0x144, 0x30, [@generic="bcf312c5e5ea754e02245695a5e390725df9347a0cd0c243e5f5fddb2ba6debccea995ad0b171e9be62a655daff5309665601ad683f7e86f2878f0c35f862a1cd42e55c7aff2e47da098986504f57e2495ec2417d1014ff87a1a2ba5673f225a709a9c3ec97a5632a7b77af0da10", @typed={0x8, 0x54, @uid=r3}, @generic="bfeb86cec241d22e43d6e9f3003d98019e0707ae125f17279a9b32b59cd01cf8243ed9acbd810c5b1e8dd4d0b0ca476ac916db3db0d1621939a022764a72cbccc8866baf69c19dc473ce4789fe2ad98cb84fd735d1015efea922c1926928ade688cf3042435850fe9055d4dff9fab665a5ff81887bbe6212f79d0e8f166704f675f111d51c50e56b383ab19cf0e71e2571cd0ef59434bbe34b556f268ac2eae5d78ac44396055a16b2aaf6295d1565d1d17474a3bd7a", @typed={0x14, 0x3c, @str='/dev/binder#\x00'}]}, @typed={0x8, 0x34, @ipv4=@rand_addr=0x2}, @typed={0x8, 0xc, @pid=r5}, @typed={0x1004, 0x95, @binary="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"}]}, 0x116c}, 0x1, 0x0, 0x0, 0x8080}, 0x40000)

15:54:19 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:19 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:19 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x630c}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:19 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9d, 0x18ac0)
fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x18)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b6300002aff6955831388921f1a34037b3b11ecc031ed50136b457d43e248e39be690e12c2fbe00a7666f2031d6aba62d2163c6a004dbf7ce868a597ed85c"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:19 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xffffff8c})

15:54:19 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000a000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:19 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:19 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:19 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x630d}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:19 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:19 executing program 2:
r0 = request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='}\x00', 0xfffffffffffffffe)
request_key(0x0, 0x0, 0x0, r0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2)
getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)={<r3=>0x0, @empty, @multicast2}, &(0x7f00000001c0)=0xc)
sendmsg$xdp(r2, &(0x7f0000000500)={&(0x7f0000000200)={0x2c, 0x1, r3, 0x16}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000240)="57f8733cdd7e0b9d56d880ec45bbd08aab2d61affb583c7739ecc13cdf36fd03c9337dda82853017bbd39a230600bebaaaa3ae0988f1fffe4df7a935f49ab9c006047fbc6675360aed9db55f6ac12d957cf06510b5afaed2a1f11dcd6f8f8dbb64438e185e3fe96219a82de8d3972a5d22e3d900cfda6b34", 0x78}, {&(0x7f00000002c0)="a6a2847376ab3b3910398370ffb4c9b16158294728b07b82a1d7da4a856f2d35099be999c44ca4f87ec2e83afcdf816ca1972b7a9dc12d2dc111f20395955e4ddb737bdb49dddd3e4ac87607de0cc62292c7dee16df433c555fc51af714387ae00c296dcc8d1de4cc6972832942716a82cb76f56f38aa219e3ba41085c44d5b3bb4af8d3ad21d5ce270948880b9428b0320cc7859483daf354405ae6f151d02a105177d69a22b5ffe02bfae774f71a374a1ab3e7e2eff70fc35b9c5b467742f790ccb28e05fef4bccafb1d62c3863f687eded9bcfc8ad20e715df3180131fcee232ddf3006d7f9dc7ce6ab9d9b8b80b3af02dfe29e", 0xf5}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f00000003c0)="2dc5ba63820bc43abf6ece5cb219c37f9eb14f2b8f4af5394412acbbf32f43d6402c4ff2d59b2e7974e6ffc297816168a489dcbb2915d45189d27d71fcba93069961966528bd235591f8edf06dc305cd5a0f133341350d527ba79a767e6daf2a77a3e8405426bcf93eb5f071eaffa9f08ed0ad13a14a63d1a9c9724b1c74e8f9329c718474393dbd020b3846dd96f43149b2288cc2f0b40a1fe36b0bf2563a", 0x9f}], 0x4, 0x0, 0x0, 0x4080}, 0x48055)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x100, 0x0)
getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000040), 0x4)

15:54:19 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000b000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:19 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:20 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xffffff97})

15:54:20 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x6312}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:20 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:20 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000c000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1395.540970][T30055] EXT4-fs: 16 callbacks suppressed
[ 1395.540981][T30055] EXT4-fs (sda1): Unrecognized mount option "—" or missing value
15:54:20 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1395.613587][T30100] binder: 30084:30100 unknown command 25362
15:54:20 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1395.658788][T30100] binder: 30084:30100 ioctl c0306201 20000540 returned -22
15:54:20 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xffffffe0})

[ 1395.711233][T30156] validate_nla: 10 callbacks suppressed
[ 1395.711245][T30156] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:20 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x6344}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:20 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:20 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:20 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000d000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:20 executing program 2:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4)
request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x8000, 0x0)
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:20 executing program 1:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x3, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1395.899980][T30272] binder: 30265:30272 unknown command 25412
[ 1395.907071][T30272] binder: 30265:30272 ioctl c0306201 20000540 returned -22
[ 1395.923558][T30274] binder: 30265:30274 unknown command 25412
[ 1395.930019][T30274] binder: 30265:30274 ioctl c0306201 20000540 returned -22
15:54:20 executing program 1:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x3, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:20 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x635c}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1396.016377][T30233] EXT4-fs (sda1): Unrecognized mount option "à" or missing value
[ 1396.022186][T30284] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:20 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000e000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:20 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0xc68000, 0x0)
recvfrom$rose(r1, &(0x7f0000000000)=""/18, 0x12, 0x0, &(0x7f0000000080)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x7, 0x1, 0x9, 0x7ff, 'syz0\x00', 0xcf3})

15:54:20 executing program 1:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x3, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:20 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfffffff5})

15:54:20 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1396.144627][T30391] binder: 30359:30391 unknown command 25436
[ 1396.168765][T30391] binder: 30359:30391 ioctl c0306201 20000540 returned -22
[ 1396.184606][T30392] binder: 30359:30392 unknown command 25436
[ 1396.207697][T30392] binder: 30359:30392 ioctl c0306201 20000540 returned -22
[ 1396.221280][T30394] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:20 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40046302}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:20 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0011000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1396.340787][T30406] EXT4-fs (sda1): Unrecognized mount option "õ" or missing value
15:54:20 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1396.394311][T30452] binder: BC_ACQUIRE_RESULT not supported
[ 1396.421866][T30452] binder: 30405:30452 ioctl c0306201 20000540 returned -22
15:54:21 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1396.456136][T30514] EXT4-fs (sda1): Unrecognized mount option "õ" or missing value
[ 1396.494380][T30518] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:21 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000000)='NET_DM\x00')

[ 1396.496102][T30519] binder: BC_ACQUIRE_RESULT not supported
[ 1396.523933][T30519] binder: 30405:30519 ioctl c0306201 20000540 returned -22
15:54:21 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40046304}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:21 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0012000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:21 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfffffff6})

15:54:21 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1396.586515][T30523] binder_thread_write: 17 callbacks suppressed
[ 1396.586525][T30523] binder: 30520:30523 ERROR: BC_REGISTER_LOOPER called without request
[ 1396.596959][T30526] binder: 30525:30526 ERROR: BC_REGISTER_LOOPER called without request
[ 1396.674352][T30541] binder: 30532:30541 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 1396.701506][T30551] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:21 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1396.748252][T30606] binder: 30532:30606 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 1396.778365][T30617] EXT4-fs (sda1): Unrecognized mount option "ö" or missing value
15:54:21 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40046307}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:21 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x301240)
ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040))
ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000080))
prctl$PR_MCE_KILL(0x21, 0x0, 0x1)

15:54:21 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:21 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a005a000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1396.874832][T30642] binder: 30636:30642 ERROR: BC_REGISTER_LOOPER called without request
[ 1396.911477][T30642] binder: 30636:30642 unknown command -1795162112
[ 1396.943352][T30647] EXT4-fs (sda1): Unrecognized mount option "ö" or missing value
[ 1396.961194][T30652] binder: 30646:30652 DecRefs 0 refcount change on invalid ref 0 ret -22
[ 1396.981736][T30642] binder: 30636:30642 ioctl c0306201 200002c0 returned -22
15:54:21 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1397.000006][T30656] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1397.014235][T30657] binder: 30651:30657 ERROR: BC_REGISTER_LOOPER called without request
[ 1397.023869][T30663] binder: 30646:30663 DecRefs 0 refcount change on invalid ref 0 ret -22
15:54:21 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfffffffd})

15:54:21 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:21 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0002000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:21 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000022ea2873a123d1db7cca1084165b3ba8dcc25b5cc5a11674752a3d86c8879dfa0d9c75b9029b05cc89704267b43991a6a329f060f3e30b9989a3df8fc9b56c0eda0dc600059b2de86f8cf4c0e196449468a561a0dd0f76343a26ba7b546e35df8dfc2d7e737c68d272395ad58cfebc4f47029b604eb64a0df6df7e51c0e002186f4a2a75eab1102577a5ee6597c969958a8b080c479b9494d9548aa7bb1de4dd1ff1f51d7088c55400957f9b112dfd230a53e5c5412e641bf0787f789f19415d9e52d3d49b69593da27b4517783aaca27ed34760f429ced53c2300674b4db7748107fa81aeb59ea74b6ef7a"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:21 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40086303}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:21 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1397.257647][T30865] EXT4-fs (sda1): Unrecognized mount option "ý" or missing value
[ 1397.282694][T30870] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1397.315140][T30876] binder: 30873:30876 unknown command 1792
[ 1397.337141][T30876] binder: 30873:30876 ioctl c0306201 20000540 returned -22
15:54:21 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0003000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1397.356760][T30878] binder: 30871:30878 BC_FREE_BUFFER u0000000000000000 no match
[ 1397.371050][T30874] binder: 30872:30874 ERROR: BC_REGISTER_LOOPER called without request
[ 1397.392719][T30874] binder: 30872:30874 unknown command -1795162112
[ 1397.402091][T30908] binder: 30871:30908 BC_FREE_BUFFER u0000000000000000 no match
[ 1397.404812][T30874] binder: 30872:30874 ioctl c0306201 200002c0 returned -22
15:54:22 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1397.439564][T30923] EXT4-fs (sda1): Unrecognized mount option "ý" or missing value
15:54:22 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x4008630a}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:22 executing program 2:
r0 = request_key(0x0, 0x0, 0x0, 0x0)
syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3, 0x40000)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={<r2=>0x0, @remote, @broadcast}, &(0x7f0000000440)=0x7)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={@dev={0xfe, 0x80, [], 0xa}, @local, @mcast1, 0x7, 0x0, 0x1, 0x100, 0xfffffffffffffffb, 0x0, r2})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xfffffffffffffeed, 0x0, &(0x7f0000000200)=[@release={0x40046306, 0x4}], 0x0, 0x0, 0x0})
keyctl$instantiate_iov(0x14, r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1ad6c52efeeaafe29c78c8965ce7b5f6689068e8a67bd3aa9545660ddfd65bae8e50aec9588aa38d0199fd9250ce1c2deb36103724b78a55c8e98abb8976cb4049d63152b2d435f717d3dcf56282a00f9af9f1eb9126f2914205566d98955fd4fde9cd87683fc27f463324d89ed200c505204620529e38352862e4bdcbe9f6337d6930e72daf1b3019f95ffccd328f22670eafb21300c8afb7167cf69d", 0x9d}], 0x1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1397.542162][T31016] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:22 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:22 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x1000000000})

[ 1397.633150][T31094] binder: BC_ATTEMPT_ACQUIRE not supported
15:54:22 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0004000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:22 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1397.674160][T31094] binder: 31082:31094 ioctl c0306201 20000540 returned -22
[ 1397.707982][T31098] binder: BC_ATTEMPT_ACQUIRE not supported
[ 1397.713889][T31098] binder: 31082:31098 ioctl c0306201 20000540 returned -22
15:54:22 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

[ 1397.794058][T31100] binder: 31099:31100 ERROR: BC_REGISTER_LOOPER called without request
[ 1397.814013][T31108] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:22 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40086310}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1397.850181][T31106] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1397.861025][T31112] binder: 31109:31112 ERROR: BC_REGISTER_LOOPER called without request
15:54:22 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:22 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0005000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:22 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1397.917864][T31113] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1397.985582][T31177] binder: 31132:31177 BC_DEAD_BINDER_DONE 0000000000000000 not found
[ 1398.024129][T31158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:22 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xedc000000000})

15:54:22 executing program 2:
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0)
setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x8, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1398.035385][T31201] binder: 31155:31201 ERROR: BC_REGISTER_LOOPER called without request
[ 1398.052806][T31226] binder: 31132:31226 BC_DEAD_BINDER_DONE 0000000000000000 not found
15:54:22 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:22 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:22 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0006000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:22 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1398.188282][T31235] binder: 31230:31235 ERROR: BC_REGISTER_LOOPER called without request
[ 1398.227511][T31236] binder: 31233:31236 ERROR: BC_REGISTER_LOOPER called without request
[ 1398.273824][T31242] binder: 31240:31242 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1398.296222][T31256] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:22 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:22 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1398.318931][T31256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1398.331293][T31303] binder: 31240:31303 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
15:54:22 executing program 2:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1)
request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x400000)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xab, @null, @netrom={'nr', 0x0}, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r2 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\vd\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = syz_open_dev$dmmidi(&(0x7f0000000500)='/dev/dmmidi#\x00', 0xd5, 0x800)
ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e23, @loopback}, {0x2, 0x4e22, @empty}, 0x15c, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)='team_slave_1\x00', 0x5, 0x1ff, 0xff})

15:54:23 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x1000000000000})

15:54:23 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0007000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:23 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x400c630f}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:23 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1398.502883][T31357] binder: 31353:31357 unknown command 0
[ 1398.526904][T31359] binder: 31355:31359 unknown command 25611
[ 1398.540997][T31357] binder: 31353:31357 ioctl c0306201 200002c0 returned -22
[ 1398.579277][T31365] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1398.582509][T31359] binder: 31355:31359 ioctl c0306201 20000540 returned -22
[ 1398.606404][T31362] binder: 31361:31362 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1398.625084][T31365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:23 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:23 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40106308}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:23 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0008000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:23 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x4000000000000})

15:54:23 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1398.860376][T31583] binder: 31570:31583 BC_INCREFS_DONE u0000000000000000 no match
[ 1398.878415][T31585] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
[ 1398.900417][T31587] binder: 31580:31587 unknown command 0
15:54:23 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:23 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0x7, 0x4)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000140)=0xd0d3, 0x8)
accept$unix(r0, &(0x7f0000000200), &(0x7f0000000280)=0x6e)
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000180)={0x0, {0x8, 0x7}})
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x40080)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={<r2=>0x0, 0x80, 0xc0}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x10000, 0x2, 0x100000000, 0x3, r2}, 0x10)
r3 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\vc\x00\b'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1398.912421][T31585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1398.917979][T31587] binder: 31580:31587 ioctl c0306201 200002c0 returned -22
[ 1398.934971][T31590] binder: 31570:31590 BC_INCREFS_DONE u0000000000000000 no match
15:54:23 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40106309}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:23 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:23 executing program 2:
r0 = request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='}-bdev\x00', r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x6, 0x400)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@broadcast, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@broadcast}}}, &(0x7f00000002c0)=0xe8)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mixer\x00', 0x18000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0xe, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80}, [@map={0x18, 0x0, 0x1, 0x0, r2}, @ldst={0x2, 0x0, 0x1, 0xb, 0x5, 0x10, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2}, @map={0x18, 0x6, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @generic={0xff, 0x3ff, 0x2, 0x9, 0x81}, @exit]}, &(0x7f0000000180)='GPL\x00', 0x1000, 0x1000, &(0x7f0000000940)=""/4096, 0x41f00, 0x0, [], r4, 0x6, r5, 0x8, &(0x7f0000000340)={0x7fff, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2fa, 0x3, 0x100000001, 0xc9e}, 0x10}, 0x70)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:23 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000a000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:23 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x8000000000000})

[ 1399.104251][T31654] binder: 31653:31654 BC_ACQUIRE_DONE u0000000000000000 no match
15:54:23 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:23 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4000000, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0}, 0x20)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000009555bac100"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1399.193807][T31708] binder: 31653:31708 BC_ACQUIRE_DONE u0000000000000000 no match
15:54:23 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40406300}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1399.246020][T31710] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:23 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x401)
connect$ax25(r1, &(0x7f0000000040)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1399.313627][T31717] binder: 31716:31717 unknown command 0
[ 1399.358146][T31717] binder: 31716:31717 ioctl c0306201 200002c0 returned -22
[ 1399.364908][T31724] binder: 31719:31724 transaction failed 29189/-22, size 0-0 line 2995
[ 1399.386097][T28689] binder: undelivered TRANSACTION_ERROR: 29189
15:54:23 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000b000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:24 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x10000000000000})

[ 1399.414288][T31729] binder: 31719:31729 transaction failed 29189/-22, size 0-0 line 2995
[ 1399.450343][T28689] binder: undelivered TRANSACTION_ERROR: 29189
15:54:24 executing program 1 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:24 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40406301}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1399.527129][T31849] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:24 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:24 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8)
sendmsg$xdp(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x2c, 0x2, r1, 0x3b}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000240)="59c3b869b6ac72b5fd551f1f8dd9144203455246a2a8012b15224b3ed09891c04448c43e3e35", 0x26}, {&(0x7f0000000280)="ab4cff3f1cfd988d4e1a61110f77dcfa46581960c0ebb58f82258c9d8eedefde6276149c2d75064b9191cb3af2038b7636b2c3ababb9f26b882995d5d0022e314ebc3cb23bb88fa7cff7c4e828c33b8fb865970f5ec32db3f3199a787a9775b555c0ac6b52141a5c3ee557a0590202cc3cf57f86bfebd9d68d765907c9e9f0a5264a923e2e933e484e592690f5d7", 0x8e}, {&(0x7f0000000340)="8cfea23ef9da6f19d2ea94b5e8ef7e32ab2a37f85e1cfb8f8a556886c9de70c8019d6c957064e75082d75d4baec3d90b8cc4a507c44b064b9e5cfe1acb16e8026703e7c790c048418e9930ff121cd209382608c06ca98d0445ada97e34f8f4957460d9ec6011c74f30ce241712e1a217ba28fc3a9fccd42d2be8c3aab252d610756d58bb36a867cbe53393d01f67dcde4e47a916a2aae2e85878292f233bc7a48c965ce90738ec6472e3edb7b4440f7192e3e2acc1027cdf3d3686eb72f19aa8b4d7626699171fdf", 0xc8}, {&(0x7f0000000440)}, {&(0x7f00000004c0)}, {&(0x7f0000000580)="5c018c98c3b45a445047fd669db62768d4c057b934772241c3db3da35f80c756c5c6fe752c06af0486779d2b7a67c5e746cdad36409784a93cd7ac73d24d38c0d545189177c640076d", 0x49}, {&(0x7f0000000600)="743aabda53c0381817c59f261409f06a18e7aaf5bbb1d141df7655967a8b98871da1560498739735f479f0038ce8947aed50ab569cd48fe689c315be47359adb1370456b73b39ef5a64b80741f33cf7f60aff929d48726bfc48479abd51ae1450477bd3f542db7435dbb98ba66abf173b2fce2b252f7fb1e01428b60201febfd1067be62d38f513dfc6d9a510e259ce52190e7c4196f702b0b7d3faa148befe2c9675baf627c736c064b401e7c6ca87b009ce6a7f4f45ffe27663940000df1ff8ae53fb1aa1cec422746dae6e2df", 0xce}, {&(0x7f0000000700)="ff2d3b0502365e04c509ed7cb5dfc91996338b017080f1e0b42f45da577acb5cc923019981853cde0f8f4991649be8038bb2cfd0330945446bdfdb80e8432884cafa5745", 0x44}], 0x8, 0x0, 0x0, 0x8010}, 0x20000050)
r2 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1, 0x7daf)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x1c, 0x0, &(0x7f0000000080)=[@exit_looper, @exit_looper, @request_death={0x400c630e, 0x2, 0x4}, @enter_looper], 0x45, 0x0, &(0x7f0000000800)="1c6fa36c11baf135d6d6dda6fdadef29b197966af78ba61507500920c8a51f100382e55bf2024aa95af5b98177085cb464e69a1a88bc6642d125901f3108cf1aa0e46b93fc"})

15:54:24 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000c000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:24 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1399.670143][T31943] binder: 31937:31943 got reply transaction with no transaction stack
[ 1399.679326][T31943] binder: 31937:31943 transaction failed 29201/-71, size 0-0 line 2900
[ 1399.690382][T11110] binder: undelivered TRANSACTION_ERROR: 29201
[ 1399.705859][T31945] binder: 31937:31945 got reply transaction with no transaction stack
[ 1399.746071][T31944] binder: 31942:31944 unknown command 0
[ 1399.769796][T31944] binder: 31942:31944 ioctl c0306201 200002c0 returned -22
[ 1399.784773][T31954] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
15:54:24 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r1 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e20, 0x10000, @mcast2, 0xa61}, {0xa, 0x4e23, 0x2, @rand_addr="865ac0bf97240f9e520f120270b3e98b", 0x1}, 0x5, [0x4128, 0x8, 0x4, 0xa6, 0x0, 0x100, 0xff, 0x400]}, 0x5c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1399.798303][T31945] binder: 31937:31945 transaction failed 29201/-71, size 0-0 line 2900
15:54:24 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xf83f0000000000})

15:54:24 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1399.859099][T11110] binder: undelivered TRANSACTION_ERROR: 29201
15:54:24 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40486311}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:24 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000d000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:24 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1400.004202][T32062] binder: 32022:32062 ioctl c0306201 0 returned -14
15:54:24 executing program 1:
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x400000, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080)=0x2, 0x4)
r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000100)=0x1)
ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x4004550c, 0x0)

[ 1400.046653][T32074] binder: 32068:32074 transaction failed 29189/-22, size 0-0 line 2995
[ 1400.083161][T28689] binder: undelivered TRANSACTION_ERROR: 29189
15:54:24 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40486312}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:24 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a000e000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1400.129193][T32131] binder: 32075:32131 unknown command 0
[ 1400.143518][T32131] binder: 32075:32131 ioctl c0306201 200002c0 returned -22
15:54:24 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x100000000000000})

15:54:24 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1400.241873][T32235] binder: 32175:32235 got reply transaction with no transaction stack
15:54:24 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x4, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40, 0x28000)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:24 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1400.295492][T32235] binder: 32175:32235 transaction failed 29201/-71, size 0-0 line 2900
[ 1400.312079][T11110] binder: undelivered TRANSACTION_ERROR: 29201
15:54:24 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0010000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:24 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x2, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:25 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x200000000000000})

15:54:25 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
fcntl$dupfd(r0, 0x406, r0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1400.486687][T32357] binder: 32329:32357 unknown command 0
[ 1400.510760][T32357] binder: 32329:32357 ioctl c0306201 200002c0 returned -22
15:54:25 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0011000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:25 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xa39, 0x14000)
ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000040))
getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000080)={'broute\x00'}, &(0x7f0000000100)=0x78)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1400.541888][T32388] binder: 32386:32388 ioctl c0306201 20000540 returned -14
[ 1400.582004][T32450] EXT4-fs: 13 callbacks suppressed
[ 1400.582017][T32450] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:25 executing program 1:
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
close(r0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f00000003c0)={0x2, 0x0, 0x0, 0x740004, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
write$UHID_CREATE(r0, &(0x7f0000000100)={0x0, 'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000080)=""/50, 0x32, 0x80000001, 0x503, 0x7, 0x0, 0x736}, 0x120)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x1000, 0x4)
ioctl$RTC_PIE_OFF(r0, 0x7006)
recvfrom$llc(r1, &(0x7f0000000280)=""/206, 0xce, 0x2000, &(0x7f0000000380)={0x1a, 0x309, 0x8000, 0xbfac, 0x96, 0x7f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10)

[ 1400.625493][T32471] binder: 32386:32471 ioctl c0306201 20000540 returned -14
15:54:25 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x3, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:25 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x10)
getpid()

15:54:25 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x300000000000000})

[ 1400.699642][T32528] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1400.788560][T32612] binder: 32571:32612 ioctl c0306201 20000540 returned -14
15:54:25 executing program 2:
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0)
request_key(0x0, 0x0, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x7ff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0bff2076b163e065fcdaeef734c3654cfbce2c4bf20000"], 0xfffffffffffffe61, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:25 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0xfffffffffffffff)
r1 = msgget$private(0x0, 0x400)
msgctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/4096)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x6, 0xffffffff7ff0bdbe})
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x2, 0x4)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f00000010c0)={0x8a, 0xffffffff80000001, 0x1f, 0x0, 0x0, [], [], [], 0x9, 0x8})
eventfd2(0x7, 0x80801)
ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000001200)={0x80000000, 0x3})
recvmsg(r0, &(0x7f0000002440)={&(0x7f0000001240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002400)=[{&(0x7f00000012c0)=""/2, 0x2}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/66, 0x42}, {&(0x7f0000002380)=""/98, 0x62}], 0x4}, 0x101)

15:54:25 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0012000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1400.874523][T32618] binder: 32607:32618 unknown command -1795162112
15:54:25 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x4, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1400.928124][T32618] binder: 32607:32618 ioctl c0306201 200002c0 returned -22
15:54:25 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a005a000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:25 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x6, 0x80000)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x102, 0x70bd2b, 0x25dfdbfc, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x11, 0x1, @udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20040040)
r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r2, 0x802c550a, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x2000000740004, 0xffffffff7ff0bdbe})
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r2}, 0x10)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x4004550c, 0x0)

[ 1400.975146][T32650] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1401.048248][T32735] binder: 32694:32735 ioctl c0306201 20000540 returned -14
[ 1401.071984][T32760] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:25 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x10)
getpid()

15:54:25 executing program 2:
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4)

[ 1401.121865][  T391] binder: 32694:391 ioctl c0306201 20000540 returned -14
15:54:25 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x400000000000000})

15:54:25 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009020000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:25 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000001000001)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:25 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x5, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1401.280685][  T404] binder: 402:404 unknown command -1795162112
[ 1401.302699][  T404] binder: 402:404 ioctl c0306201 200002c0 returned -22
15:54:25 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="9db37e20000004000072c49a0f294f513f699c28fa1b36b105dc889356b4157b531778b5558b95832980a8c47bd81d2153787878fbe3f56b7744c6506baa0ebea1ac231acc65344f01d2cec70fa4f06890b44cc406d2a4662a2256cfa75e4cdaf6865b1a5e7fd4b7356e1c17e38bbec89d57607e379b13a7c8bcb8065c3ad240d2da06e24cab048c0e6f9a97e278179c9a13adb8e629af225b"], 0x0, 0x0, 0x0})
socket$isdn(0x22, 0x3, 0x22)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00')
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x1}, 0x8)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:25 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8)
setreuid(r1, r2)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:26 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009030000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1401.419169][  T515] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1401.441365][  T576] binder: 529:576 ioctl c0306201 20000540 returned -14
[ 1401.487432][  T621] binder: 529:621 ioctl c0306201 20000540 returned -14
15:54:26 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:26 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x10)
getpid()

[ 1401.531291][  T622] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
setns(r0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:26 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x500000000000000})

[ 1401.582086][  T628] binder: 618:628 unknown command 545174429
[ 1401.602598][  T628] binder: 618:628 ioctl c0306201 20000540 returned -22
[ 1401.672207][  T633] binder_thread_write: 21 callbacks suppressed
[ 1401.672218][  T633] binder: 630:633 ERROR: BC_REGISTER_LOOPER called without request
[ 1401.687023][  T650] __nla_parse: 3 callbacks suppressed
[ 1401.687035][  T650] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1401.688541][  T666] binder: 631:666 ERROR: BC_REGISTER_LOOPER called without request
[ 1401.706844][  T650] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:26 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = dup2(r0, r0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fc10760df991169a5a286a5636451415b514d8afc28bb661d08337421cc5566517476244c011155f3f805e2e4f3192e9a01749cec4ec5f192659e30a7a5bab05b30505d1450b35080121898d0d960262b4deef9e516756909ab24cd73f00000000000000e265ce3dacf55ab233fd915cd48780e6"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000080))

[ 1401.744301][  T633] binder: 630:633 ioctl c0306201 20000540 returned -14
15:54:26 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009040000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:26 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x7, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x20740000, 0x7fff})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1401.832812][  T743] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1401.840780][  T747] binder: 745:747 unknown command 225841404
[ 1401.869533][  T747] binder: 745:747 ioctl c0306201 20000540 returned -22
[ 1401.883961][  T782] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1401.903086][  T795] binder: 784:795 ERROR: BC_REGISTER_LOOPER called without request
[ 1401.916982][  T795] binder: 784:795 ioctl c0306201 20000540 returned -14
[ 1401.944306][  T804] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:26 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:26 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x600000000000000})

15:54:26 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009050000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:26 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xa, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:26 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000002, 0x1000000000000004)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0x6, 0x268, 0x4045, 0xfffffffffffffeff, 0x16, 0x6, 0x924, 0x9cb0, 0x2, 0x9687})

15:54:26 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
socket$nl_xfrm(0x10, 0x3, 0x6)

[ 1402.129856][  T965] binder: 964:965 ERROR: BC_REGISTER_LOOPER called without request
[ 1402.157475][  T977] binder: 969:977 ERROR: BC_REGISTER_LOOPER called without request
[ 1402.172289][  T965] binder: 964:965 unknown command -1795162112
[ 1402.185953][  T977] binder: 969:977 ioctl c0306201 20000540 returned -14
[ 1402.189548][  T973] binder: 972:973 ERROR: BC_REGISTER_LOOPER called without request
[ 1402.193375][  T965] binder: 964:965 ioctl c0306201 200002c0 returned -22
[ 1402.213020][ T1030] binder: 969:1030 ERROR: BC_REGISTER_LOOPER called without request
[ 1402.221309][  T993] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1402.232323][ T1030] binder: 969:1030 ioctl c0306201 20000540 returned -14
15:54:26 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009060000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1402.274539][ T1153] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:26 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x48, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:26 executing program 1:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0)
write$selinux_create(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x52)
r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x4004550c, 0x0)
renameat2(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x6)

15:54:26 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:26 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x700000000000000})

[ 1402.421407][ T1305] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:27 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009070000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:27 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x2, 0x2)
getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x40)
ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000040)=0x80000000)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000440)={0x5, &(0x7f0000000140)=""/112, &(0x7f00000004c0)=[{0x6, 0xc7, 0x5ff, &(0x7f00000001c0)=""/199}, {0xeeb, 0x28, 0xc57, &(0x7f00000002c0)=""/40}, {0x9, 0x31, 0x7fff, &(0x7f0000000300)=""/49}, {0xb69, 0x28, 0xe6, &(0x7f0000000340)=""/40}, {0x7, 0x88, 0x20, &(0x7f0000000380)=""/136}]})

[ 1402.463874][ T1314] binder: 1279:1314 ERROR: BC_REGISTER_LOOPER called without request
[ 1402.532249][ T1314] binder: 1279:1314 ioctl c0306201 20000540 returned -14
[ 1402.569420][ T1344] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:27 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x7, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1402.581387][ T1342] binder: 1323:1342 ERROR: BC_REGISTER_LOOPER called without request
[ 1402.596990][ T1337] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:27 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x4c, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:27 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009080000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:27 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:27 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x800000000000000})

15:54:27 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10)

[ 1402.763982][ T1533] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:27 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4002, 0x0)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000040)={0x0, 0x0, @pic={0x4, 0x1000, 0x80000000, 0x100, 0xffffffffa9c22f83, 0x8000, 0x5, 0x0, 0x1, 0x7fff, 0x7, 0xffff, 0xc30e, 0x40, 0x0, 0x9}})
request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000180)=""/32)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f26205621388c09a71827010c4cb51e8f6f7d0"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1402.827354][ T1545] binder: 1521:1545 ERROR: BC_REGISTER_LOOPER called without request
[ 1402.835777][ T1544] binder: 1542:1544 unknown command -1795162112
15:54:27 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009090000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1402.885080][ T1545] binder: 1521:1545 ioctl c0306201 20000540 returned -14
[ 1402.895139][ T1544] binder: 1542:1544 ioctl c0306201 200002c0 returned -22
15:54:27 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x60, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:27 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
setsockopt$inet_buf(r0, 0x0, 0x0, &(0x7f0000000040)="db7620ba4d997af38d38adc526365f0246053764718ee50d69b7544c616e7cc478a087cf0c1d5da59fad3ed5820d925fc517b270474237760991ef921f0f7bc5", 0x40)
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000140)={0x6, 0x6, [{0x2, 0x0, 0x7fffffff}, {0x7, 0x0, 0x9}, {0x4, 0x0, 0x200}, {0x6, 0x0, 0xfffffffffffffffd}, {0x2, 0x0, 0x2}, {0x6, 0x0, 0x4}]})
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000)
ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000100)={0x1, 0x40, [{0x81, 0x0, 0x1f}]})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:27 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00090a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1403.004269][ T1620] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1403.015998][ T1598] binder: 1574:1598 unknown command 1644520178
[ 1403.022456][ T1598] binder: 1574:1598 ioctl c0306201 20000540 returned -22
15:54:27 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x900000000000000})

15:54:27 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

15:54:27 executing program 1:
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x4004550c, 0x0)

[ 1403.152090][ T1756] binder: 1703:1756 ioctl c0306201 20000540 returned -14
[ 1403.171458][ T1788] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1403.188400][ T1790] binder: 1703:1790 ioctl c0306201 20000540 returned -14
15:54:27 executing program 2:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9)
r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0)
request_key(0x0, 0x0, 0x0, r1)
r2 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x4200, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="3500000000000000070000007f000001e00000014e234e23d9000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f801070003000000000000000700000000000000ffffffff00000000"]})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000800)={0x80000000, 0x3, "bee4eeac0e64196cf5066c33d5902719a0039c5958817df515250bda31608a06", 0x6, 0x4, 0x6, 0x811, 0x2, 0x61c, 0xcf00, 0x2, [0xb02b, 0x8000, 0x6, 0xfff]})
write$UHID_INPUT(r3, &(0x7f0000000ac0)={0x8, "c294bf098af754d5a303324a23310742aed0801c3d4a23e4ec5ba8177fa768a8143871d12a1c859d5e52c80632c241d127551d2077fc527b670ee6e36b38fabfcf1102153200d687bd0fef00962576b5cbfdc7b56923de15238bb883cab3fdcc74f1c2a31384516dfe28da6f0439e382429c7ea53af91e233b5c748e42ba121c969147d048bcdc75c7b07285af11db84bd71fe7706732a4a3bdab49853eadb2e31c46bd9219031a445009c51daa2d4655e14511f04e410f4512430fc25dd1075730cc44769268c6195df99127959b338e62712a76af9859374924627e9f5b0287494a8460e27f52a271f376734a5ac9469bd0612736a00f948b026b225a3509854b6d9a77aeb1ea7794d92ceec771c8b95493f25a7454b18a2c322c52f7cb657bdc801eccfd6892fff96c1f8d6c353469f42465d0ff026066d210e4a1cde8fb352f4d4e407d928447725f2d590799c142cc4186e490791fda15d138b5aefa6f3aae122d3909b84681cd1a9f43b1e9134687c9642d88c41575bbc5bf5e31abbf0c09b88b2e3ffb2decd88776d66a500bfae207e8079303a84c053bbd5b6a1942c976e478e1ec07dc5f3a6c3d8315f47bec582bc98e3d82fe9fbff2a77113c083063e90fffe62338ade9fb4d9b03f2e3943fd98c78a01ebfaf9e1eac4efded2c49990dac08f822fc007c5c323a3216a3cb2e9526f4bb73e345f78c0bcdf43dd10b1bc6894d51b5bddb315f4b95bc036de29d91840915251ba00cca52edb0ad43a6f3f0575e079402b84733c3936725ee2e459bba18975d64d3bd6a98ee5216b9583863ad8e7c2a198a8b5ed5741085e87fb7a19114df78aa1ac8e83f8a62b5335ea9ebcea3669ddd3500d3a837bd623155c32afd601db47f71c4c5e8289ba4c6a56cda4dc05f5e299fa924c38db724ece345debc00af357a1aecb46be3a56165d0d1b036b0814fb7f794af5352fb2c5760295f23b0b2fcd6a051ac298d8b2e2bbcaf8725cf1d35452e11d56e2fb1f5be4bcde18e4af90546730a5d8a9055160e7a2586a9d5357c94865f11a35b60d872e9bb9784b27c236c37da31f485250d44d48f9a6f4884ed17294694dde570c9a32f1f6ce68d3162aa0eff625c7073cc79e1ef61d9ee30a186b07fa6ddcb4764e52acd0698c1588c27764b8e5bac89174d63c2eee1c93f8d888cf3f5d1cc93feaa22153e7620f97d24613ab111fb18601e3d3690490cfffd2023675bb72b017e41c8a7e81176e8b2b580f82398d7b374b9ef1ec517cd36a7e37f0786bdbfeceeea65e8b3375cb1856596c1b86edf6c46d83ed719c2c3d9d879f23fdf8afb5d41769194e91f7fb8124d5854a83bad41a21f01414b32b34b3665f272faa064ab1d63943845c9fe5c5e8ca1ea6dca51496de57fe755947149ace314fb82cbf03556d5bd9aa3072305700155da1be659fdf50509580225a273f9e960de9e0925e56ccc09574c325320b4d61228710bef2279f907192f6bcdb06910930a4cfd5f625660b9ba7bda790cef5025ce2cf4dbb873ad7e387a0e91e3548da3d27ec98ec22de37cf9e9e29d3c23d37f18fec3c60a650ac5e99e8bc8d5b75856c18646cdfe8642bbceba9a5e311b9d2ceeb94967d8452435b9fe47180aea6bfdb4bcb7fffca1a2ff8ad8deae2a9a7aa0e9a07510d6a64622c99541b487ca10f0f5962d7e6554c68fe0692da23c84f242da7f69ecb190a01f7d638c851c96474e2cfcdff90f73f7e32c3fab5067caa82ab75b233c0872c2cf6f8606295d86fe36c5adfb827635502b5da35544a6c4c6d0c9666570519b26a66dd1548973bd6796042e6de18554552e697bb2d79f499a3a0c072b955410287b907c1b4f8866e2e8e897a0bde4e0c5c6e8a77a65d2f7dd1af094dd537671d0853f645110f6a176b036728855b32b5d6916bd2d8ab4508c67d5c704ee9c070273166831678a544d1913f6e4338fad952932d02bbd2a7fc657b81df6b99a7867311da8a8caffb8cb1dd2cc8590cbbd70f23b51c09fa53161b68b0f684117490565ee6ba21e3bb2276e95ba6d080e80c95b613fb53b31ac2b4aa1069145df8392fc202a752d9f5ca85a9d92aa6b6bf35848088eda7538d2164071c4d4926dc96215a9430ce1f74b4aafb1751a102af3d8ab83a6e2b7aec21dc0ef348d68c94e74284420672f1c20b706b05362c2b2c82dbb908d500d9bc016bc3e40dcaf83a55696799b2ffe0e043c0c35ad6cd7b2b7a561c15a7b78ae1507cd56b3e9ea2aca5fac1c7d19c311b50cd89dbb8412a94c2f6b2947875680f8f650cb1dcb864ab935b56b3b60a0839eb06a05deede95b681159bf48bc521b6067768b1fe506ad89b4ae599e9ddc273a12d0a4b67d5910fa3122adf822b5ba50dd9a4ac7a73d03793ca86d4ae3a4f332d53334549e2b6efbc6fe4ed008df410e323f6c5880776e1946b3faec078bf28a02ecd0e8d490cc223f60b7ba88a7483d899714e7f983b18f2811474fa7e460a3cfcbfc29c4d03410c9ecee87f2377c72ec33502685f0b67115a240c45a6a81beb212561cb3f2bd8fdd559272c2a4b40f6292851a3f145252e7aa1e1c136da4e30e42b91e39eb227b8883d525ec97c9b62ff46758e97549758714e7c783d8fead4bcd7a51355f207bf5bd5072c1c088d786d53f022cd6aecff39c3c7ed0fa14e88efa7e39ff51dba0e79e311e13ffe91ed8bd72317441fa84e3a1d6db9844b8fe49500d2cdccae672509d55d30370d3045503648209f3cbe1807186fe0818563000140cd21d5b6861e352659ad598f47f9aaafb39433a32706edc66803893348f284535508c0f250343798326aa320bb8e2bb0ac7a26e0933545c096085885f145a5b639977c5412182646307ee4c16c1595bdb656adb1a3a75b75890a52ee9a4e081eebe2f947180cd77e1f6008c17ad095419e86293754f8bfd7f089f62005d6900243085aa07ab9af038f9924b40ba2380078db1a6b5859031c7e207e3e21366e0698269146822200abaca7f329a1b6d3b0207bafeae95a33adeb8a2dee03fde3628a1c5de9edb8a832a8d8b6cbb2aa4cd3b5ae883f631366139601c2104262a0e6bde0827f99fe5a5fc51534759c0cb9f03f6160694461f6c1b6f971425e0dcf2bfe994b33ffa4daab80e5589114c80cc31d85967149d174e8ec53a5936a5eaa089e8229ea243ca2e2522d254f49c05b3651b573998dab19c172102d26c1e8887728721b3683a5502542b153fd83dafa4230bd67b3f7dc9f0af46ace27fecf58eb07990d9d7e038c3886170e73d1be34dda6e369dadb833c763e982f2171a9ada3ded792eb6b5b042b808afe89f89f47de71eb3363a2fbde13fdfdef2ee108620aacb5de6b77f717fb9b9198356ce46b606ef731f867ec461cf153401f14d2ec457b6fa778d8bea36aca05c56ee43d2635068b518318685a9a03dfb2f4fca6c5dec74460afe7fb50c8626f8e6d7331a92665554529d81b4cc6c802a52f4a58e46f13956378189046fdfdd2f20ecacb51cf5ebbf438333978a2888096971a047ff0530293408fb3c486da2c524770f635cd1fe2a1c2286e5a009bd678b523dec12df41e53eabe878076f1a91d6d6c222ed097b7bec94e9abdc015d436c70d951bb7740663fdc22d02f8a84dea0621a96f0c7f4b3c34a45bc9f43c0f4a4766561199e667e5ca0f031b7ed0e1c8dabf9d5a4a1df5b82620a11b9a23e900ffcf9e558175fe4f458bd9420e92e2cf4b3486b618514a777202c36ca105fe80327375034753583e4a054f6a657cfa24caefaa247adba4a70c61989693e4c025db45744f694d613bdc4cb76bea232883bea734a73ea9d1bfc8f8fb17cee8d09daf93e148314cf6abd74be8b6f96ecb2c56d62e0914eab3804cc25c3e22881bb0f60cae2debebac95e1e0db6c117b4f4c494156d8359eeb320663e5d76a98ac3c94aa21dce3bda2524bc082be2f15d04c04c1dddf009f6487a84ca559376072eb7b6b3b4e1d69e2fbbe7e19364ea56e654b9f0a68294d0a87bddf3715ff5c4dd14464cba20d9ea9256071473e1c21614e8417b19c635f5a01736528c48d8f0e089ac3481472cc392c4bcb80d66e4b87e694cab9e0963eeda237222ad43679510ace1a9d71cdb16ed7e5758efbe2c8046251f0b852aa3abd2319dd31b5a90d9c2b96649d4df3426e90025765c4272ed34a2e7a8d52c14470d4eec81adb69e8025774b7194f43f4783d27b010e6a36081160a940f41a7388eff03c391f5b84cbeda4129b2737474822c690b65b708384d8aa53322e334774d3fae5a4b757fe13e4448e01735af7a0f8b1a01b4be39ca1709bfd643583248f2cc3a570d498621bb0f965da63ce2a602dca04893a3470a6271b636bd0aacc96e1b2ee7e6bbbedf4c058f400f0abb3be05b0771a3cde01bae95523a9a88c1e0406b5ddecb47d9e29a167262e8ef9081b334c00ae5afc6369c6b74bce218ac3a7b026ae68940ec32825ee429d67164ac92eb746425138c7463672c6789a9f108fd938c314f8337f2025bd8b8125239122077321cf8a0968ac676db23ced76be90a84b0b362fff8002fc319ccd00ed8bf83c650c81a297e4cb75d8c0b7d21909e6bfa3feb1cc1ec91e0b3998f9756a50f66c8f4432e0762a26179c9eb4e3d4f292b8e8df1a2099bc86e18c029728c20a5b3197c65c635a89874eceb8d9745df7139c884151983a71a67c69d911e84a538e4ca18131df6a8415e11e5b466bb17a6264f9efc76c62b62cb687e5464a8e6496f500c0a440836fe2b8546e6283499966df6befd490e569c58333f74178e3674428c3bd08cfa5dba3eaed85031e98f05095b8165642d10492207d6b00b0f728f362970841cd7f65aa7ddedee820fbe7f3440babb8a247fda55b7cbe8198738aa3e5e04c37f5ba4994096639a4485a1832393ec6ae1863fa493514a133831a3a50556503189d13b8fe6b48dc3ad663db661caf87b9c4092cf477568298d3ae30f76516fcee70f89f10432b441d24181522270a63608c7050eddf7de5739418fadb92de5f3c5d9287f128c934d8c33d0a17a91e18741202daaeff9a404cceb4a57be6178a4fbcce42820625aace2c5bd2437e89dba08c643572baf4ba837eb3fa9d28f5b04b38f0e78ed609b9137991023791daa577fb3f9653264755e1bc7bea92187f873ab72c87d96181972cc49c739307cd3392a132c18c9d50c8e9d248f81d1b9941518ab2772bad84e83baa7d8e0aa5501674fdba73250271dfcf94d3baeca3bc26e797a301e6fa7f26670db7779058c3cd00b594e4ebfb3094c79e50754b7e3aec20ab7bccc10180e2c3be47c1ea7704cd9826603cddedaee64451202d091d62f2d9f28c4f63673dce1c37e43d0a2f292bf422f019c5cdceac6940b63b1d9649d9ee6af51cb85a92b9d3ea52a8a2269d158e3bde958422c59635c54f35477db59fba0bf6cd5087c0521365d79a651ee5c9566e86ec4ebb9e1f1f387c523fd2c3bbbb17b78b4c0e58a89d577045b3850810d1e5f477c91ad8a1e2d683ec33ce583609d185c7e522de20ca3fb48f861b59d11f7428d203433a928076182ac03589fe13fc2647a3aaf896349b4cab5d170b61aeb340df2db392ca33ca0e13830b65f557f86d9c2c7a71d463182e3a99589390b6cd00698519f2c09e4a75fca05416cb9ca69138ced88133b3608ea10a0394902ef1af0ded3e6d8092bbe73a248280459b188b0ab9bbcb97064038137215c81b9420ef31abdf25be678fc28723ea7b6020ae6b84222c0673f4c458e8745b5cf8f15164", 0x1000}, 0x1006)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=@can_delroute={0x27c, 0x19, 0x8, 0x70bd27, 0x25dfdbff, {0x1d, 0x1, 0x1}, [@CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_AND={0x18, 0x1, {{{0x2, 0x5, 0x7f, 0x800}, 0x0, 0x2, 0x0, 0x0, "e92a1b06452a0bc2"}}}, @CGW_CS_XOR={0x8, 0x5, {0x7, 0xfffffffffffffff8, 0xfffffffffffffff7, 0x54e}}, @CGW_CS_CRC8={0x120, 0x6, {0x59, 0x2a, 0x65, 0x6, 0xffffffff, "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", 0x0, "3fdbf50a824e58c60980b15814cd3c3a34de615a"}}, @CGW_CS_CRC8={0x120, 0x6, {0x8, 0x3e, 0x7a, 0x4, 0x2, "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", 0x0, "66db86aa669eba53c4cd1f1f93e459854f7b1a31"}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000015)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000940)={<r5=>0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0x6}}, 0x100, 0x4, 0x6, 0xd1a, 0xc2}, &(0x7f0000000100)=0x98)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
dup2(r6, r7)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000a00)={r5, @in6={{0xa, 0x4e21, 0xba3f, @mcast1, 0x6}}}, 0x41)

15:54:27 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00090b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1403.251655][ T1795] binder: 1791:1795 unknown command -1795162112
15:54:27 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x68, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1403.309437][ T1795] binder: 1791:1795 ioctl c0306201 200002c0 returned -22
15:54:27 executing program 1:
syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7fffffff, 0x98040)
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:28 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xa00000000000000})

[ 1403.402038][ T1833] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:28 executing program 2:
r0 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='/dev/binder#\x00', 0xfffffffffffffffa)
add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="493624482b68a46bcaf3cc3cb5514bd891e5446d636ce5a0924fb0651fe19b9652e7cc480bac34c680632aee7fe52f759ea6a98dedb7abd829ed09bfdb495ba94910298b7732980197647b14e895e9d353c857999f9bcfb5376da644c5cc46a55db1ddf1978fc1c373d05291de03c15218dfce48e255d9ca06b1", 0x7a, 0x0)
add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0)
add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)="0f49f1e07599f543558cb10d2b9a9b2cd9fa25b72e3bb0b23822d52c2a068dcc1e0753e0e6b87c16b59356", 0x2b, 0xfffffffffffffff9)
r1 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9)
request_key(0x0, 0x0, 0x0, r1)
r2 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0x22400, 0x0)
pipe2(&(0x7f00000003c0)={<r3=>0xffffffffffffffff}, 0x4000)
ioctl$RTC_VL_CLR(r3, 0x7014)

15:54:28 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1403.464339][ T1911] binder: 1879:1911 ioctl c0306201 20000540 returned -14
[ 1403.487337][ T1913] binder: 1879:1913 ioctl c0306201 20000540 returned -14
15:54:28 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00090c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:28 executing program 1:
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x4, &(0x7f0000000100)=[{}, {}, {}, {}]})
r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r2, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x4004550c, 0x0)
accept$ax25(r2, &(0x7f0000000380)={{0x3, @rose}, [@netrom, @rose, @null, @remote, @netrom, @default, @null]}, &(0x7f0000000400)=0x48)
ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0)

15:54:28 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6c, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1403.629302][ T1929] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1403.651303][ T1928] binder: 1922:1928 unknown command -1795162112
[ 1403.670330][ T1928] binder: 1922:1928 ioctl c0306201 200002c0 returned -22
15:54:28 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xb00000000000000})

[ 1403.679004][ T1930] binder: 1927:1930 ioctl c0306201 0 returned -14
[ 1403.707168][ T1940] binder: 1931:1940 ioctl c0306201 20000540 returned -14
15:54:28 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfa98, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000040)={{0xfff, 0x9}, 'port0\x00', 0x40, 0x10021, 0x9, 0xa8, 0xff, 0xffff, 0x2, 0x0, 0x5, 0x7fffffff})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:28 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00090d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:28 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x74, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:28 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
fcntl$setlease(r0, 0x400, 0x2)
ioctl$RTC_WIE_OFF(r0, 0x7010)
accept4$unix(r0, 0x0, &(0x7f0000000040), 0x80000)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:28 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1403.929387][ T2065] binder: 2055:2065 ioctl c0306201 20000540 returned -14
[ 1403.958569][ T2079] binder: 2055:2079 ioctl c0306201 20000540 returned -14
15:54:28 executing program 1:
syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x2500)
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:28 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x1000000000000000})

15:54:28 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00090e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:28 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x7a, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1404.014181][ T2110] binder: 2080:2110 unknown command -1795162112
15:54:28 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x6002, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4)

[ 1404.085366][ T2110] binder: 2080:2110 ioctl c0306201 200002c0 returned -22
15:54:28 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
fsync(r1)
sendmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000180)="bdbf71ba7747a3a77c8b7f82c77a57b6b1f116ce06bb75b02b52ef7b3cba4d7a7e6395a64988a0be62dae4cc93e49d47acf8c9568dfd500a323dfbfbb9cdf2577a1bc080ea089d2198fd1705cd1c218b916d46fcd32e12633c0f8812c3424d39efa31877438830719b050cf5015b3ebd77ff390978121e2185c323ffefd11194b2da2a62ba2b7af69206a9d2ea0e69121b388527a47625851d03071e5986af511ce2b89a480fa8767ac1b71bf00bed77e435997cd6e3e131fe1bf5d5c7946bc2917d21485b6b5d02afe01ee754c902952ee9f47fb4ac090f879ff5f797769e647a736f99f031c9cbe7aaa7", 0xeb}, {&(0x7f0000000280)="2e1183c4be6bd287e75c16d4332a03eb2a5880d6a56bee29bb07490751e3f01794e1c914c9e656f0178bc4221918f48b46edf3fbbfa2eedbcfcb4405c20485d1a8c8c12d82825268d1ea112f5b758d1871bb36e5ab03ff0c46f37d89fac62351f929b931a330a82d2e0606c2f9b594166fcd6f83f0305e22183c7bbb43f802647600327c4ff718eec5e0be2c29e784822c249db4241fc1cc93c1e908e35e960124e92774d07e56c11f3fd1d0bea6f22e9693a86dbc4f47decc446fe36a05a918a25b19c99491d2ac8ae3f7594674ece3a6667f45c1eecf7d", 0xd8}], 0x2, &(0x7f00000003c0)=[{0xb0, 0x115, 0x5, "cf499b6239271c93a4541cff29179463ca9582bb24cc3b2fd8c0594f188d8fdc0eb91b304c883cfd634d0446d75741474654eb95093ed94b14f889a91f03da1af33b46e2463c5f19a9aa9e430e06ccb7d9e4cf56fbf14eda5e2dae8d331f1fafabc8d10c804f14d28b56d4b0ff80fd6c56901fde3191e9837f5c7eeb1024cb7938c89a4d5fc6ac1bf81e8bfa3cb7e92beb1b784bd4ab918645c130ebcd20"}], 0xb0}, 0x20000814)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
read(r0, &(0x7f0000000040)=""/19, 0x13)

[ 1404.156915][ T2174] binder: 2168:2174 ioctl c0306201 20000540 returned -14
[ 1404.184140][ T2229] binder: 2168:2229 ioctl c0306201 20000540 returned -14
15:54:28 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00090f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:28 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x10)
getpid()

15:54:28 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x1f00000000000000})

15:54:28 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x300, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:28 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
recvfrom$inet6(r0, &(0x7f0000000180)=""/112, 0x70, 0x40, 0x0, 0x115)
setsockopt(r0, 0x1, 0x80, &(0x7f0000000080)="5450f8ac", 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x7, 0x70, 0x6, 0xb1e8, 0x10000, 0x7a, 0x0, 0x80, 0x6, 0x2, 0x10001, 0x0, 0x8, 0x401, 0x200, 0x8, 0x7, 0x3424, 0x7fffffff, 0x401, 0x800, 0xdb, 0x77, 0xda2, 0x8, 0x4, 0x7, 0x8000, 0x3, 0xffff, 0x0, 0x3, 0x4, 0x1f, 0x5, 0x7, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x66128044559a3a95}, 0x100, 0x40, 0x5, 0x0, 0x8, 0x2, 0x7fff})

15:54:28 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b630000b6d50553a7b6c4c805f4995cc0968e4d"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:29 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009100000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1404.474723][ T2398] binder: 2392:2398 ioctl c0306201 20000540 returned -14
15:54:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={<r1=>0x0, 0x8bc3, 0x7b88, 0x5d7}, &(0x7f0000000300)=0x10)
syz_open_dev$video4linux(&(0x7f0000000480)='/dev/v4l-subdev#\x00', 0x6400, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000340)={r1, 0x92, "a070da3830d91cbef55088c9803abdc57d465061f421fa31d250dbba130aadf8c6f04f34a40fe307872c28616189f774e3ff9a4c34e6f04bca01f91129720d6e077cb06250ecc2e8dd8ea8489084289fe2b457a22c98182d1a0f3d53ceee30ae33c2751b3d05821668f53428bbff8a116a44227d9ab82e2a86b964409523b9047044bdd6472ed420d1e4a290718e7948aaef"}, &(0x7f0000000400)=0x9a)
r2 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x2, 0x2)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=<r3=>0x0, @ANYBLOB="5a000000c5e0e2dc5213ebd3cafc4f3fd18ad8100594af890dc1ccb5f4d65c1384dbc7584c94542a9ceb6b58bcf81ab9b30b68d24dd8edb0263a47f74ae965bafd04da4a0353a89d2091680437ff583d014ec8929bb8e7102654af8235eab949b5a5a1b268052b44bcda828aa24864cc462313645c095e2e065a02ca8a10c2be214513937a15372c67ac1eaceeac2b093991b5c177a79c2c4426a8bea697e298078026"], &(0x7f0000000100)=0x62)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x1ff}, &(0x7f0000000180)=0x8)
ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000440)={0x1, 0x9, 0x9, 0x8, 0x3, 0x1})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
pwrite64(r0, &(0x7f0000000040)="0ab4ead4a7446c51dc150c7977695432e28d41d7729772e562a879f69104571e2ab16f481737222bdd9b3dbbc58fe9bd628c6fbff8cf556f53a0b0fbe70a9c84d92529fb17a34871b35b4c31e7a81372089d", 0x52, 0x0)

[ 1404.534839][ T2390] binder: 2389:2390 unknown command -1795162112
[ 1404.544375][ T2403] binder: 2392:2403 ioctl c0306201 20000540 returned -14
15:54:29 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009110000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1404.579757][ T2390] binder: 2389:2390 ioctl c0306201 200002c0 returned -22
15:54:29 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x500, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:29 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x2000000000000000})

15:54:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x10, &(0x7f0000000040)={&(0x7f0000000100)=""/220, 0xdc, <r1=>0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4)

15:54:29 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x40001)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000100)={<r2=>0x0, 0x2, 0x8, [0x77, 0x80000000, 0x200, 0x7, 0x98, 0x4, 0x0, 0x9]}, &(0x7f0000000140)=0x18)
setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0xba0}, 0x8)
openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b63b35b13937d4abff17db2a1a7ef1eeaa4d7411aa7a7f7b25523a8ed622f0286742fa1e644b8fb3f776e547a0b64ad54427b6bc0d3929b4871da681d978c9646b9848aa03abf9bd07cff5021bf7b7840ddb65291218b7a89c7be62af8b006b731a2e54e3e8"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1404.752729][ T2585] binder: 2568:2585 ioctl c0306201 20000540 returned -14
[ 1404.809431][ T2623] binder: 2568:2623 ioctl c0306201 20000540 returned -14
15:54:29 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x10)
getpid()

15:54:29 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009120000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:29 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x600, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="15fb4ee62089b21499a2d42ffecca58b43a4348018ee48cd608e5d2fc4ca8749fc453850357e0d9aa8274e683549e432490b2dbfc89713f0ff75394e3a1eaf2bf7e53599a0ee4fa54bfd64d1102eff7081e762a929c336a620430178944ffd92368c8d5222677e600def349aefba6f05e072b9f57323d0beaf7dde60a03d7a6f706739753ab8cdcf1e3087b9371e617aa3ebdca2319fabe1a6", 0x99, 0x800, &(0x7f0000000040)={0xa, 0x104a23, 0x3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}, 0xe)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0x9, 0x100000001, 0x1, 0x4, 0x5})
openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0x210202, 0x0)

15:54:29 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b2e09f09ae235b887c70b42cfdd191dcb71c66ac5c1907d4d38c6caea13c6fde2e9f1f248bc5c281d72f357c8b567f52c55da048"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:29 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009130000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:29 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x230f000000000000})

[ 1405.103754][ T2652] binder: 2649:2652 ioctl c0306201 20000540 returned -14
15:54:29 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f0000000080)=0x1)
write$cgroup_type(r0, &(0x7f0000000040)='threaded\x00', 0x9)

15:54:29 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x700, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1405.206546][ T2661] binder: 2658:2661 unknown command 161472690
[ 1405.217862][ T2661] binder: 2658:2661 ioctl c0306201 20000540 returned -22
[ 1405.226954][ T2667] binder: 2659:2667 unknown command -1795162112
15:54:29 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009140000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1405.265202][ T2667] binder: 2659:2667 ioctl c0306201 200002c0 returned -22
15:54:29 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x2a00000000000000})

15:54:29 executing program 2:
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b6300002126050dfbbea5720743f6855f68f94a980f0e60829319bc0000000000000000"], 0x0, 0x0, 0x0})
r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5604, 0x8000)
ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0xb, 0x31, 0x15, 0x5, 0x6, 0x0, 0x3, 0xff, 0xffffffffffffffff}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1405.414264][ T2839] binder: 2786:2839 ioctl c0306201 20000540 returned -14
[ 1405.475900][ T2890] binder: 2786:2890 ioctl c0306201 20000540 returned -14
[ 1405.514367][ T2894] binder: 2891:2894 ioctl c0306201 0 returned -14
[ 1405.608723][ T2925] EXT4-fs: 17 callbacks suppressed
[ 1405.608747][ T2925] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:30 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0}, 0x10)
getpid()

15:54:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x5, [], 0xa, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000040)=""/5}, &(0x7f0000000080)=0x78)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:30 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009150000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:30 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xa00, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:30 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="7a0000f14456bf9863d74b41fa13955a5c78892ca97147d3d20c441389ac82c945b33b978d000000000000000000"], 0x191, 0x0, 0x0})
modify_ldt$read(0x0, &(0x7f0000000080)=""/44, 0x2c)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000180)="0adc1f123c123f319bd070")
r3 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000001000)={0xb, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc1105511, &(0x7f0000001000))
ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000100)={0x5, 0x2008f, 0x1, 0x3})

15:54:30 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x2d00000000000000})

15:54:30 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009160000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1405.835669][ T3006] binder: 3005:3006 ioctl c0306201 20000540 returned -14
[ 1405.871109][ T3014] binder: 3008:3014 unknown command -1795162112
15:54:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
write$eventfd(r0, &(0x7f00000001c0)=0x3, 0x8)
ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f0000000200))
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x8, 0xa, 0x7}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1, 0x71, "486214940fe4830fed9563b1520e7e8ef678f408ac599ca669abc5d461cbb3f5255290fc4602f14a718a9423f06191e171fc02b4946ca64b6eeae17a860f240baa5aa9a5dbecfda1c2c093970c977f06c95fba260d2902ad96c06e78600f585a3cbd7ed885026182b565453d8016ec1b38"}, &(0x7f0000000180)=0x79)

[ 1405.895898][ T3016] binder: 3009:3016 ioctl c0306201 20000140 returned -14
[ 1405.930802][ T3020] binder: 3005:3020 ioctl c0306201 20000540 returned -14
15:54:30 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009170000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1405.945579][ T3014] binder: 3008:3014 ioctl c0306201 200002c0 returned -22
[ 1405.961635][ T3019] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0xf85, 0x0, 0xd9, 0x80000001, 0x4, 0x200})
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:30 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x2000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:30 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfffffffffffffd76, 0x0, 0x0})
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0xd000, 0x8000})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x58)

[ 1406.068948][ T3019] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:30 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:30 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x3f00000000000000})

15:54:30 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009180000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1406.160779][ T3272] binder: 3271:3272 ioctl c0306201 20000540 returned -14
[ 1406.181453][ T3287] binder: 3286:3287 ioctl c0306201 20000540 returned -14
[ 1406.204063][ T3288] binder: 3271:3288 ioctl c0306201 20000540 returned -14
15:54:30 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
getsockname$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:30 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x3f00, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:30 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x4, 0x0, 0x2, 0x40, 'syz1\x00', 0x6})
ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100))
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)=0x1)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:30 executing program 1:
socket$bt_hidp(0x1f, 0x3, 0x6)
syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff037e, 0x101000)
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x10000000000000)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100), 0x4)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x7, 0x1, 0x100000001})
r2 = getuid()
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, <r3=>0x0}, &(0x7f00000001c0)=0xc)
lchown(&(0x7f0000000140)='./file0\x00', r2, r3)

15:54:30 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009190000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1406.324729][ T3303] binder: 3297:3303 unknown command -1795162112
[ 1406.354720][ T3367] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1406.365701][ T3303] binder: 3297:3303 ioctl c0306201 200002c0 returned -22
[ 1406.410304][ T3417] binder: 3416:3417 ioctl c0306201 20000540 returned -14
[ 1406.462182][ T3447] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:31 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x4800, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:31 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00091a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000040)={0xfffffffffffffbff, 0x0, 0x1f, 0x740000, 0xffffffff7ff0bdbe})
ioctl$TCSBRKP(r0, 0x5425, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100))
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/49)
write$P9_RREMOVE(r0, &(0x7f0000000080)={0x7, 0x7b, 0x2}, 0x7)

15:54:31 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x4000000000000000})

[ 1406.710472][ T3632] binder_thread_write: 38 callbacks suppressed
[ 1406.710483][ T3632] binder: 3583:3632 ERROR: BC_REGISTER_LOOPER called without request
15:54:31 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:31 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00091b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1406.835717][ T3632] binder: 3583:3632 ioctl c0306201 20000540 returned -14
[ 1406.864799][ T3626] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:31 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="8b630000"], 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x68200, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000001940)="a7f175e9948f2732df54e4321b08c04130fc12a780ab7b350ba18ab550f9bb60bf4ef01b897b23ae381b94b325aaf9ecf26167075e95036db28840ac1fbbb6041f687eb63bd4b1888a912cc249519d78d67aa88dd2e93faf45d5593a97cacf38d7c58b98c9ad936ddd8261c158161af9c52a4a6f91f6a595ff838f47dd25bc68e319e07e4f2c142ca4536a08ef6ed17a6cf95b656d3eca185b18a01c7cb010f8d5805726add83335b8cb87e4b7af5a7f89e79d106ffaffd8990e57181d7ccdd2331d182ccfa7f45ab5f174b4c81de7f75350efc9ebb4c6e6b81f4af894e106e880d64bd0067d72dde08cec05c30bdbdf2b4cdde42054e318a84bc96a34be8a7b4f498623e1fd454e8df93d9cbc6d6110d2c02f89558271a2eaf8c1a3b5d3ed8afaa68f6d8e33c9f972c3c0d05f131ea02e66611cbfb168ece38fe4aa1ff9d0d53b09c7b370182f1db61c3c2ade84f21f2b64141ffb135b2e3d8730aa2c0b30d52cddb227777b2d7a20cf622bc385f69e789ae50b70f5318edc44bd8ab5370dbebb5a819b7c5e2cdc1c7bc489c35ce5bced4fbca52078351340ab2e20ea1efee736ab6c71451518aa2da107f99ffd65eec331ecfdbefd713ae9fe85841241714f036536263cde2dcd6dd0e1d80356d62cb6a10150b7dcc107fbd7741423637dcc3a7442adca63f1e9ec597fda49d7c5c1b82bf0df649819a00c5e97d3a3e64d8fba777c47628a622b6f3e62781fb55d6b2c549c61fc4478216b6d4e77569770c61cef557629e00ee753cd88fd5e2c0cf39435e54c7798426ff421310c13db671f3c18731fa57be12989a4525a61c83bd648d43f422f7af1edc3c54872e47c779910a14ea9af22463a8221ba4bb2ec4c60d13f8532d3f3b0391baa84b3247fe6b5ed69b66e8794a46aaa71f8e235ae23ff1f2262df3180ccde655d27e345796004246b05f77ad101c0a46c6d77718897d462de393e5b85c45d7f87db9fc36e353cb44fcab5ab526b4fbc4bc0dd9a2d3b36794dd5c81de2732d51fc18befec0bfba469620507ccc09665a65e06383f4dee9c595dab0eb957c4d028c75fc8b59d09a4110519db898ced26b93434f83fd66d7775887eb426262fb39c7577ff5ec87918844806b09f09f2d13df2216953d8fc3170cb8412aefc7c7079dc61cde64158cc9e005ecc9e97523fbe027f518efba926c1afd947489938974520f8618eb438b1fcef8214074c87ee7016105df458c495a402aa32b20c5303343c5701ea076470660ac13669cec22fcdc7ae3c6421f151b4e857520ef8188fa8e1b17db06845e09e7d6d3f8609e82fba287056837998c69398b010ad5ff3e48d4179982a25dc3b21406b1b989ffe52ce2b29f24b90daed7995b3babdce147937ad57615a7ebf791fae851264abf90a81586db1be37cad09023c40c9b2df49118885ca8281dc149532071fc5033fa9ee0a8515f9f04893cc2e0d109b29d2b8d1f0185591f44c693cad7fc4c96f30cfcb1a9f5ad6cb193d3389953847caf79a0587f446791209c93859ba83a41cd8b32087780ff4a326ceb7b9c06a84e389828193b4cadc657e7509e862601ed6b403c8d7cb2e3b76576fdfbc30f465b89533ec3578b79d4f0ca939afb754843a0818fdbc40239d2a930b7cecad23aca80be1442ee98ebe2d625c2d8f6e2af001190a2d4ce97ddf17dccd334829054dea4d624743146c82dfd1aa2eb8e23a2450108160021fc986ce022e023747d9a46ac21b8fb195d71e0b6ffb178e08e2cf50478bb88b5d0a2538a70b1af4da1ad1f32924eed0f9cb547be8a1180ffab612ca7284b67efff75219563ef3ce7062a58a61bf30caa949842f2dfce297e4b86206798f0391ceb383cc2bc6b612769da63d9c81cbe3d99d1b958560d454da1205503151ffe5eb773b57fbcf5f120aa5192069db3f96830369c43e68de0857780352b6f515c4e237c8423cf5ce91d4a4c280d1edca1f57c01bc308e0b4602739e404e6a8130f4b0df52c1323b6f2f0e1434b010fb6c3d81f88b2b75deb82d8770d22cb07c16c23017e78bfcf762b23e3b3848b8d5d3cd3016922a3fb9c2b6a6a7915683463a949f4b20f292bea595b0d5bea8044c525733e6afc16098faf4bad76918dbff80a945b1a3e208a499d0328d150d94119d4a33910aa97b1f2f0c7d27a707524c776d66103ed0852daa411048b1208bb59cd188299afdd0953f97f2aeba56f8ea2e369ce0291dd05963ed29095444e0c09d908e35b6fc4bdc09f639ce765cd459652bff48197438f631094a3c4e49a42da84b06ef9186c90016632d0a959ca58e5c5ab7cf4b1580b97ec19f2a1d50b87e62e1a742c15ab79a34d559e14f24f9d086a7a2d8c35013b6949986f04db9fec300756c520fff64b7d707595fe1cff22962ed2cdc3ae816e16abec5c5b97a44c9b7536ff66fceec8b8d98b41b968885365286b0e78c09282b7cc1fd0220f49556adb61e644beb962dba1ade04764037d0006491069fd0792f53dd3f7558272d2ede19853887d9a4e19b8c7f42aea5b078e02518351ed77caf91cf515bcc8d2bd67dce25841d497360abcde35559c9469be78969e519bdee0409ad32394adc1ff3f37ba88d9718df5939e20a1e1ddcf069867e42d1c027bdeb29bb93590108abb15901e147069395b9e5dc7a76d376850c1da7b038850575f5f72c8d75b0a19fa228e0e2fab22ae3ba27ca47cf91b640e19b4e19d4058db628b19ebfcdbb0741b81e20795c31195d68f445c9ec0352d9ed11c7f921d1ccf555e87168fb667f73eb819323b9201175f776d23efaf118cba117eadff42a3f2bc5a8c7d4ec28b555372bce886d280a047e3df0504d409b75c65b6e9561257e16f54cc83f12b4973b941d925d1c3205af214cdb5e0192089343e10e316cc484c11793d9b7b79b678b8436104bba6f4e814f663866f2b25fd3566b1d094686a00829066ca3a20d6e0598f31b7009b67a56e8f8c4749b5216cb909d393d5c6f9fcd79297c7f2f2bb1ee9da3ba0f5d8b3b36dcf7a6d34a505345231ecf1210278bc1300af6252b976f2c11dda5c15b36659aa59de9db47cca99bbdd8c5c11c189274479740c3ac047276ee821983c0d05159c01efb6d262a8f60a6e41d7892d06a1f8e724e820825a770723828b79aa89acd0bb9058bfe880c0dd04639627edea0daf4b9060c5c5ba9972e82bf2d914ed1c950aaf2b914012295ebdecea75bbd3bc0a917c4e09df74f5e863bb7b095609a35fe0ca61810d2a6c0ae813a6e980448f719e012a1077bd6d24aa75104a13ba1105ea047e55e3020adee1ae6f7d7c3877a0e01633a97e757b6711c797145222cddb233d46129e2354e05fd84221fea2f99aac63839ccb27f35a9ba2271c526047158f5a8bf1dd4dc2acec2cbff1e2507dad8ac58f2afc77c29c2e134533f69aafc6d0dfe5b7ee4de0b03ab478adb192469a452d0231613ecad8f2981536834e7fbae39916ee178f4ec0d5cc4fb43f88e4c837bb2446e3ed630c9b8c5548f366623f56aecc5658ebaa39e19f8513c901e90c438468b3ca017ae26c129342499c26af2bf00c5ae02ac9b327cac93331ef50a8aff5ac0642b42eab41c582ae8651aa4c4fed1a0e3f0d12c705e34e9925255e01e7f65917e9056925241a4f38eb97a407dfc2f1da2204777ea3577452ed06776b92675241e039557d9aca3542fe1d805a7fe61a08b336d1e01dfa1eaa6c349122a7a62e725c12dc95b985a9054259950d6861439cbd555b326a7fb9f3649f71c0522bd505a85606050ef1e765e6cb6474111134bb50faac294dfea8ad9df61c3f2c9b19058dcea76fe2f2b514145600d6268c76b753cef7d3ac866ddb307f251151aa8c09a9367928fc75c22767f3f6b342a5efc94b183f95f88cae57c0af7a63efb80086cc4aadc7133eb4387923ac43ebe039e57e63bc586fc92354cb70e09f23372bcda10898b2d5bf07d738478b519765c80eae38bf9cec194fafb4284a9171370e9d69b6143549905cf822d2f61a923fb54297a9e36d89ba413d23f846f0984087b695bc7760aa953189400a9c811bbdf993530998136a853ff116bb2711d7cef0fa7ca81f359c990474b30f9472ec09283c9cc81cc4a95f6f294ad1ca340f9272bb5a2a7a05a77bc9cdad75a45cc5d180b907b234e7b47e6e639e5d6b458a45bbb330cc61bdf0e512fbcf6bd23f7d73adb828e1af07472413b3b70ef0ad39a92942df47289375d3a2bf3c7795b56bdd9c69576be36555bb67a577e5a18078d1d0ec410eb56da83dc0a4f170764a42d570efd4acfbe87c8ceb65cac0bdf170ee129a23483caff084ffa6a24a2bc4393a25435df0c96e7e2473465f1c0fc30dbbabacfc12455b29416142151767a03f3e8d668813f0f6d5cfa325fa0cdf399ffaf28044128c4f801cfd8bd949a771e0a59a68e05f6f9e2a73c8637890b34b77c7c33b4882b5dad9ec33c642c00876fef1dd2f078f702418ea322a9911107b684620114206ee41dff9985ac1efd9aaf6006d94c0d2a91d5d1ccdb7d324e137c3171360f35d2fceb2e9c06d801eb8eb2ba54e6ee901ac7fb80f8f7e30618d7ae6ace50aca0577688df02a560d4d1c580f7d46e7973b7993122fc6075eae38e8e041e244bf5d71f1573c204d70dc59b392ac8c20e6ed38026b51eb5d9b0dafa2e65cdbfebe7b1bdeda31a000bccb96e47ee7a565691a1ce8355e602f26c85c7c6ec543cf79d618c5e4414cda3a55cf5168fc85f7c53ba73de7d79922f28f7a575940c459b136db033489071d48a74fca19d8df71e3006bfb18a470c8fbbae9cba90b723c717911445e314a01aa04e24ab140d67174081fa1f3289be8ee8d517aad0c8e46e51cc5b9b475e355fd8f2ca2bb1d89b8ba257477fc2136bc5207df71ea7eb60250373253b38ea50ec26fa6fcf4bcab676a8b709954f1dad628a82f8fba1b9fcb1709374919bd83428ec4d37a830ee881d3e7c920c8fc197527d8812beb8139a1121141210fdbfc747d030afeb960fbeaf6f345256fc5a0beabdc21e4f84d60bdec48ab28e77e4cbac96d4d2c16931404df6d836202eee5570ead79d08ea82985ad92ae91bcd81d9ca7bb7ec8590b2f9a3a5d3c6e804be6c4c0dcd6482338e9c6067aa8507aa77c8a9268dabd2dc92f9906ad1e588f1fefd2dd0699c0b82c7302b91fb05b7f184b1313267e2206cf4ecf2c3ae79069d178aa1ebac7ef065decd283b96348e3556ab000562e90b83b72175ad5129a89589ade62dcc9cb9dae9dcdcb4775f493f9ac1005f979bf1684e79761c0d65dc67bf11e9e75bb1ec4b8f8f3e91f65498587b71d96301f2e81974aa65a882d50344be71d549e403bc1a4202b88c128a9196156da640182772b5815f973bb2f9e3ddc93cf995e3ace16cdc1ee4826c2f70f303320dc64c74c8947bc49be99c8643877fd7c1c57e834d9fb9ddf0956d610532d44f2a42a05884ed48fc1c02725c0c083e07c4be0a35f0a3c4feef8ac4f93aaa19956a01a8f69f4b058cfb43e7d14a166051798420ac01908c7ee15228bf9893020ab9e74ea17a75e92dc1dd508e6bae04771dc70a3ede8499fc8a645ffcbd1b6acb300ee0c30ec8c55b10d2bf74b207c775c407aad87d17d95244d36d947239175e385b2a6e3a37c1f81ce36428d9904c2a8caeec523cb88c158107204348f117d9c2281bf6c5e9b296dfb08c15971206fa5abe8aacc3a0fde30c32042e2c518a1e4ad8041fb594a5cda50fc3824ca501da8e243726cf6e25a6631a60ee22de3eb553f405b2f"}, 0x10)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
fchdir(r0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1406.884327][ T3649] binder: 3583:3649 ERROR: BC_REGISTER_LOOPER called without request
[ 1406.940457][ T3655] __nla_parse: 14 callbacks suppressed
[ 1406.940467][ T3655] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1406.953067][ T3649] binder: 3583:3649 ioctl c0306201 20000540 returned -14
15:54:31 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x4c00, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1406.995617][ T3659] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1407.000957][ T3658] binder: 3654:3658 ERROR: BC_REGISTER_LOOPER called without request
[ 1407.020598][ T3662] binder: 3657:3662 unknown command 25483
[ 1407.035447][ T3658] binder: 3654:3658 unknown command -1795162112
[ 1407.050711][ T3658] binder: 3654:3658 ioctl c0306201 200002c0 returned -22
[ 1407.058554][ T3662] binder: 3657:3662 ioctl c0306201 20000540 returned -22
[ 1407.076500][ T3676] binder: 3665:3676 ERROR: BC_REGISTER_LOOPER called without request
15:54:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
fcntl$setpipe(r0, 0x407, 0xffffffffffffff81)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:31 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00091c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:31 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x4800000000000000})

15:54:31 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1407.103445][ T3676] binder: 3665:3676 ioctl c0306201 20000540 returned -14
[ 1407.172396][ T3732] binder: 3665:3732 ERROR: BC_REGISTER_LOOPER called without request
[ 1407.215110][ T3732] binder: 3665:3732 ioctl c0306201 20000540 returned -14
[ 1407.255053][ T3785] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={<r1=>0x0, @in6={{0xa, 0x4e21, 0x2, @local, 0x9}}, [0x1, 0x7, 0x7, 0x3, 0x1, 0x1ff, 0x0, 0x1000, 0x9, 0x3, 0x101, 0x3, 0x0, 0x0, 0x76d4]}, &(0x7f0000000040)=0x100)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xc3fe}}}, 0x84)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:31 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1407.273339][ T3789] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1407.276600][ T3770] binder: 3736:3770 ERROR: BC_REGISTER_LOOPER called without request
15:54:31 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1407.359568][ T3801] binder: 3793:3801 ERROR: BC_REGISTER_LOOPER called without request
[ 1407.388536][ T3816] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1407.397888][ T3801] binder: 3793:3801 ioctl c0306201 0 returned -14
15:54:31 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000380)={0x2, 0x4, 0x20000, 0x740000, 0x39})
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=<r1=>0x0)
ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000080)=r1)
ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000340)=0x6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={<r2=>0x0, 0x8}, &(0x7f0000000180)=0x8)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000240)=""/237)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r2, 0x6}, &(0x7f0000000200)=0x8)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000100))

15:54:31 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00091d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1407.416825][ T3836] binder: 3835:3836 ERROR: BC_REGISTER_LOOPER called without request
[ 1407.434498][ T3836] binder: 3835:3836 ioctl c0306201 20000540 returned -14
15:54:32 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x4c00000000000000})

[ 1407.496377][ T3912] binder: 3835:3912 ERROR: BC_REGISTER_LOOPER called without request
[ 1407.517955][ T3944] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L-', 0x4}, 0x28, 0x2)

[ 1407.542388][ T3912] binder: 3835:3912 ioctl c0306201 20000540 returned -14
15:54:32 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:32 executing program 2:
r0 = request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00'], 0x0, 0x0, 0x0})
request_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)='/dev/binder#\x00', r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00091e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:32 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6800, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1407.612783][ T4012] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x8, 0xffffffff7ff0bdba})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000080)={r1, 0x1})

[ 1407.712598][ T4019] binder: 4016:4019 ERROR: BC_REGISTER_LOOPER called without request
[ 1407.736714][ T4027] binder: 4024:4027 ioctl c0306201 20000540 returned -14
15:54:32 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x6000000000000000})

[ 1407.772158][ T4030] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1407.781207][ T4032] binder: 4028:4032 unknown command 8
15:54:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009210000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1407.814081][ T4057] binder: 4024:4057 ioctl c0306201 20000540 returned -14
[ 1407.837463][ T4032] binder: 4028:4032 ioctl c0306201 200000c0 returned -22
15:54:32 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6c00, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x5, 0x3, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={<r1=>0x0, 0x3}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x800, 0x10}, &(0x7f0000000140)=0xc)

15:54:32 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1407.948635][ T4213] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:32 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x6800000000000000})

15:54:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009220000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1408.025478][ T4247] binder: 4246:4247 ioctl c0306201 20000540 returned -14
15:54:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x80000001)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:32 executing program 2:
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
r0 = add_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
request_key(0x0, 0x0, 0x0, r0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x7f, 0x400)
ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000240)={0x1, 0xff1014, "764cdfa9f7182821c5f1cc1d766022a25c0389f1dd79bc26", {0x8, 0x8}, 0x9})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x2000, 0x0)
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1408.073379][ T4278] binder: 4246:4278 ioctl c0306201 20000540 returned -14
15:54:32 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x10)
getpid()

[ 1408.143489][ T4332] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009230000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:32 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x7400, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:32 executing program 1:
r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x2000)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x2, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0)
r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0x2, 0x4, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x4004550c, 0x0)

15:54:32 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x6c00000000000000})

[ 1408.303983][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1408.349723][ T4425] binder: 4413:4425 ioctl c0306201 20000540 returned -14
[ 1408.385676][ T4408] binder: 4399:4408 unknown command -1795162112
15:54:32 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x200002, 0x48)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x3, 0x2, 0x5}})
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\vk\x00\x00'], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:32 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r1=>0x0})
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, r1, 0x1}, 0xc)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={<r2=>0x0, 0xffff, 0x30, 0x6, 0x7}, &(0x7f0000000180)=0x18)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e22, 0x0, @mcast1, 0x35b}}, 0x8, 0x8, 0x8, 0x80000000, 0x98}, &(0x7f0000000280)=0x98)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
write$binfmt_misc(r0, &(0x7f00000002c0)={'syz0', "fe40dd89737eccb782847c195d82390a8c648225d61f0bec3709d53be0b7a89339b830e632b8f329a15b18c43699617e58cc90be2bcce88c7b37a0069cd130cadf9c32dc6c6f28a4ac88216dba55e76f5d1a9ddecdf88efea2c041a6f3b42fd9087023173a265e889a9d571ff70344ad0feb8bcbab72649cb2cf8125dcbac2b2b9dc5c4319ababe7e3afabc3d0b0593c6f0925"}, 0x97)
syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x8, 0x400040)

15:54:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009240000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1408.400654][ T4483] binder: 4413:4483 ioctl c0306201 20000540 returned -14
[ 1408.429466][ T4408] binder: 4399:4408 ioctl c0306201 200002c0 returned -22
15:54:33 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x7a00, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r0, r0, r0, r0, r0], 0x5)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:33 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x10)
getpid()

[ 1408.558433][ T4595] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1408.596935][ T4598] binder: 4596:4598 unknown command 27403
15:54:33 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x7400000000000000})

[ 1408.622833][ T4598] binder: 4596:4598 ioctl c0306201 20000540 returned -22
[ 1408.636141][ T4601] binder: 4597:4601 ioctl c0306201 20000540 returned -14
15:54:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x7f, 0x8, 0x10000}, 0xc)
openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:33 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009250000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1408.680408][ T4611] binder: 4597:4611 ioctl c0306201 20000540 returned -14
[ 1408.685807][ T4606] binder: 4605:4606 unknown command 0
[ 1408.710622][ T4606] binder: 4605:4606 ioctl c0306201 200002c0 returned -22
15:54:33 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x1000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:33 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="7c8a6b7a"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1408.784663][ T4702] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:33 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x7a00000000000000})

15:54:33 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009260000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1408.837011][ T4766] binder: 4765:4766 ioctl c0306201 20000540 returned -14
[ 1408.861234][ T4797] binder: 4765:4797 ioctl c0306201 20000540 returned -14
15:54:33 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x2, 0x2)
ioctl$KDENABIO(r0, 0x4b36)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r0, r0})
r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0xffffffffffffff81)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x0})
openat$cgroup_ro(r0, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x4004550c, 0x0)

15:54:33 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x2000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1408.930527][ T4813] binder: 4807:4813 unknown command 2053868156
15:54:33 executing program 4:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40406301}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1408.997811][ T4849] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1409.012517][ T4813] binder: 4807:4813 ioctl c0306201 20000540 returned -22
15:54:33 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009270000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1409.053312][ T4882] binder: 4880:4882 ioctl c0306201 20000540 returned -14
[ 1409.068386][ T4927] binder: 4880:4927 ioctl c0306201 20000540 returned -14
15:54:33 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x8cffffff00000000})

15:54:33 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
time(&(0x7f00000000c0))
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x8, 0x4000000000000000, 0x0, 0x740000, 0xf312})
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x7)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:33 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x3000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:33 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="03630000079aa9ca1cd8f9b39f4ccfdb51e319ef2bbe5c64179987be02c8d53719bda1f49caea8644ca2ed57f44672"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x110, r0, 0x0)

[ 1409.141695][ T4947] binder: 4946:4947 got reply transaction with no transaction stack
[ 1409.229138][ T4947] binder: 4946:4947 transaction failed 29201/-71, size 0-0 line 2900
[ 1409.241643][ T4977] binder: 4965:4977 ioctl c0306201 20000540 returned -14
[ 1409.252246][ T4980] binder: 4972:4980 unknown command 25347
[ 1409.267879][ T4980] binder: 4972:4980 ioctl c0306201 20000540 returned -22
15:54:33 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009280000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1409.282222][ T5002] binder: 4965:5002 ioctl c0306201 20000540 returned -14
15:54:33 executing program 1:
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001580)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="e0000000e763f2adc2ce0900000000000000d5ad3c698490e7f5aca6e7aa74f514ea26a66bc1825b811466000000f1df00"/58, @ANYRES16=r0, @ANYBLOB="020326bd7000fedbdf250600000008000600ec0000000800060001000080080004000400000030000100080002000000000008000800001000000c0007003f00000002000000080002003b00000008000b00736970001c0002000800050003000000080005001ea70000080003000300000008000500ff070000440001000c000700020000000600000008000900500000000c00070010000000200000000800020032000000080009006c00000008000b007369700008000b00736970001c000200080003000100000008000600ff7f00000800050020000000"], 0xe0}, 0x1, 0x0, 0x0, 0x8040}, 0x1)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001480)={&(0x7f0000000340)=ANY=[], 0x19c}, 0x1, 0x0, 0x0, 0x90}, 0x841)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f00000016c0))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/icmp\x00')
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00')
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200020}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000300f790b2dfcc1d69bf7ff6882549a4e499d47d25013eb0be9652f806d6feb703bd", @ANYRES16=r2, @ANYBLOB="00002cbd7000fbdbdf250100000008000400010000000800040003000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80)
write$selinux_access(0xffffffffffffffff, &(0x7f0000000040)={'system_u:object_r:xen_device_t:s0', 0x20, 'system_u:system_r:kernel_t:s0'}, 0x55)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000015c0)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000000140)=0xe8)
setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000001500)={@mcast1, r3}, 0x14)
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
syz_open_dev$vcsa(&(0x7f0000001540)='/dev/vcsa#\x00', 0x8001, 0x90000)
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x4004550c, 0x0)

15:54:33 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x4000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:33 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009290000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:33 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0x97ffffff00000000})

15:54:34 executing program 4:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40406301}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:34 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1409.439128][ T5156] binder: 5153:5156 ioctl c0306201 20000540 returned -14
[ 1409.479175][ T7901] binder: undelivered TRANSACTION_ERROR: 29201
15:54:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0xfffffffffffffff)
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:34 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00092a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1409.544569][ T5185] binder: 5153:5185 ioctl c0306201 20000540 returned -14
15:54:34 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x5000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:34 executing program 2:
r0 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0xf5de, 0x40002)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000180)={<r1=>0x0, 0x3ff, 0x30, 0x7, 0x5}, &(0x7f00000001c0)=0x18)
setxattr$security_smack_transmute(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x2)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r1, 0x4)
request_key(0x0, 0x0, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00100000bc030b8a66bcbb11f0b0250d3974650d46b3"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x92400, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14)
openat$cgroup_subtree(r3, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0)

15:54:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001180)={<r1=>0x0}, &(0x7f00000011c0)=0xc)
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x5, &(0x7f0000001200)=""/5)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000001100)=@routing={0x7b, 0xe, 0x2, 0x80, 0x0, [@dev={0xfe, 0x80, [], 0x11}, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, @ipv4={[], [], @rand_addr=0x5}, @mcast1, @remote]}, 0x78)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
getsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000000100)=""/4096, &(0x7f0000000080)=0x1000)
setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x6, 0x4)

[ 1409.655880][ T5194] binder: 5191:5194 got reply transaction with no transaction stack
15:54:34 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xc000000000000000})

[ 1409.709026][ T5194] binder: 5191:5194 transaction failed 29201/-71, size 0-0 line 2900
[ 1409.737245][ T5198] binder: 5197:5198 ioctl c0306201 20000540 returned -14
15:54:34 executing program 2:
add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa)
add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="7f6f2e11f96c08e0e713db8ba0204b92bf948233a57a293254909d0d2830fd2c2385b34af738a3dffe4984f1c0032e9b27c76807daa11a64f026f96fe8b6ed74223373e86aa1c881319a439ca27613", 0x4f, 0xfffffffffffffffc)
r0 = add_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)="bd23ab32ea68476a9c6d26d1affcdb4b267df6956003f33732bd4140af874c69ab71dc61acba954043ed6a874fc52f38d1336a7cfa4f2a7159bfd492741d8413972a804ea57269d9efee35a4462d5a8ce9c1f79e95c56706d1198e630777f02e9ac89cae4f674636db5971d0b89043a258fb3dd0fb8d5039225b15bfa13ced0d776b1e7ae59e2ca1eaed7437efa5a0040c218e07c07d6d1da579e7", 0x9b, 0xfffffffffffffffb)
request_key(0x0, 0x0, 0x0, r0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:34 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00092b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1409.822692][ T5243] binder: 5197:5243 ioctl c0306201 20000540 returned -14
15:54:34 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:34 executing program 4:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40406301}], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:34 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00092c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:34 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xe0ffffffffffffff})

15:54:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000000080))
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x3, 0xffffffffffffff9c})

[ 1410.027531][ T5415] binder: 5414:5415 ioctl c0306201 20000540 returned -14
[ 1410.038760][ T7901] binder: undelivered TRANSACTION_ERROR: 29201
15:54:34 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b6300006ac34b971416e15a7a625ef94d39bd37f55a8e85e83bea919c03c1c7dcd952ca2c27ea5fe06630ed61e9c44b2d7bcfda"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4002, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x178, r2, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffffffff94a}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2d}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x404}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb2a2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x401}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x93}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x178}, 0x1, 0x0, 0x0, 0x80}, 0x40001)

[ 1410.087088][ T5433] binder: 5414:5433 ioctl c0306201 20000540 returned -14
15:54:34 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00092d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:34 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x7000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:34 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2)
ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000080)={@default, @null})
r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x4004550c, 0x0)

[ 1410.200656][ T5443] binder: 5440:5443 got reply transaction with no transaction stack
[ 1410.226935][ T5447] binder: 5445:5447 ioctl c0306201 0 returned -14
15:54:34 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xf5ffffff00000000})

15:54:34 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00092e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1410.253669][ T5443] binder: 5440:5443 transaction failed 29201/-71, size 0-0 line 2900
[ 1410.286834][ T5455] binder: 5450:5455 ioctl c0306201 20000540 returned -14
[ 1410.350542][ T5550] binder: 5450:5550 ioctl c0306201 20000540 returned -14
15:54:34 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x100000000, 0x4000000000000, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:35 executing program 2:
add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="1ca13b2b19ba71ef0fe4481515478f1d44c2f97b23ae72e32e908bb80efecf5d61ec5f3993370d6c2a2fd541f951ddf66ea0fa09d5fb90020a602d03d1084b26c333a4fb2399a12edaaab7688e52508f3ea85983078051ff3225504dbf7468bf064419295a3d203df1661b8a91eb602a570e8949332d9e7896c377df4afddc7f49dc008e4184d38005782417883a8a35893e303640b8cc48ef994d9fee3dca5884614e0355588f0b8350cf3d9679ee12a86e3257d6a5e4afdbd171a0363e78514518644fa002a4ad2b1bbf0fc2ab82f0e7f6df01d45c2feeb6c3bc547e01db6fcc978a9743b7f516c74a1ce411f065c8cffae0d3", 0xf4, 0xfffffffffffffffd)
request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0xfffffffffffffff8)
request_key(&(0x7f0000000300)='syzkaller\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)='/dev/cachefiles\x00', 0x0)
add_key(&(0x7f00000003c0)='cifs.spnego\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000580)="0edaa6be543fdf2490113f20499780ec4915cd3c9dd430d301ff23afab99f20730bdfc2d4adfd6ac84c270083362c2633b88eae09e51849d587e890fdcee5803f79fdebfbf3be51a0308251063aa1303bb167c9f79a64e449647cc7757d36548593d55942af5d528d6b08aebc3508163d0edf8e3e99adcd89752b54d5110fe351eec4c70dde754845279bb921e95f18b03f8354e4c8a5a291af5c9d86e2ad8cc24ba", 0xa2, 0xfffffffffffffff9)
request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0)
getgid()
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
fsetxattr(r1, &(0x7f0000000440)=@known='trusted.overlay.metacopy\x00', &(0x7f00000004c0)='system!*\\louser\x00', 0x10, 0x1)

15:54:35 executing program 4 (fault-call:12 fault-nth:0):
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:35 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xa000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:35 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00092f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$KVM_ASSIGN_DEV_IRQ(r0, 0x4040ae70, &(0x7f0000000040)={0xffffffffffff8d4f, 0x7fff, 0xcf9, 0x402})
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2000, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000100))

[ 1410.471334][ T7901] binder: undelivered TRANSACTION_ERROR: 29201
[ 1410.499713][ T5671] binder: 5670:5671 ioctl c0306201 20000540 returned -14
[ 1410.557893][ T5674] binder: 5672:5674 ioctl 660c 0 returned -22
[ 1410.570490][ T5680] binder: 5670:5680 ioctl c0306201 20000540 returned -14
15:54:35 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xf6ffffff00000000})

15:54:35 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x20000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:35 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009300000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1410.677575][ T5696] FAULT_INJECTION: forcing a failure.
[ 1410.677575][ T5696] name failslab, interval 1, probability 0, space 0, times 0
15:54:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
restart_syscall()

15:54:35 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x5, 0x408000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x118000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x411, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x679}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004815}, 0x1)

[ 1410.739093][ T5696] CPU: 0 PID: 5696 Comm: syz-executor.4 Not tainted 5.1.0-rc6+ #82
[ 1410.747042][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1410.757112][ T5696] Call Trace:
[ 1410.760419][ T5696]  dump_stack+0x172/0x1f0
[ 1410.764818][ T5696]  should_fail.cold+0xa/0x15
[ 1410.769429][ T5696]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1410.775261][ T5696]  ? ___might_sleep+0x163/0x280
[ 1410.780149][ T5696]  __should_failslab+0x121/0x190
[ 1410.785108][ T5696]  should_failslab+0x9/0x14
[ 1410.789628][ T5696]  kmem_cache_alloc_trace+0x2d1/0x760
[ 1410.795108][ T5696]  ? kasan_check_read+0x11/0x20
[ 1410.800026][ T5696]  ? do_raw_spin_unlock+0x57/0x270
[ 1410.805156][ T5696]  ? _raw_spin_unlock+0x2d/0x50
[ 1410.810287][ T5696]  binder_get_thread+0x1db/0x7c0
[ 1410.815443][ T5696]  ? __might_sleep+0x95/0x190
[ 1410.820229][ T5696]  binder_ioctl+0x1e5/0x183b
[ 1410.824836][ T5696]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 1410.831089][ T5696]  ? binder_thread_write+0x2820/0x2820
15:54:35 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009310000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1410.834985][ T5774] EXT4-fs: 21 callbacks suppressed
[ 1410.834998][ T5774] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1410.836552][ T5696]  ? tomoyo_path_number_perm+0x263/0x520
[ 1410.836570][ T5696]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 1410.836586][ T5696]  ? tomoyo_execute_permission+0x4a0/0x4a0
[ 1410.836612][ T5696]  ? ___might_sleep+0x163/0x280
[ 1410.836637][ T5696]  ? binder_thread_write+0x2820/0x2820
[ 1410.874917][ T5696]  do_vfs_ioctl+0xd6e/0x1390
[ 1410.879573][ T5696]  ? ioctl_preallocate+0x210/0x210
15:54:35 executing program 1:
getrusage(0x1, &(0x7f0000000100))
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1410.884702][ T5696]  ? selinux_file_mprotect+0x620/0x620
[ 1410.886820][ T5803] binder: 5793:5803 ioctl c0306201 20000540 returned -14
[ 1410.890184][ T5696]  ? __fget+0x381/0x550
[ 1410.890207][ T5696]  ? ksys_dup3+0x3e0/0x3e0
[ 1410.890225][ T5696]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1410.890256][ T5696]  ? tomoyo_file_ioctl+0x23/0x30
[ 1410.916823][ T5696]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 1410.923121][ T5696]  ? security_file_ioctl+0x93/0xc0
[ 1410.928347][ T5696]  ksys_ioctl+0xab/0xd0
[ 1410.932614][ T5696]  __x64_sys_ioctl+0x73/0xb0
[ 1410.937312][ T5696]  do_syscall_64+0x103/0x610
[ 1410.941922][ T5696]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1410.947842][ T5696] RIP: 0033:0x458d99
[ 1410.947858][ T5696] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1410.947865][ T5696] RSP: 002b:00007fca142f6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1410.947879][ T5696] RAX: ffffffffffffffda RBX: 00007fca142f6c90 RCX: 0000000000458d99
15:54:35 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b7c378b"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1410.947886][ T5696] RDX: 0000000020000540 RSI: 00000000c0306201 RDI: 0000000000000004
[ 1410.947893][ T5696] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1410.947900][ T5696] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fca142f76d4
[ 1410.947907][ T5696] R13: 00000000004c00ee R14: 00000000004d2448 R15: 0000000000000006
[ 1411.065791][ T5907] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1411.084783][ T5912] binder: 5911:5912 unknown command -1959298037
[ 1411.124057][ T5912] binder: 5911:5912 ioctl c0306201 20000540 returned -22
[ 1411.174784][ T5696] binder: 5678:5696 ioctl c0306201 20000540 returned -12
15:54:35 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:35 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x3, 0x10001, 0x20})
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8)
connect$packet(r0, &(0x7f0000000280)={0x11, 0x6, r1, 0x1, 0x9, 0x6, @broadcast}, 0x14)

15:54:35 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x3f000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:35 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009320000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:35 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xf8f73f0000000000})

15:54:35 executing program 2:
r0 = request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0000b2d3"], 0x0, 0x0, 0x0})
request_key(&(0x7f00000004c0)='asymmetric\x00', &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000580)='/dev/binder#\x00', r0)
r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000300)={0x0, 0x0, @ioapic})
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)={0xa, 0x0, [{0xc0000019, 0x7f, 0x4, 0x7fffffff, 0x7, 0x6e50, 0x6c}, {0x4, 0x8, 0x5, 0x3b5, 0x2, 0xffffffffffffffff, 0x2}, {0x80000000, 0x400, 0x0, 0x400, 0x5ff, 0x10000, 0x4}, {0x4000000b, 0x7fffffff, 0x1, 0x4, 0x1, 0x4, 0x8}, {0x40000000, 0x100000000, 0x0, 0x2, 0xffff, 0x3, 0x6}, {0x8000001f, 0x1f, 0x2, 0x0, 0x0, 0x1, 0x7}, {0x40000001, 0x1000, 0x2, 0x8, 0x200, 0x3ff, 0x80}, {0x80000007, 0x6, 0x1, 0x3aae, 0x8000, 0x80000000, 0x3}, {0x8000001f, 0x8001, 0x1, 0x40, 0x6, 0x7b59, 0x9}, {0x0, 0x3, 0x4, 0x80000001, 0x9, 0x7, 0x4}]})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x101500, 0x0)
write(r2, &(0x7f00000005c0)="83a9a11ba329b88f081563faba16", 0xe)
sendmsg$nl_xfrm(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@newae={0x64, 0x1e, 0x202, 0x9, 0x25dfdbfe, {{@in6=@ipv4={[], [], @rand_addr=0x9}, 0x4d2, 0xa, 0x3b}, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff, 0x3504}, [@extra_flags={0x8, 0x18, 0xf6}, @encap={0x1c, 0x4, {0x1, 0x4e21, 0x4e21, @in=@loopback}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000640)={0x5, 0x70, 0xb6, 0xfff, 0x9, 0x401, 0x0, 0x9, 0x7, 0x4, 0x447, 0x6, 0x9, 0x5, 0x40, 0x6, 0x0, 0x6, 0x38734494, 0xa3, 0x8001, 0x300000000000, 0x101, 0x68b, 0x7c, 0x8, 0x3, 0x5, 0x4, 0x63, 0x6, 0x1, 0x50, 0xffffffff, 0x4f7d, 0x8, 0x6, 0xffffffff80000000, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000600), 0x5}, 0x4000, 0x8e60, 0xfffffffffffffff8, 0x3, 0x4, 0x6, 0x5})

[ 1411.359475][ T6125] binder: 6124:6125 ioctl c0306201 20000540 returned -14
[ 1411.384296][ T6131] binder: 6123:6131 unknown command -743309312
15:54:35 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009330000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1411.412106][ T6131] binder: 6123:6131 ioctl c0306201 20000540 returned -22
[ 1411.419999][ T6135] binder: 6124:6135 ioctl c0306201 20000540 returned -14
15:54:36 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x48000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x9})
arch_prctl$ARCH_SET_GS(0x1001, 0x100000000)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1411.460228][ T6132] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1411.567070][ T6213] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1411.574529][ T6221] binder: 6200:6221 ioctl c0306201 20000540 returned -14
15:54:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x1, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1411.609091][ T6241] binder: 6200:6241 ioctl c0306201 20000540 returned -14
[ 1411.621368][ T6148] binder: 6144:6148 unknown command -1795162112
15:54:36 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009340000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:36 executing program 2:
r0 = request_key(0x0, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='!\x00', r0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1000, 0x8080)
ioctl$sock_rose_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1c, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x7, [@null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="a36f13d819f1792d14967a19f1baba46d77ac77aac78c89f"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1411.659562][ T6148] binder: 6144:6148 ioctl c0306201 200002c0 returned -22
15:54:36 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x4c000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:36 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x2, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:36 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfcfdffff00000000})

15:54:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000200002, 0x20000)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0xfffffffffffffff9, 0x6, 0x200000000000000})
write$P9_RREAD(r0, &(0x7f00000000c0)={0x100b, 0x75, 0x1, {0x1000, "9c2696980945ed1ddfcceb4b8b86cf49dcfe6be55c6bbbb905ca10f889ada299afa806253d546ed56bda6b649f3735f1892a32724b89f601ad3bf974cd6df7ed995756ffb39fa6c558a16d539fb92d861e0694fb9714f0678ec99ecefc2bfad7d4d198f7d6bd5d8bbc31e89c556b63797edaf6924d0eda89c6a294d8b706ffc6ef3cf22e882aabf7cead0c75f6070ae107b368d91f8ea184f56135afae1f39911a1a4e72cc256834a204c9a3bd463f7d6284f3ec3bc63a8e8c1861a652d651af44e8f40d440c7b7eec089dda2f990efd595ec4e13b563aa184b116d699fc7c9f07b4adb1bad344f74d6be197c65f508470fa10ae821615af2c46a550275774c4b450f31a2c4be584547031670afe8b069027a9fb0cddbebeb99699fd237bba1581a91166220bc5d91a15a5b3213009dbab7c8e805b1cd01b9d6fd1a4dff0dd35d3cc4a916aa8562df72c741437c96690cb6453cc902bdc90c472a7815f0d492d5e796397a0763d5f373422273725708ebef5e65cb11176b1ac5283a036c3d6b3940dd57bdfa0353f366f3baf951a609f2340c04b6ddcf0f6fe24fafc2f1ba4d344dbe6efeb8305f35b5518a9e96836cd3e413fd967b292e3ca36f03f72ef18be18d9a531d6fc4ef7605e12de1239916faf3d982c4d31c23a8f398de8e8cc354f5d16a1017c8dd17f3976ca1fba2ea909b47d9e3b9c0ee6195283a240caf8495ef9837cd76d2e5a4483a32a5d30372d64aa4852edf5c1c105caec9cb44b759a6ae3a6db7cb200b6d51e69e2df0fedcd3c3986d265ec260693f197bb7b39c642de1fa400c08e42f4efb3f71a225dca30e99ce8fc3c0468749045c4a2ed72a34703b661fd5c117d48bb5cb0bd32072f57262bca5ebf025b304329482cacd4dabe1f37c51a23b11fe6e18b17b622d86bb45fddc6802005d5a2e37b2fe3091c8d08faf67a3f73ea14a149976b789ab55ca2c2dad9d67d04dbeb94bcfa2314d4e3400b9fd7391597c43e4e14b3d246aad56996990f6bf33fb1861599f436c9e5110080aba26c2056f82890e89bae84eff3ae3c02c6efc1901d11c7e06f25783ff4c0c32303f06b600442891d1b265f860975ace2ed6fb89ea7bce75ce4497d3481e6724c9f5596f97140ae0d68c6cc4d5a72f4c8a88816d3eda23a87343f7bdb8b8dd4f1e7378c38311e53ffd22f82db8a4ab3d8305382d7a3f1203559474179d18ee53a8f032888e9edc900772cacecfeaad72a605c0a3acf3c0152f6ade0aec244d8cf3c3080cbc8354a58cffc4edcdeb66a9cc5457540813b84515dbb9612b6a1872c2858eac95b039910ef441bd3831dd45e4a46cf9ec7a566bb3fecd7a8ff8a003c3d7076f4413a23c9df215b3a4472fe008533ea270e76eaa1975309098089fda46e8a4b9375f0bc84d5a4cbe446b124c06ceddafd47ee26b5e397dea093c6f218e9b6da4596106d1cf9180fe075c1ff0562dd571df3e70dbf0e5b984e9ec88d86881e46b4ed9f1d456fc25cb7c5f196afe5cba3c7bbaccfe79b50af9882a9d00a6aa904a3a46cdbb05154faaa859442529022d39b1f4a70d7a113f97b24e843365407c0b132e875c35fb77878a736382d8c7cf8ea49eeb7b69d2b782186688d7d06dc0f0af0a55a6a35d6bdce7bfe7e5ea2a21da7d15c26e2144a35141fbcd50e9c86d4b83470ee7b6b801960439f3d7028655c533deb485eb2ddb6be1a87d4355ca7574de78302167971f406ff25b5cb9afd73d22485646bf68bf636f964aac31ba9e50a0df0020158ba2b74bde067c3258f8f2135586bec67dfc159ed40a79e00dfd8ef9e9086922d7e4c3a4256a0cbee66bab6302acd67400decf3218060d63e78751c5b42fcc09254056eb835619df17b5ef73b0238127b38a86eb7469d391c05219bf04c946b96203fa246bfac96fa2b3a22b56b4c4ad6ca93ee6a49b84543fb83d8dda9688cfd019a03f0d1cb31a50ca6686d1945590dddecfa5f1983d88322766a2af7fc207d6978d2937b3136061cb0fcac2a2d8eaab1b2485c50ef65962edb4fc5255bf9129725c05ed29405611f5d78aa54a648c3adf9ebee28d9cd7351ed464007ecc08a5ec9b568f1b2349266e12789e9d6f8c45a20b64bd8f4f2fc1bc83c086fde33674468d4ec6300700990e9664591415fbdeecce116440c8f1c0f58eb24ce685b3083b24576c29ff1e4cf7e9f94054cc57f05264bc44392de3c655bfcf153f4ac899c4731652080e609299f839246e494139b5d86f7b5dad0273d0fd3e8f8860eb6471dee1fdc070926f702688a1702780274c1d36839d7954cd571d03322884563e5ab08b0694e1b239a1976bfeb6976e7965039cb7e57544fecc193078a5eb41c6a94b2ecf6c968a326ea3216fadf98702c01fb7c63859be00bc0546887db7fe2a45b37dd9ea380876ac9fa9a36fcfc0d0c124aa8a209e90d22d090611f1805ff3b26a021275666496c3b3735f8bd8aeb03804f1ef66fb811a270d1cce4540bcf81289bb4c936969419c39a982f52f37d9d588890c2729df6de491ed7340dade0d64f0f8153b535f4786396d76d2d1b38e741cccc4bf7fb993c1d6523961bc537730c26717a0e2ddbb038808155bfea387fd2409610e39b90ef33ad7394473d4e3f101a665e79ff5fb75e452c54e5eeed78a00b2ec67b07e8ffe6a1f910aa30f64fae04290904c6fc078ba1fa008ac85350d8cc88113f8d9398b675b9bcabfbcaed04086e2d1b49d0aee4fd95409cd9edc4d84cf8892fe56ec5c2db7eab6575b9b0ce48ba29fa80c71a2d75c0b5d2b1497692c58095e4e67b0a42a7a402c3fafda70f031c74d3aff6b38a3ea9a67926e2eb3685baa5ffda89c0d6662f31183af364d514ca4f2c76d5c19e1cfcf973febc81ca84eba42ecdc5706988c0f329648aa35db75a24c7d4bd5457f3727d7cd05adac23d385b202886e2bea49ec32db87a019ca9be7e7f8a627a63a74ef98fe01f572a57fe656d0b48a3ec40ef6088262fa053bea49680ed2c7a55793fb5f4042b1b21265f73ee950fb8a2821495b015719fbd17cdcdb860d6669f7ba645d629351d9b7347bbe7412b58047df5efad13649b813eec09f849b6331c49bb9d51bf972773fcbd49fd4386df81ccf51b4e53210ab2f728ff9256dd702e4cf2812468e97a83378192bf475538ea619848fb3597f47e432fceb00781948102920d78aa904de0db8173c8229bb84692c9075a9691779e227c830da30174f2ed610eca8966f560527850eb0c81951607a4d77956a218b8a7238e25b6378f6a03bfbdf036709dee0659630ed5f78ee5b8138b837c0c807be4658ec16a95c21af39d5b4e19bbfa51baa02e37912cd24c308ba2045e6248f3df2135fc02250b3e8570415306c48828e380163477cc76982dad4c62d4db7a2ba27a14a8e30e734f7aef41b0e8fdb26c8a62c5c9519cf4ccc212c20b0d9d41430cee56e9c2f164d886d2b4dae59236dc184ed0a58838eae18fdd02da9ffea842d95b37485dfbe524ae21da0a3bccc116e1bea4067b55c412275c9cb11ab7987eac418658bb4fe1dae56223114f8570c107546e5c44a0370a3abe3e08429795564f089dbd98d07fb5dbd266e1475a69c396acab697b68c34f7199c6848339353e1a7b73d1b227ae0bd7bd7789c2cc35de383d0775a0c179360e0582b7eedd7fa00a7a2c12048981cc8e5e8cb266684206358965684b2b6b284925b696417d910f1c0acda40c52cbef482afea0c1df2ccdde835002c1728e94fe7899a6deaa223f830848ebf1cc236a0baa2a1dbdae9db863fe9b3d2ec6cc17ed3d1df92aea9a5c2a08e2502bccff9b1abba2a32a65c89941715b613266dea5c7e65bdb0986e6f580aecfbed1028e632045d10706bb1fcfa14d4acd58169e673844d1f07bda89d9e3ae7704dde2f440b96c32c6e737520bc66828c78314535ecfd40f3675ea07afad104cb81277bc80c5d810fda06a0b92149806e14478524cabf720ba02520d61ec963f0246ec971042f2bd2e6dfdbc6dbfad3bba26eb110fa420b8ac21b64a790d07ed0ff635437cc91c7e2d483bbd5b227e434faebccf149695b82243dd066583b896086abf1d598a58ef3ffd37dde3876df5d925a169d3941fa35443da98d3f16da9063950dd9154bb68cf167b992899e7171ee27fb1dc7d962ea6293e29811ef2bf06d2f0e0c0b4498c36b5253c55fd593f737cfe182f27bdc000057358a7bb766e5e873ea463150939629f92afca7697e2468a489abb106da8a6e381e6c249b5f52ddbcb6618577af4baee2e47133ca978c8a1d2afb6527c784064297b5efa1d51ebb9e8ecd93184aef5c9acc61ffe7eb5d5f0fc594c5ec8b3affc48ace4ed4be164dd299d016e86015b86c468ef1f909dbb570bfebe6cdfa4d7e6057c69ae4505f70907c6f672c7310732917751cd7c6331af2d3f7e3b0725c1c5de920d63bf3cdc202e72abe6fc77007dada09d112e2112712d0e8ef251dc73783375f85ffa3ea801d4ad40900ba8652179b8d111f8e249c8b387ec97d77356ad961ba4a3c5fa1ba7644c3f3a0a49940f6c455f0a835a0b313e192ae66ae0ceb34634595fcafd4cc648ed6059255d82e03140372b0b792fd115d3a3dcaeaf180cc1d232d3be82d413aeb2a5663b8a6555803a49c0e5f324f3a8e2535674731fa5888a721c1ef9a395a06ec972f41fa3a52cc2bcd0567f8451978db4bf8c5fb87bafa246cecd3d87d87e60799130cfb96b1c174d313818397a7b90d5453f777c360f9d4c9d96957b9e4b4bb82b9fa58b0f381143d1d60d890b5c6696cb81fda7f23a4125621a3476a96bae05564b05c52bd070a6a569a18054737a1da206b779528b0e8c33513168fe093d5081af7f4a7134a035a59ab5659312e4516049b8ca1c6bf2c5d8fe08d87f0b3051081604bb926af13e22e615a8d87678e2d5f32d8d7216d1c818a18cc4ca4f97a483d6aadd05912abcc654a422ee2f1c8280fc7aa15c790532a5d412b380aea7275e457dc693a5ea6b1aeadc6453c48a2f3c94e2b3a47f02583b80ebc514d469979de2ab2845e1dd87cb5c9276a1add0958633f52416fed37e333fb406c2f6fba2bef9eefe4a2b7918ddb114c7d0723970e739d6b23b51de61032765f404e093e8503afa65ab7d23d9f5165f364d4d029d34a3e00ab48a970b6023c2c671f736971a7976c753b8593fa418f0247303b80dcd0afb010ed7b45ef187ce7ea9f174e9a3a4623d3eba7a2d1dd10c8873fdc7aa2f25876650ed9e4e7bab91be6c5a0956189151eb5c94bdc0423c30b706bf896b582dd7c999247855fe5fc335d64a225edf4cf3ab3a13b3e3f73ab3fef2d8de8af5604922107b8a89b605fca5f69b70ac8d29629c1a144a162a871eda66089b3ffed29c2a5caf4a8d31140683c89f04c53a8629f11fe9de0ddb968b1c032eff4f027db05f6f793a3d52c8a858bf8f0e2abbe4b5d6565735fe89ac6e851b9599d7506d11fbc01c5e4cd7608527768218a0ab719f2b33759b9f47f64b599ce734e95dc35a9fee36ef3ff8efb9f4d7bb1675925346863677476861dfa7145dfeacf5237a32f277f6ff280ce1a0c8a3d37c493d9dc3661d2625e6960ac048f93ac7b9291b21984ddc0718c4b24caad4beb5f34ad5b1979f61306f2588349c1bd2f0d4d7163943259db920db76b3da23b5c5e0b65ef302990acb1dbf9fdf17a85167c56596c64536499fe73428a2b10730295f3975aaba57b1b030246b6a90b7daedd0f646f37e070dda231533609de69759a355028e2e954ded6d7446bcde"}}, 0x100b)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8)
write$cgroup_subtree(r0, &(0x7f0000001100)={[{0x2b, 'cpu'}, {0x2f, 'cpu'}, {0x2d, 'pids'}]}, 0x10)

[ 1411.773657][ T6258] binder: 6257:6258 unknown command -669814877
[ 1411.782508][ T6263] binder_thread_write: 39 callbacks suppressed
[ 1411.782517][ T6263] binder: 6259:6263 ERROR: BC_REGISTER_LOOPER called without request
[ 1411.791388][ T6258] binder: 6257:6258 ioctl c0306201 20000540 returned -22
15:54:36 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009350000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:36 executing program 1:
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x4004550c, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0xa)
getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80501, 0x0)
getsockopt$inet_dccp_int(r1, 0x21, 0xf, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

[ 1411.856927][ T6263] binder: 6259:6263 ioctl c0306201 20000540 returned -14
[ 1411.901565][ T6276] binder: 6259:6276 ERROR: BC_REGISTER_LOOPER called without request
[ 1411.923724][ T6282] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1411.955406][ T6276] binder: 6259:6276 ioctl c0306201 20000540 returned -14
[ 1411.990783][ T6321] __nla_parse: 14 callbacks suppressed
[ 1411.990793][ T6321] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:36 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r1 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0xd012, r0, 0x7ff)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x3c, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309, r1}, @request_death={0x400c630e, 0x4, 0x2}, @acquire_done={0x40106309, r1, 0x2}, @register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10)

15:54:36 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x60000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:36 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009360000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000020000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1412.060697][ T6444] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:36 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x4b47, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:36 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfdfdffff00000000})

[ 1412.200269][ T6495] binder: 6491:6495 ERROR: BC_REGISTER_LOOPER called without request
[ 1412.230169][ T6496] binder: 6494:6496 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1412.251319][ T6501] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1412.265508][ T6495] binder: 6491:6495 ioctl c0306201 20000540 returned -14
[ 1412.277687][ T6496] binder: 6494:6496 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4
[ 1412.291785][ T6506] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:36 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x206500, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x100000001, 0x0, 0xf4fe, 0x740000, 0xffffffff7ff0bdbe})
write$P9_RFSYNC(r0, &(0x7f0000000040)={0x7, 0x33, 0x2}, 0x7)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000100))
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:36 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009370000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:36 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x68000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1412.312200][ T6503] binder: 6497:6503 ioctl 4b47 20000540 returned -22
[ 1412.315190][ T6496] binder: 6494:6496 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1412.345211][ T6496] binder: 6494:6496 ERROR: BC_REGISTER_LOOPER called without request
[ 1412.373929][ T6512] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10, 0x80000)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000100)=""/176)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x400, 0x0)

15:54:37 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xfdffffff00000000})

[ 1412.417403][ T6572] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1412.440296][ T6595] binder: 6584:6595 ERROR: BC_REGISTER_LOOPER called without request
[ 1412.485086][ T6595] binder: 6584:6595 ioctl c0306201 20000540 returned -14
15:54:37 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x4b49, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:37 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x6400, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:37 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009380000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1412.531067][ T6720] binder: 6584:6720 ERROR: BC_REGISTER_LOOPER called without request
[ 1412.558643][ T6720] binder: 6584:6720 ioctl c0306201 20000540 returned -14
[ 1412.624240][ T6725] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1412.624846][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1412.649912][ T6733] binder: 6729:6733 ioctl 4b49 20000540 returned -22
15:54:37 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6c000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x3, 0x8000000007d, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1412.669804][ T6733] binder: 6729:6733 unknown command -1795162112
[ 1412.688049][ T6733] binder: 6729:6733 ioctl c0306201 200002c0 returned -22
15:54:37 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009390000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
read$FUSE(r0, &(0x7f0000000100), 0x1000)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0)

[ 1412.771847][ T6781] binder: 6757:6781 ERROR: BC_REGISTER_LOOPER called without request
[ 1412.779184][ T6745] binder: 6744:6745 ERROR: BC_REGISTER_LOOPER called without request
[ 1412.797134][ T6781] binder: 6757:6781 ioctl c0306201 20000540 returned -14
15:54:37 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x541b, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1412.848222][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1412.860403][ T6850] binder: 6757:6850 ERROR: BC_REGISTER_LOOPER called without request
[ 1412.861599][ T6845] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:37 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00093a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1412.906118][ T6850] binder: 6757:6850 ioctl c0306201 20000540 returned -14
15:54:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
write$selinux_validatetrans(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6576656e745f6465766963655f743a73302073797374656d5f753a6f626a6563745f723a73657472616e735f657865635f743a7330203030303030303030303137313739383639313834202f7573722f7362876e2f637570732d62726f7773656400"], 0x74)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x0, r0})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:37 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x74000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:37 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xffffffff00000000})

[ 1412.960988][ T6932] binder: 6895:6932 ioctl 541b 20000540 returned -22
[ 1413.000926][ T6932] binder: 6895:6932 unknown command -1795162112
15:54:37 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b63000093f39fadc3d3321f4036e4cabbd31395063d74399e4fc29a29afe89a80cf30090be2a557e6f24073cbd699bd9f7d0ca09f5c8b4ba0da5342584b9f47e629ee00c0530c2750028ed2c3c3d8f0925e80e061f78c219c86ee7df81bd148"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1413.016880][ T6932] binder: 6895:6932 ioctl c0306201 200002c0 returned -22
[ 1413.065476][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1413.090016][ T6966] binder: 6965:6966 ERROR: BC_REGISTER_LOOPER called without request
15:54:37 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00093b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:37 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5421, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x1200000000000000, 0xd000, 0xfffffffffffffaae, 0x0, 0x7})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x6)

[ 1413.166019][ T6966] binder: 6965:6966 ioctl c0306201 20000540 returned -14
15:54:37 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x7a000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:37 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802)

15:54:37 executing program 2:
r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x20)
ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f00000000c0)=0x1ec7eb78e96395f2)
request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x52ce007643b43e23)
ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000040)={0x2})
ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000080)={0x0, 0xd47d})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})

[ 1413.299195][ T7181] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1413.346123][ T7186] binder: 7178:7186 unknown command -1795162112
[ 1413.366044][ T7186] binder: 7178:7186 ioctl c0306201 200002c0 returned -22
[ 1413.386192][ T7189] binder: 7187:7189 ioctl c0306201 20000540 returned -14
15:54:37 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00093c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:38 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xffffffffffffffe0})

[ 1413.434777][ T7214] binder: 7187:7214 ioctl c0306201 20000540 returned -14
15:54:38 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00093d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:38 executing program 1:
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000080)={0x1, 0x0, {0x1003, 0xfff, 0x80, 0x64}})
r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:38 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfdfdffff, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1413.525404][ T7307] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:38 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x2, 0x0, &(0x7f0000000900), 0xfffffffffffffe2e, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = socket(0x2, 0x8000b, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000000000004}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x94, r2, 0x2200, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x17}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x83}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

15:54:38 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5450, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1413.675263][ T7416] binder: 7413:7416 ioctl c0306201 20000540 returned -14
[ 1413.697898][ T7418] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1413.712386][ T7420] binder: 7413:7420 ioctl c0306201 20000540 returned -14
15:54:38 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}], [], 0xffffffffffffffff})

15:54:38 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00093e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1413.746213][ T7419] binder: 7417:7419 unknown command -1795162112
15:54:38 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfffffdfd, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$void(r0, 0x5451)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x800, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r0, 0xc0044306, &(0x7f0000000040)=0x4)

[ 1413.787941][ T7419] binder: 7417:7419 ioctl c0306201 200002c0 returned -22
[ 1413.799512][ T7423] binder: 7421:7423 unknown command 0
[ 1413.817630][ T7423] binder: 7421:7423 ioctl c0306201 20000000 returned -22
[ 1413.848772][ T7426] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1413.922063][ T7561] binder: 7497:7561 ioctl c0306201 20000540 returned -14
15:54:38 executing program 1:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000280)={&(0x7f0000ffb000/0x3000)=nil, 0x3000})
r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x400, 0x18002)
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000080))
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0xc)
r4 = getegid()
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuse\x00', 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="66643d7aaf2842fbc62affa5e6e8cb87a85775919704f85f589fe35c324d59500f9b7ab1c96af80d02b5", @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r4, @ANYBLOB=',max_read=0x00000000000000bc,mask=MAY_APPEND,fscontext=staff_u,defcontext=user_u,appraise,subj_role=\\wlan0cgroupsecurityeth1,fsmagic=0x0000000000000009,\x00'])
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x4004550c, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100))

15:54:38 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009410000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:38 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5451, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:38 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0xb00, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000040)={0x6, 0x7, 0x7f, 0x4, 0x4, 0x5, 0x5})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1413.977233][ T7638] binder: 7497:7638 ioctl c0306201 20000540 returned -14
15:54:38 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000002540)={0x130, 0x0, 0x8, [{0x4, 0x4a87f741, 0x0, 0x1ff}, {0x0, 0x0, 0x5, 0x3, 'user\x00'}, {0x3, 0x97, 0x1, 0x6, '('}, {0x2, 0x7f, 0x3, 0x1, 'syz'}, {0x6, 0x200, 0x8, 0x5c, 'cpuset&,'}, {0x2, 0x0, 0x15, 0x6, ']systemwlan1*eth0user'}, {0x4, 0x2a, 0x0, 0x8020}, {0x5, 0x2, 0x7, 0x308, 'noquota'}, {0x4, 0x3, 0x7, 0x8, 'noquota'}]}, 0x130)
r1 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="fc41b17800656590519ae72ca0f47d1ec90dd60aaf39be945e", 0x19, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="0db1a970a543bc5ad9788e41cb836aff6040ed7d197b33726c85771192eb86ea5404889e231e996a0dbda7fa41ae97a2f715883c33222971d892ea51e1f653cd4da458860789575b0dfc8ea0ae05e150770a16bfef997298ddb0735901b5eedcd9345bb468f1c081d49a078a7d400d11cf8c50f62d55fc69ac5576a2d6fb128bfe82", 0x82, 0xfffffffffffffffd)
r3 = add_key(&(0x7f0000000300)='big_key\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffffb)
keyctl$dh_compute(0x17, &(0x7f0000001380)={r1, r2, r3}, &(0x7f00000013c0)=""/224, 0xe0, &(0x7f0000002500)={&(0x7f00000014c0)={'xcbc-aes-ce\x00'}, &(0x7f0000001500)="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", 0x1000})
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
keyctl$unlink(0x9, r1, r3)

15:54:38 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x100000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={<r1=>0x0, 0xf1, "fa0e0c594b82e9c33d59b22e201887d21b1d0f87fd82480914ec252cc517f91a9f7c1e1dcdd22aeccc600343848a803b9d812f25e37cdc444f6e5df12a663da9410c88b155781731057f2992e9fc1765d3173bc329a14f0d63879bf58414a898489cf2f8cd904dfe9fc8786704b99bfc9b1bdb80b2d18fb124e7908410fd419274fdeb9768509b48b2f6ac80c1ef2306ff45d142911c762e693ab32d55d682eff12a520c5d8059a5aa34358338af3798da837714e052093b23982d94ca54032222167e479c5161d75e1d67c4194a175a7a4246f0e17717f5f2a9218937012679e35097dc3409ae5828dea26b65974fac81"}, &(0x7f0000000040)=0xf9)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={r1, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e20, 0x3, @rand_addr="8143c3974fc8f2e5a9f541c8506de6e6", 0x80000000}]}, &(0x7f0000000240)=0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0)='nbd\x00')
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x18000004}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x106}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x100}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xf42}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000001}, 0x90)

[ 1414.124691][ T7648] binder: 7647:7648 unknown command -1795162112
15:54:38 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009420000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1414.173378][ T7652] Unknown ioctl 1076909650
[ 1414.177883][ T7655] binder: 7653:7655 ioctl c0306201 20000540 returned -14
[ 1414.179066][ T7657] binder: 7653:7657 ioctl c0306201 20000540 returned -14
[ 1414.207890][ T7648] binder: 7647:7648 ioctl c0306201 200002c0 returned -22
15:54:38 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x200000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:38 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x8000000000a, 0x100)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:38 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74612c0033184e5e48e02a9fb8760f7a20c3dda05c775d1ebc29df23bb59473c222fe953789156368be3a785c481c9c7685839ae5237848a610200000000000000b648f8ead4e5abd1d0b129e48d78ea419c32d7cb89e7f3fe1de2a0c4eca6374348d3b838f3155c3abef8c7db2a0d1c31d02056360408b6749c5dd7070413d673ad11af7e51724f90993fd6bdde5b0b82d049854bc26669a467e5875d914149368e08957f3656ace7068b27be32d1e0cdbef97231"])

15:54:38 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5452, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:38 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b630000bfd131eb0002000083c1ca642874e9fcb8bddaa58035dc926fc69550cea9e9b639a9d1d330ecffab9e161e05bdaa1a3b6c2e4bc2ef24b9cc13920200a75578e523541d4446fb3a73ba51dc77adfa2c87c9c50eae02e1b175aa3acec483d2b65ae58dc21c7079f04a63e5ec775b3710a20c9d36e2d73103f97b0572c89c1743af20b55b441ed4283878560eb10608ef86cf569faf6a91ef0a2c412e97a96f37038d99dfe0aefb1dda4cf413f1167d8f2f8cca370e1dc3604118f4a128fd210ca290078c4591bc8416cc4d7324996b5b87056368eba95c2d348dfaab952535443719800c6cfe607598467eb80b8839112070bdffab07358ac0282f2e06d11a1792614e59feff84464a8694300cfd569fc20eb78d640eff158092f7faf1e101580e792308965c7491aefaf3dc4e6c98e810941a4f1427342e88d1209c6f9aea9d140959bf748383a6efb07f0b4d3c7a28086d5d34a8a210e97090f4548c4b15ced6a02ef1c3271e7d4f0a8b0f476aa43cb81b40a45dd18cca6f916ebf7df8f563891544c3c87f98ccf84d7d04a5945487af7ac938f91fd300fb17d9ece2ad524b2b774a9198ad024a9f35e787a7f0f9c3d510"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1414.401490][ T7869] binder: 7868:7869 ioctl c0306201 20000540 returned -14
15:54:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0xc000000000000000, &(0x7f0000000080)=0x4)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6)

15:54:39 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009430000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1414.494055][ T7882] binder: 7868:7882 ioctl c0306201 20000540 returned -14
[ 1414.502433][ T7881] binder: 7879:7881 unknown command 25371
[ 1414.542371][ T7880] binder: 7877:7880 unknown command -1795162112
[ 1414.565693][ T7881] binder: 7879:7881 ioctl c0306201 20000540 returned -22
[ 1414.576832][ T7880] binder: 7877:7880 ioctl c0306201 200002c0 returned -22
15:54:39 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x300000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:39 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f00000000c0)=0xe8)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0})
chown(&(0x7f0000000040)='./file1\x00', r1, r2)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:54:39 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009440000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:39 executing program 2:
r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00'/13, 0xfffffffffffffffa)
request_key(0x0, 0x0, 0x0, r0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="9e34f532"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = dup3(r1, r1, 0x80000)
accept4$inet(r2, 0x0, &(0x7f00000000c0), 0x80000)

[ 1414.715678][ T8082] binder: 8081:8082 ioctl c0306201 20000540 returned -14
15:54:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000080)=0x4000008)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000040)={0xffffffffffffb5f1, 0xf1, 0x9, 0x2, 0x20})
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r1, 0x12, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x4004)

15:54:39 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x5460, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1414.761270][ T8107] binder: 8081:8107 ioctl c0306201 20000540 returned -14
15:54:39 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f71756f74612c00fce10cb9c1e3af0b3e8b55c0f3df764df6198a5e0f56027f1d8357f1088e46f435ed029e2c7bde2071ec3e2b90245ff2190bb44b006882f857c67e7e675ae542da64cfd48b1fd9d2d13c92d229c5bb1d1d26fd415e58d8179f3e85b3bb5338ae1c4d21446010c0e54373507af747a84da8ed8058e1b4d0cb651664f591b10ff2c08c2a312cfe73a6120e8dfcbcfe2f5ea0ed1482"])
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400001, 0x0)

15:54:39 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009450000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:39 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x400000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1414.884619][ T8116] binder: 8110:8116 unknown command 854930590
[ 1414.915334][ T8116] binder: 8110:8116 ioctl c0306201 20000540 returned -22
[ 1414.930954][ T8120] binder: 8114:8120 unknown command -1795162112
15:54:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
r1 = socket(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockname$packet(r1, 0x0, &(0x7f0000000380))
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1414.958674][ T8123] binder: 8122:8123 ioctl c0306201 20000540 returned -14
[ 1414.968247][ T8120] binder: 8114:8120 ioctl c0306201 200002c0 returned -22
15:54:39 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009460000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:39 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000280)=ANY=[@ANYBLOB="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"])

15:54:39 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x131000, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x6, <r1=>0x0, 0x2, 0x9})
ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f0000000200)={r1, 0x9})
r2 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r3 = getpgrp(0xffffffffffffffff)
capget(&(0x7f0000000240)={0x19980330, r3}, &(0x7f0000000280)={0x3, 0x9, 0xfff, 0x4, 0x10001, 0x9985})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

15:54:39 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x500000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:39 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:39 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009470000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000040)={0x2, 0xfc, 0x4000000, 0x740000, 0xffffffff7ff1bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
syncfs(r0)

15:54:39 executing program 2:
r0 = socket$isdn(0x22, 0x3, 0x4)
r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0)
dup2(r0, r1)
request_key(0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
pkey_alloc(0x0, 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1415.268978][ T8390] binder: 8387:8390 ioctl c0306201 20000540 returned -14
[ 1415.290841][ T8395] binder: 8388:8395 unknown command -1795162112
15:54:39 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
recvmmsg(r0, &(0x7f0000000500)=[{{&(0x7f00000000c0)=@un=@abs, 0x80, &(0x7f0000000480)=[{&(0x7f0000000200)=""/113, 0x71}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)=""/97, 0x61}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000000400)=""/84, 0x54}], 0x6}, 0x2}], 0x1, 0x60, &(0x7f0000000540))
exit(0x1000)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
write$FUSE_POLL(r0, &(0x7f0000000040)={0x18, 0x0, 0x7, {0x40}}, 0x18)

[ 1415.331619][ T8402] binder: 8387:8402 ioctl c0306201 20000540 returned -14
[ 1415.345866][ T8395] binder: 8388:8395 ioctl c0306201 200002c0 returned -22
15:54:39 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x194, 0xb9, "4fcbf470c16229729ed4f5fd8d7fbae8d2564df2a0fbd019b56de00f5d7bfd1f9eab834868b974801a79c7e5cb38248547d7ff5484891dc1b1ee9e20ebf20d0e13fe90d01779d69444f2ae5b75a55f3da837f2e38b9e58c1617c9aa54b9d44dc06a8430774bac68de6d9d19826ffb6fe6235536e0ea4076f2c809c98e52d53226e1f4277118a91bf961b9facde6f37b2ed94211c057f8d13f96a53df8e2e56d725685d59b1f281b1dd29eadef967e785405fc0adfa84aba99a"})
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040)=0x20, 0x4)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:39 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009480000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:40 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x600000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:40 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046207, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1415.539915][ T8607] binder: 8588:8607 ioctl c0306201 20000540 returned -14
15:54:40 executing program 2:
r0 = request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='/dev/binder#\x00', 0xfffffffffffffff9)
socket$tipc(0x1e, 0x5, 0x0)
request_key(0x0, 0x0, 0x0, r0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000001016620c3849cc1d95209a9cc6107443da8773f177e3d19ac52fbfc801e708863a4e5a5dec05d766d50ec86105ea409359d959b732d8eb1f0ebebb21f3f6afef5c1e6bf0fc1979eea9ae61db1367560c51b4a88e336b317099b105e19e4686c5720500c98637691589383a8aeece6f34823f023aad2a9639c3dbfec09f354297b69e75bd6660e47b8951ecc9a9f3551473b7cd10c0cd3d548d7a156bcb521388d742abd4ba8713961d411f959148"], 0x0, 0x0, 0x0})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:40 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009490000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:40 executing program 1:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4)
r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4080000000006, 0x1000000000000000)
ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="643e0f01c865640fc75a000f01bb88000f01cb660f30baf80c66b8631e368266efbafc0cb031ee643626660f73f79f65c0ba00000166b8b3ea4a6b0f23d80f21f86635c00000e00f23f8ea0a00f600", 0x4f}], 0x1, 0x40, &(0x7f00000001c0)=[@cr4={0x1, 0x4000a1}], 0x1)
ioctl$SCSI_IOCTL_GET_PCI(r1, 0x4004550c, 0x0)

[ 1415.573112][ T8625] binder: 8588:8625 ioctl c0306201 20000540 returned -14
15:54:40 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x700000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:40 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00094a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:40 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080))
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x56, 0x34, 0x3, {0x2, 0x7}, {0x0, 0x6}, @cond=[{0xf6, 0x101, 0xfffffffffffffffc, 0xffffffffffffff01, 0x7fff}, {0x3, 0x178b78f4, 0x80, 0x1, 0x1ff, 0xfff}]})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1415.722094][ T8631] binder: 8630:8631 unknown command -1795162112
[ 1415.739540][ T8631] binder: 8630:8631 ioctl c0306201 200002c0 returned -22
[ 1415.746690][ T8639] binder: 8635:8639 unknown command 268435456
[ 1415.747090][ T8639] binder: 8635:8639 ioctl c0306201 20000540 returned -22
15:54:40 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000040)=[@increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1415.839827][ T8742] binder: 8715:8742 ioctl c0306201 20000540 returned -14
[ 1415.914758][ T8831] binder: 8715:8831 ioctl c0306201 20000540 returned -14
[ 1416.002260][ T8856] binder: 8852:8856 IncRefs 0 refcount change on invalid ref 3 ret -22
[ 1416.261700][ T8626] EXT4-fs: 13 callbacks suppressed
[ 1416.261714][ T8626] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:40 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
sendto(r0, &(0x7f0000000200)="0fc464d82e543b9947e4535db5c66193560828b7fa2581921e5a8cc84c688c59fe962c6adf961bf5f8d0cc23699daba19573c94e88f2de83924edddcacb50abd0114f81b11906ab28b6d9adaee406af86412c13ec5a15b99c5794bad671e9e7c8417cda7402d49110b7015727c933e99f823421bd34528807387ec0ba098ce9203e9a496e4b60804e0bea9ce4623e99f3280637e4f2705cf7cbc739aefba82cd5f8f", 0xa2, 0x0, &(0x7f00000000c0)=@rc={0x1f, {0xfffffffffffff162, 0xe5, 0x5, 0x101, 0x3, 0x8001}, 0x3f}, 0x80)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0xffffffffffffff65, 0x0, 0x820, &(0x7f0000000040)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5e}}]})

15:54:40 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00094b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:40 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x98a, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)

15:54:40 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:40 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xa00000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:40 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x80000001, 0x0)
openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
getsockopt$packet_int(r1, 0x107, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
restart_syscall()

[ 1416.390566][ T8985] binder: 8972:8985 ioctl c0306201 20000540 returned -14
15:54:41 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00094c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1416.436676][ T8983] binder: 8970:8983 unknown command -1795162112
[ 1416.448468][ T9037] binder: 8972:9037 ioctl c0306201 20000540 returned -14
[ 1416.458676][ T8983] binder: 8970:8983 ioctl c0306201 200002c0 returned -22
15:54:41 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x2000000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:41 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/160, 0xa0)

15:54:41 executing program 2:
r0 = request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0xb946e5d8c4711b39, 0x80)
bind$nfc_llcp(r2, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x7, 0x6, 0x3, "241d9f3e70c370c745725bdda6b31314ca1c5f0c6aee067b2f0aa4b83c42410eec7959f34ea20242c261d14a8908e12b8c7cd747c792257999568574f1829b", 0x4}, 0x60)
write(r1, &(0x7f0000000000)="9249b7c1ae688877925730f50b7dbe1c26d49b75893c371983f56821d7faa6205e4465b30fd919666e410e20ec584c61aa82fa3f8e84aa9e7fb4507ad03143c1cea2fb8d92a573e0393c4ae67908ecb47ef2927559df56e25a80e9860af577209e3f0776dc3819eed352d1f90231748d29099cff4517b343bbd2d7741346ea2d289068677abbedd1124d528aee7843b4", 0x90)
setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x5, 0x4)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYRESHEX=r2, @ANYRES64=r1, @ANYPTR64, @ANYRESDEC=r1, @ANYRES64=r2], @ANYRES64=r0, @ANYRESOCT=r1, @ANYBLOB="857ec80d68e8faccf1acd0bbe4a294d5ef13cdeef6ee908d5e88aa642b4cbe21b042f58087b71e5b2cbea2bc8f56583b2a666577302322cf647317376a7ed4a9d5a4353286203ca3e381cd8f84209bf77357375051b14520edd68599279722cc41d68874", @ANYRES32, @ANYBLOB="85c0bd2f094db9ae49e2824d52e069876acfe6773fe3ef6db1337564d48072e3daaf4cbc21b3ddb73f1380ac90544859d21ed55311400fba8570f8a7a47e665ff4a3935203495b5c43d15c90928d8b430a", @ANYRES32=r2, @ANYBLOB="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", @ANYRESHEX=r2]], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
fdatasync(r1)

15:54:41 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40049409, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:41 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00094d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1416.672433][ T9197] binder: 9194:9197 ioctl c0306201 20000540 returned -14
[ 1416.678384][ T9200] binder: 9196:9200 unknown command 536871488
[ 1416.712037][ T9199] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1416.726904][ T9200] binder: 9196:9200 ioctl c0306201 20000540 returned -22
[ 1416.746904][ T9210] binder: 9194:9210 ioctl c0306201 20000540 returned -14
15:54:41 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00094e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1416.780450][ T9208] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1416.810998][ T9212] binder: 9205:9212 unknown command -1795162112
15:54:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1416.841291][ T9212] binder: 9205:9212 ioctl c0306201 200002c0 returned -22
15:54:41 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x3f00000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:41 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f71756f74612c007d95172b596f54269a1b3c52da4d44ff3e0da5691d6b4e98c1e381bfea43c39e49db1c4c61ecef339200fbb8c99b952852e4f0b29efb2745fe670bf0ae41524cf09fca9c070d447f2b5a7b199967e22f1692d83535feea8e39dd44b78ec82a400adaab79b83257ee5af66aa58f50f20a1f0e8dca2b1bbfb3a129ea40ab55e7b92105a46f"])
inotify_add_watch(r0, &(0x7f0000000040)='./file0/file0\x00', 0x10)

15:54:41 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x402080)
ioctl$NBD_DISCONNECT(r0, 0xab08)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:41 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00094f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:41 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40086602, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000100)=""/199)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1417.005685][ T9392] binder_thread_write: 27 callbacks suppressed
[ 1417.005695][ T9392] binder: 9390:9392 ERROR: BC_REGISTER_LOOPER called without request
[ 1417.070326][ T9428] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1417.087065][ T9433] binder: 9432:9433 ERROR: BC_REGISTER_LOOPER called without request
[ 1417.095654][ T9392] binder: 9390:9392 ioctl c0306201 20000540 returned -14
15:54:41 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x4800000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1417.160532][ T9436] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:41 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x8ed4, 0x0)
ioctl$RTC_VL_CLR(r0, 0x7014)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f71756f74612c00cb27914c2875c271d7ec52cc2784b800a7cfd620d4ffb0ae7df6e0a55318a151d32fa8ed8989060af9ce84926db5972e590b466b00dbbbd561979b81aa3789c45f9fb90b370b77382b53308baabd2234d6e7ca55c3cce31e037c114dbda6aaa6652b23fc19c4be076a00be79d6a661b34bbc6f916f62a0de81a92ed61484b131c8a815dc10a2c24600"/160])
ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000000c0)={0x2, 0x81, 0x100000001, 0x2, 0xff, 0x0, 0xffff})

[ 1417.260018][ T9517] __nla_parse: 14 callbacks suppressed
[ 1417.260029][ T9517] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1417.286651][ T9544] binder: 9541:9544 ERROR: BC_REGISTER_LOOPER called without request
15:54:41 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x100, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000040)=""/147, &(0x7f0000000100)=""/184, &(0x7f00000001c0)=""/220, 0x1})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:41 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0adbe})
fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, <r1=>0x0})
ptrace(0x8, r1)
ustat(0x9, &(0x7f0000000080))
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4)

[ 1417.330547][ T9544] binder: 9541:9544 ioctl c0306201 20000540 returned -14
[ 1417.365105][ T9551] binder: 9543:9551 ioctl 40086602 20000540 returned -22
[ 1417.386179][ T9554] binder: 9541:9554 ERROR: BC_REGISTER_LOOPER called without request
[ 1417.407972][ T9551] binder: 9543:9551 unknown command -1795162112
[ 1417.414803][ T9554] binder: 9541:9554 ioctl c0306201 20000540 returned -14
[ 1417.422519][ T9556] binder: 9555:9556 ERROR: BC_REGISTER_LOOPER called without request
15:54:42 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009500000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1417.431746][ T9551] binder: 9543:9551 ioctl c0306201 200002c0 returned -22
15:54:42 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x4c00000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:42 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000140)={'veth0_to_bond\x00', {0x2, 0xfffe000000000000, @dev={0xac, 0x14, 0x14, 0x14}}})
request_key(0x0, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0xc)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={<r2=>0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f00000000c0)='nodev[\x00', 0xffffffffffffffff}, 0x30)
setpgid(r1, r2)
r3 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b04000026b534d4f6ffc0ba67ea161ca2f5ae82acee532db981718c394eafe6b7fe12f048ebda25221fae6e84e1178a4951489d2a24dec300e3204ea6ebb57729e462e4a765992a2f2d988b83225905777a93660b4b546c"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)

15:54:42 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40087602, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0xd6, 0x0, 0x740000, 0x3})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1417.575029][ T9768] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1417.602877][ T9767] binder: 9737:9767 ERROR: BC_REGISTER_LOOPER called without request
[ 1417.655043][ T9767] binder: 9737:9767 ioctl c0306201 20000540 returned -14
15:54:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400000, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x1, 0x0)

15:54:42 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009510000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:42 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74612c0069b630a87c61414ec5f5c9a90fd1b577d7733d1eecb3ed0e52fedbd7c4e3519ffd205e340664530869761e2c6137223c30fbddb8ff353503a2492a9579b915b61010d917d2b8998cc3e76444aa37bb8b613ec41df316a3fef3dd61f25f05156e3119d57e081735dc8d5a61db"])
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x0, 0x2faf, 0x1, 0x8}})

[ 1417.708477][ T9780] binder: 9777:9780 ioctl 40087602 20000540 returned -22
15:54:42 executing program 2:
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000100)={0x40, 0x5, 0x1f, @empty, 'tunl0\x00'})
request_key(0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x8000, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000040)={{0xe11abf1bf5e58a44, 0x0, 0xffffffffdb40b484, 0x2, 0x843}, 0x7, 0x0, 0x3})

15:54:42 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6000000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1417.751069][ T9780] binder: 9777:9780 unknown command -1795162112
[ 1417.760191][ T9780] binder: 9777:9780 ioctl c0306201 200002c0 returned -22
[ 1417.822455][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:42 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009520000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000005)
ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000100)={0x0, @reserved})
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x4000000)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil)
shmctl$IPC_RMID(r1, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1417.883480][ T9831] binder: 9798:9831 ERROR: BC_REGISTER_LOOPER called without request
[ 1417.900900][ T9831] binder: 9798:9831 ioctl c0306201 20000540 returned -14
[ 1417.901382][ T9791] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:42 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6800000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1417.980324][ T9970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:42 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="69c2b52faf50af313dcba1f556d4109de3552dfc3d267d3d13f1ae7b54d75ea168a3a07c977de725288774b80c313e48fcd3d88cd8e1"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:42 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1418.022467][T10003] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000100)=0x4)
setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1418.082080][T10010] binder: 10007:10010 ERROR: BC_REGISTER_LOOPER called without request
15:54:42 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009530000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:42 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB="646f71756f74619592"])
accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80800)
setxattr$security_evm(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.evm\x00', &(0x7f0000000200)=@sha1={0x1, "02e37d52122e4ce3a220f209f261e59e20fb7eac"}, 0x15, 0x1)

[ 1418.141539][T10010] binder: 10007:10010 ioctl c0306201 20000540 returned -14
[ 1418.186406][T10016] binder: 10014:10016 unknown command -1795162112
[ 1418.195070][T10022] binder: 10013:10022 unknown command 800440937
[ 1418.225143][T10022] binder: 10013:10022 ioctl c0306201 20000540 returned -22
15:54:42 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

15:54:42 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x6c00000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1418.234444][T10016] binder: 10014:10016 ioctl c0306201 200002c0 returned -22
[ 1418.256730][T10029] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1418.288834][T10031] EXT4-fs (sda1): Unrecognized mount option "doquota•’" or missing value
15:54:42 executing program 1:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000001, 0x800)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fff, @loopback, 0x4}, {0xa, 0x4e21, 0x0, @ipv4={[], [], @local}, 0x1}, r1, 0x8001}}, 0x48)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x4, 0x4, 0xfd, 0x8000, '\x00', 0x1})
r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
accept4(r2, &(0x7f00000001c0)=@generic, &(0x7f0000000180)=0xfffffffffffffe27, 0x80000)
openat$cgroup_ro(r0, &(0x7f0000000100)='pids.events\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r2, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x4004550c, 0x0)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0xc2)
getresuid(&(0x7f0000000240)=<r3=>0x0, &(0x7f0000000280), &(0x7f00000002c0))
getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=<r4=>0x0)
fchown(r0, r3, r4)

15:54:42 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009540000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1418.340506][T10159] binder: 10097:10159 ERROR: BC_REGISTER_LOOPER called without request
[ 1418.364479][T10159] binder: 10097:10159 ioctl c0306201 20000540 returned -14
15:54:42 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:42 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x20041)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1418.404018][T10241] binder: 10097:10241 ERROR: BC_REGISTER_LOOPER called without request
[ 1418.470438][T10180] EXT4-fs (sda1): Unrecognized mount option "doquota•’" or missing value
[ 1418.486038][T10241] binder: 10097:10241 ioctl c0306201 20000540 returned -14
15:54:43 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x7400000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{}]})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0x1f1b10eb, 0x4)

15:54:43 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
fcntl$getflags(r0, 0x40b)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0xbb, 0x43, &(0x7f0000000200)="bd675e5dabd926638eac0c7228ac259131c5e0c60518cebefd18b652b522615bbeadf8c711378145af065b169c6ba15e1f444e9f124e9bbfb92679c798fc86b8160ac090175ca58917fad8ea4ac0f05d30c35825b106640b128a4a4cf5a9910d240fae1c002e09c159c660a58953abb0429d68d44b76b636d9fbf2eb5c5df42befdf2148d423ef0da131522cdbc31e3afe1c1df299080d2ed2109848eddbc3923987aec2fb017559c2fa28b33d77d1541240cc6e567155325681a4", &(0x7f00000002c0)=""/67, 0x9}, 0x28)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0x9, 0x4})

[ 1418.543399][T10253] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:43 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009550000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1418.608557][T10254] binder: 10249:10254 unknown command -1795162112
[ 1418.638714][T10254] binder: 10249:10254 ioctl c0306201 200002c0 returned -22
15:54:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
connect$llc(r0, &(0x7f0000000040)={0x1a, 0x5, 0x8275, 0x57, 0x3f, 0x7fffffff, @local}, 0x10)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
bind(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x4, 0x2, {0xa, 0x4e23, 0x100000001, @dev={0xfe, 0x80, [], 0x25}, 0xe5b}}}, 0x80)

[ 1418.660253][T10308] binder: 10273:10308 ioctl c0306201 20000540 returned -14
[ 1418.724421][T10433] binder: 10273:10433 ioctl c0306201 20000540 returned -14
[ 1418.728012][T10396] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:43 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x80086601, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:43 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x204040, 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000040)=""/66)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000180)={0x3, 0x4, [{0x56cac1f8, 0x0, 0x8001}, {0x0, 0x0, 0x4a8}, {0x2, 0x0, 0xffffffffffffffff}]})

15:54:43 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x7a00000000000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1418.772805][T10462] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:43 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009560000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:43 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000040)={0x1, 0x8})
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:54:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000040)={0xb6, 0x0, 0x0, 0x740000, 0xffff7fff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1418.933602][T10495] binder: 10492:10495 ioctl 80086601 20000540 returned -22
[ 1418.967240][T10501] binder: 10497:10501 ioctl c0306201 20000540 returned -14
[ 1418.981521][T10510] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:43 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x90000)
r2 = getpgrp(0xffffffffffffffff)
write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x23, 0x37, 0x2, {0x3, 0x3, 0x2, r2, 0x5, '{user'}}, 0x23)

15:54:43 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009570000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:43 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfdfdffff00000000, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:43 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000020001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x9, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)

[ 1419.129896][T10720] binder: 10719:10720 ioctl c0306201 20000540 returned -14
15:54:43 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x80087601, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:43 executing program 3:
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={<r0=>0x0, 0xf36}, &(0x7f0000000100)=0x8)
r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x101, 0x80042)
ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f0000000180)={0x27})
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={r0, 0x8}, 0x8)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000040)=ANY=[@ANYBLOB="6f6f71d3a430cbbf51b1db4f74002c00"])
mkdir(&(0x7f0000000280)='./file1\x00', 0x1)
r2 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r0, 0xffffffff}, 0x8)

[ 1419.224224][T10727] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1419.239797][T10750] binder: 10719:10750 ioctl c0306201 20000540 returned -14
15:54:43 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009580000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:43 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x2, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1419.293170][T10780] binder: 10754:10780 ioctl 80087601 20000540 returned -22
[ 1419.323123][T10780] binder: 10754:10780 unknown command -1795162112
15:54:43 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x60, 0x0, &(0x7f00000000c0)=[@clear_death={0x400c630f, 0x3, 0x4}, @exit_looper, @transaction_sg={0x40486311, {{0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x48, &(0x7f0000000000), &(0x7f0000000040)=[0x0, 0x38, 0x78, 0x48, 0x0, 0x0, 0x18, 0x58, 0x20]}, 0x3}}], 0x88, 0x0, &(0x7f0000000140)="bd0d431f2fced39c52856716f250cfd99beead17c09bb1cac050648de583b03363197d4b0934cffda852fd298c0f0c9346ed2405dc9ef5926a543fc6cf9d2c9f24e89b0198861bef38f2b05925bad324da810d273a491e18aee56b800ff5182d8cad98920c3acd508853c4f9652bb6ef8a1b676f98b969617e459fb1dd9f955962ae92b2d8d5482a"})

[ 1419.404098][T10780] binder: 10754:10780 ioctl c0306201 200002c0 returned -22
15:54:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'dummy0\x00', <r1=>0x0})
connect$packet(r0, &(0x7f0000000300)={0x11, 0x18, r1, 0x1, 0x2, 0x6, @dev={[], 0x18}}, 0x14)

15:54:44 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x3, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:44 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x2)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

[ 1419.453143][T10852] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1419.492498][T10856] binder: 10855:10856 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
15:54:44 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009590000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1419.578276][T10856] binder: 10855:10856 got transaction to invalid handle
15:54:44 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x4, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:44 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:44 executing program 1:
r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x1000000000000001)
ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe})
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4004550c, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000040)={0xad, 0x8001})

[ 1419.656949][T10856] binder: 10855:10856 transaction failed 29201/-22, size 0-72 line 2995
15:54:44 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00095a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:44 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x4020940d, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:44 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x5, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:44 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00'])
ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xb)

15:54:44 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0xffffffffffffffa6, 0x0, &(0x7f0000000040)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1419.884347][T11030] binder: 11011:11030 unknown command -1795162112
15:54:44 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00095b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1419.942775][T11030] binder: 11011:11030 ioctl c0306201 200002c0 returned -22
15:54:44 executing program 1:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009540000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1420.006784][T11115] binder: 11106:11115 ioctl c0306201 0 returned -14
15:54:44 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:44 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0045878, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:44 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00095c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:44 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:44 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
r1 = gettid()
getresuid(&(0x7f0000000600)=<r2=>0x0, &(0x7f0000000640), &(0x7f0000000680))
getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=<r3=>0x0)
r4 = fcntl$getown(r0, 0x9)
lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={<r7=>0xffffffffffffffff, r0, 0x0, 0x7, &(0x7f0000000900)='noquota'}, 0x30)
stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a40)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000a80)=0xc)
sendmsg$unix(r0, &(0x7f0000000bc0)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000200)="079c4dc5e96d423504b91a3c1749663254d3d08e12da13e8072c5b90f3ca485c5aa72f3018c982269af4685f5e730d005fe452cde8a760a171e5392ae741809e14bf9a25b709a66c9934cb49ecb5fb3cdb697f44c64ca0c96efe5fa3", 0x5c}, {&(0x7f0000000280)="c48ff5a448b753551cbf869ea1b3b5bb476f623f12fe7d004c4c6b3f84471da9f3a02cda4ce8c44593c0b26d0644cd0d8baf675bc29995f77547c94030104e97e086012e16b5aa3106ab38dac0e21234afceb0e9b82b51a2c9f7f38fa20bdc728c6088408cc4e693d77eaaa9c9c534f7272ec87888b5aa80f958feb9ed4265848f18d297eb06779778e2c8a9599a16b603cfff03f83e6307c15280ddda5f35a575710ca0417205f4a4ba8140f161c6b54ad79c2d39696eff136d0baa4ab5184ad4587e5a0063d8b89117d630090a316be69dd6cd746ef2d037de7d05a055df", 0xdf}, {&(0x7f0000000380)="fb844a1dd7eb38b17097ae2f9de434ebc0ad7aa1add4f3e7c9ffab7153ea8e499c7a76da5c419dd81b4f09f84ef7250e21ed724c328271787c939e90f29a3478d426f95e5cd35315efaf2b0e3d302012741015bd9eecb5e9e2f66644194a195e1a0743d4b5f683ad3e9f3fde0ffec77eb6eac36eb8b364ee2a8b34bd7c88d0", 0x7f}, {&(0x7f0000000040)="20097142f76c10984e2bb92eff545dd64518312d7eac8868bec04724ce6b94bb8368301960f0c71eab545f93600c", 0x2e}, {&(0x7f0000000180)="0982d7835ef919ae693a364aec5921944141fa54c6a1df09094d2c596b871a51fb4e90b3f127524af8aad334ee3c62c9183174d1f197", 0x36}, {&(0x7f0000000400)}, {&(0x7f0000000440)="d23b77a3c5cc22384d95acb3858652a8ee949fd7b9351c9dd7400be5338a851021501857e940eed2545f", 0x2a}, {&(0x7f0000000480)="2ef9ecd1398696e7e4e3d8ad010616f5d8863e621a2a8c50ed4549c934ab43d341ab51cc3e51063cce581c65e1dcf2119ef3f918cba10fa1bffd44384f1a966c8fdc45dfac9ac71e630b86eab52be21b40552682de5ecd90747f65820ce19bcebdd48ebd23fea217c3d573ea8ccc3fea79", 0x71}, {&(0x7f0000000500)="1dbb2d9d0abe8f63ac95e06bd5adcf2b2fa9bf095dc4ed30198fad8bcdd2d436c65754195fa6612931f82efaec3f19613b3f", 0x32}], 0x9, &(0x7f0000000ac0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0xe8}, 0x20048000)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:54:44 executing program 2:
r0 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="29ebd99978bcd9817772bf61663c9adc84facd8bdf942cde4a16b5e26b075fc921f2175713aa195df58140411c05a533aba6a487e0cd90ce64e9d45d7ade9df80eb6036f34c798dc3c3f0609b14c86c82558e676189609069fa703", 0x5b, 0xfffffffffffffffa)
request_key(0x0, 0x0, 0x0, r0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:44 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00095d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1420.233511][T11321] binder: 11320:11321 unknown command -1795162112
[ 1420.250645][T11321] binder: 11320:11321 ioctl c0306201 200002c0 returned -22
15:54:44 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x7, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:44 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:44 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00095e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:45 executing program 3:
r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x200)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={<r1=>0x0, 0x9, 0xffffffff, 0x1}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={r1, 0x54, "382ad1125880d116daeac5e2e2afaa964ad499344df07e2b5d3184ad3dcc59171a89715dd37f12d7a31e9bf5bf443b44675df613aecf2680d4c6d6e731ee3e0a2b0a10e2539fc970d63ef8b4becf4cfead92959f"}, &(0x7f0000000180)=0x5c)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:54:45 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0046209, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:45 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040))
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:45 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xa, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:45 executing program 1:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:45 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00095f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:45 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x3, 0xfffffffffffffd7f, 0x0, 0x820, &(0x7f0000000140))

[ 1420.594457][T11556] binder: 11555:11556 unknown command -1795162112
15:54:45 executing program 1 (fault-call:12 fault-nth:0):
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[ 1420.665592][T11556] binder: 11555:11556 ioctl c0306201 200002c0 returned -22
15:54:45 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x48, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:45 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc018620b, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:45 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009600000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:45 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f71756f742d3e95"])
execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000340)=[&(0x7f00000000c0)='[{$-\x00', &(0x7f0000000100)='noquota', &(0x7f0000000180)='noquota', &(0x7f0000000200)='noquota', &(0x7f0000000240)='noquota', &(0x7f0000000280)='noquota', &(0x7f00000002c0)='self}eth1\x90mime_type[\x00', &(0x7f0000000300)='.nodev@{@systemvboxnet1ppp0\x00'], &(0x7f0000000480)=[&(0x7f0000000380)='noquota', &(0x7f00000003c0)='noquota', &(0x7f0000000400)='noquota', &(0x7f0000000440)='*posix_acl_access\x00'])

15:54:45 executing program 2:
add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, 0x0)
add_key(&(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600)="a29e3b61b84ccb4cbba6d05d2f8e3919b0c247c03abe3647e042", 0x1a, 0xfffffffffffffffe)
add_key(&(0x7f0000000640)='encrypted\x00', &(0x7f0000000680)={'syz', 0x3}, &(0x7f00000006c0)="5f9d6746d28f604e7c1b42f504b89c953dfdeb8553e9ff47ee7669f0e284940289ac63658ad553f011ccfc2f413a26358d7c7a7b4ea09d9603ce408a98b347e6fae0e7f938ef5fe59e4171056fd0ad2e2d467281b0b53e785ed9c43077bdc6ec45a327ff2b2973a6", 0x68, 0xfffffffffffffffd)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0xc0140, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x0, 'syz1\x00', @bcast, 0x80000001, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]})
r1 = add_key$keyring(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
request_key(0x0, 0x0, 0x0, r1)
r2 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x800)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/snapshot\x00', 0x100, 0x0)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000800)=0x10000, 0x4)
r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2)
getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000300), &(0x7f0000000340)=0x4)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000040)={<r5=>0x0, 0x80, 0x0, 0x2, 0x58, 0x3f, 0xffffffff, 0xffffffff00000000, {<r6=>0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}, 0xcd3, 0xae1, 0x1, 0x2, 0x4}}, &(0x7f0000000100)=0xb0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000440)={r6, 0x0, 0x5, 0x5}, &(0x7f0000000840)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={r5, 0x7}, &(0x7f0000000180)=0x8)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000008c0)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x78, r7, 0x102, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1efd}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3200000}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x10)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000001c0)=0x8, 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:45 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

15:54:45 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009610000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:45 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x4c, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1420.976122][T11790] encrypted_key: insufficient parameters specified
[ 1421.001787][T11790] binder: 11788:11790 unknown command 7
[ 1421.023538][T11790] binder: 11788:11790 ioctl c0306201 20000540 returned -22
15:54:45 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009620000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:45 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB="0a6f710363cb687dfd"])

15:54:45 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000100)=[@transaction={0x40406300, {0x1, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000040), 0x0, 0x2, 0x3e}], &(0x7f00000000c0)=[0x78, 0x30, 0x0, 0x40, 0x38, 0x30]}}], 0x335, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r1 = creat(&(0x7f0000000180)='./file0\x00', 0x40)
ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f00000001c0))

15:54:45 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009630000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:45 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x60, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1421.274745][T11913] binder: 11910:11913 got transaction to invalid handle
[ 1421.322969][T11913] binder: 11910:11913 transaction failed 29201/-22, size 0-0 line 2995
15:54:45 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1421.365029][T11913] binder: 11910:11913 ioctl c0306201 20000000 returned -14
15:54:45 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x68, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:46 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009640000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:46 executing program 3:
fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.redirect\x00', &(0x7f0000000200)=""/240, 0xf0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x4, 0x489e3252, 0x1, 0x7ff, 0x1b, 0xa240, 0x8, 0x3, 0x61800000000, 0x0, 0x1})
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x10100a, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

[ 1421.541308][T11998] binder: 11980 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero.
[ 1421.541364][T11998] binder: 11980:11998 ioctl c018620c 20000540 returned -22
[ 1421.587222][T12032] EXT4-fs: 7 callbacks suppressed
[ 1421.587249][T12032] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1421.592791][T18061] binder: undelivered TRANSACTION_ERROR: 29201
15:54:48 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x2, 0x0)

15:54:48 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4, 0x40001)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000000c0)={0x0, 0x2, 0x4, 0x0, {r2, r3/1000+30000}, {0x0, 0xf, 0x8001, 0x2, 0x5, 0x1ff, "88cbc1b1"}, 0x0, 0x2, @planes=&(0x7f0000000080)={0x0, 0xfff, @userptr, 0x20}, 0x4})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

15:54:48 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009650000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:48 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6c, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:48 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000200)={0x7, 0xe, 0x35, "8f0869a5ab2cec84c89393106c8dbc4db258549851dce37db1e05f062696f0fec693737b28f617a9b05c41122e96239b02eed37cefada4cb39d6c9e0", 0x29, "20645106b1fd42c1709772621e2d4f45d1366b6520e2dd96f6c2e662931a7856225bcee6c5993fa2e3bac0676485356cb1e2f536765b4f0477f4361b"})
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:54:48 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0189436, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1423.942386][T12149] binder_thread_write: 33 callbacks suppressed
[ 1423.942396][T12149] binder: 12148:12149 ERROR: BC_REGISTER_LOOPER called without request
[ 1423.952619][T12155] binder: 12154:12155 ERROR: BC_REGISTER_LOOPER called without request
[ 1423.975436][T12157] __nla_parse: 13 callbacks suppressed
[ 1423.975447][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1423.976187][T12150] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1424.005730][T12158] binder: 12154:12158 ERROR: BC_REGISTER_LOOPER called without request
[ 1424.020136][T12153] binder: 12151:12153 unknown command -1795162112
15:54:48 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009660000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:48 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x74, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1424.042743][T12153] binder: 12151:12153 ioctl c0306201 200002c0 returned -22
[ 1424.093368][T12284] binder: 12280:12284 ERROR: BC_REGISTER_LOOPER called without request
[ 1424.124199][T12312] binder: 12280:12312 ERROR: BC_REGISTER_LOOPER called without request
15:54:48 executing program 2:
add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000940)="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", 0x1000, 0xfffffffffffffffb)
add_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000180)='cifs.idmap\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='$selinux@+$uservboxnet1\']\x00', 0xfffffffffffffff8)
r0 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="01d3d33342cad2949052e42462bd4a617d1f7a0b1573f6ea24f2eadc51e72749910c1119852525e103f59fd6cd055ed025581c24e6fffda0b41e5719f32d0a800eb11027a06244450cc63ca22e1d8408f96c09fbfd62e0b333e5af4bb02744493c2c3678400ba50da4df25b54a435da4", 0x70, 0xfffffffffffffffd)
request_key(0x0, 0x0, 0x0, r0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x0, 0x0})
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1424.142643][T12299] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1424.143297][T12314] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:48 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x7a, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:48 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc020660b, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:48 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009670000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1424.228929][T12377] binder: 12376:12377 unknown command 0
[ 1424.296481][T12377] binder: 12376:12377 ioctl c0306201 20000540 returned -22
[ 1424.349011][T12427] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1424.359743][T12429] binder: 12425:12429 ERROR: BC_REGISTER_LOOPER called without request
[ 1424.369800][T12411] binder: 12397:12411 unknown command -1795162112
[ 1424.378096][T12411] binder: 12397:12411 ioctl c0306201 200002c0 returned -22
[ 1424.392274][T12491] binder: 12425:12491 ERROR: BC_REGISTER_LOOPER called without request
15:54:51 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x4000, 0x0)

15:54:51 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB='n\x00\x00\x00\x00\x00\x00\x00\b'])

15:54:51 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009680000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:51 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x8000, &(0x7f00000000c0)=0x4)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x10)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

15:54:51 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x300, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:51 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x3f00, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1427.035831][T12595] binder: 12594:12595 ERROR: BC_REGISTER_LOOPER called without request
[ 1427.040859][T12593] EXT4-fs (sda1): Unrecognized mount option "n" or missing value
[ 1427.047664][T12601] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1427.058849][T12602] binder: 12598:12602 unknown command -1795162112
[ 1427.073920][T12602] binder: 12598:12602 ioctl c0306201 200002c0 returned -22
15:54:51 executing program 2:
request_key(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2be36ca8bb"], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)

[ 1427.093281][T12605] binder: 12594:12605 ERROR: BC_REGISTER_LOOPER called without request
15:54:51 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x500, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:51 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009690000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:51 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x60ff, 0x0)

[ 1427.186086][T12659] EXT4-fs (sda1): Unrecognized mount option "n" or missing value
15:54:51 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x1000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1427.252673][T12705] binder: 12699:12705 unknown command -1469258965
[ 1427.272804][T12705] binder: 12699:12705 ioctl c0306201 20000540 returned -22
[ 1427.288072][T12724] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:51 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="28e3a3fcd5f29d8121646cfa3bbc666366", 0x11}, {&(0x7f00000000c0)="17146f418eecbc635a497aceb665ff408d1709ff23e24b3090", 0x19}, {&(0x7f0000000100)="b2aa42a9d4938ea0293eb6c58ebb1dc2becb09bf24af2ad194b5cb731d01f891fb0fb8fe4cca1e68d976e94758362a63be8a8970b3", 0x35}], 0x3)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000200))

15:54:51 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00096a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1427.320673][T12732] binder: 12725:12732 ERROR: BC_REGISTER_LOOPER called without request
15:54:52 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x600, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1427.438112][T12834] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:52 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB="0a6f710363cb687dfd"])

[ 1427.484242][T12837] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1427.496052][T12832] binder: 12808:12832 unknown command -1795162112
[ 1427.513151][T12832] binder: 12808:12832 ioctl c0306201 200002c0 returned -22
15:54:52 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4000000)
init_module(&(0x7f0000000040)='noquota', 0x7, &(0x7f00000000c0)='noquota')
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000280)={@mcast2, r1}, 0x372)
sendmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f0000000300)=@canfd={{0x1, 0x5, 0x4, 0x11}, 0x13, 0x2, 0x0, 0x0, "e09fc42053430549f70269bdbb29b1f24e79ed95e91cbc8b3bb941b565933a0e691d436451850cdb3be2b7214674d12f027e0589f26ef9e9ed06a0bdebaff85a"}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:54:52 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x700, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:52 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00096b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:52 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xa00, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1427.662944][T12954] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:52 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
getsockopt$inet6_int(r0, 0x29, 0xce, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:54:52 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x3f000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1427.882889][T12966] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1427.883883][T12971] binder: 12968:12971 unknown command -1795162112
[ 1427.906235][T12971] binder: 12968:12971 ioctl c0306201 200002c0 returned -22
15:54:54 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00096c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:54 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB="0a6f710363cb687dfd"])

15:54:54 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x7400, 0x0)

15:54:54 executing program 3:
creat(&(0x7f0000000040)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:54:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x2000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:54 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0xfdfdffff, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1430.274303][T13078] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1430.292918][T13082] binder: 13079:13082 unknown command -1795162112
[ 1430.311337][T13085] binder_thread_write: 5 callbacks suppressed
[ 1430.311348][T13085] binder: 13081:13085 ERROR: BC_REGISTER_LOOPER called without request
[ 1430.313886][T13082] binder: 13079:13082 ioctl c0306201 200002c0 returned -22
[ 1430.330519][T13089] binder: 13081:13089 ERROR: BC_REGISTER_LOOPER called without request
15:54:54 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x3f00, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:54 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00096d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1430.373549][T13084] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:54 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB="0a6f710363cb687dfd"])

[ 1430.445635][T13134] binder: 13132:13134 ERROR: BC_REGISTER_LOOPER called without request
[ 1430.485352][T13197] binder: 13132:13197 ERROR: BC_REGISTER_LOOPER called without request
15:54:55 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0xfffffdfd, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x4800, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:55 executing program 3:
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=<r0=>0x0)
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x0, 0x0)
connect$bt_rfcomm(r1, &(0x7f0000000280)={0x1f, {0x6, 0x80, 0x2, 0x1000, 0x100000001}, 0x6}, 0xa)
r2 = syz_open_procfs(r0, &(0x7f0000000280))
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000180)={0x8, 0x7ff, 0x43, &(0x7f00000000c0)="51926f08c3f475e6095faf18a9f910a155fda49e23264b099b1f36edae99517ad383913715b33396ea03472ae0b75070c0643801d589bbc2596feafb75295255b74795"})
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0xffffffffffffffd7, 0x0, 0x81c, &(0x7f0000000140)=ANY=[@ANYRES64=r0])
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000040)=0x2)

[ 1430.530477][T13189] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1430.537955][T13209] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:55 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00096e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1430.604574][T13211] binder: 13210:13211 ERROR: BC_REGISTER_LOOPER called without request
[ 1430.616207][T13212] binder: 13210:13212 ERROR: BC_REGISTER_LOOPER called without request
15:54:55 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x4c00, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1430.668966][T13216] binder: 13215:13216 unknown command -1795162112
[ 1430.694467][T13221] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1430.704183][T13216] binder: 13215:13216 ioctl c0306201 200002c0 returned -22
[ 1430.792032][T13241] binder: 13222:13241 ERROR: BC_REGISTER_LOOPER called without request
[ 1430.838496][T13315] binder: 13222:13315 ERROR: BC_REGISTER_LOOPER called without request
15:54:57 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00096f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:57 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)

15:54:57 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x9400, 0x0)

15:54:57 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x47)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000200)="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")

15:54:57 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:57 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x100000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1433.367633][T13337] binder: 13336:13337 ERROR: BC_REGISTER_LOOPER called without request
[ 1433.391420][T13335] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1433.395702][T13338] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:58 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009700000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:54:58 executing program 2:
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)

[ 1433.419498][T13344] binder: 13336:13344 ERROR: BC_REGISTER_LOOPER called without request
[ 1433.431292][T13341] binder: 13333:13341 unknown command -1795162112
[ 1433.442386][T13341] binder: 13333:13341 ioctl c0306201 200002c0 returned -22
15:54:58 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6800, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1433.492411][T13351] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:54:58 executing program 2:
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)

15:54:58 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)
socket$kcm(0x29, 0x0, 0x0)
accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

[ 1433.557599][T13410] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:54:58 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6c00, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:54:58 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x3f00000000000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:54:58 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009710000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1433.776015][T13468] binder: 13467:13468 unknown command -1795162112
[ 1433.784246][T13478] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1433.819518][T13468] binder: 13467:13468 ioctl c0306201 200002c0 returned -22
[ 1433.840929][T13479] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1434.019542][T13588] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:55:00 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x400000, 0x0)

15:55:00 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x7400, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:00 executing program 2:
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)

15:55:00 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009720000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:00 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0xfdfdffff00000000, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:00 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xc0, &(0x7f00000002c0)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x8352, 0x6}, 0x0, 0x0, &(0x7f0000000200)={0x9, 0x947f, 0x9de7, 0x6}, &(0x7f0000000240)=0x400, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x100000000}}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)=r1, 0x4)
r2 = semget$private(0x0, 0x7, 0x80)
semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000040)=""/17)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB='nkquota,\x00'])
setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4)

[ 1436.437149][T13597] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1436.458514][T13598] binder: 13595:13598 unknown command -1795162112
[ 1436.471005][T13602] binder_thread_write: 4 callbacks suppressed
[ 1436.471016][T13602] binder: 13600:13602 ERROR: BC_REGISTER_LOOPER called without request
15:55:01 executing program 2:
creat(0x0, 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)

[ 1436.487683][T13598] binder: 13595:13598 ioctl c0306201 200002c0 returned -22
15:55:01 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000200)=""/177)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/133, 0x85)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000040)=0x7fff, 0x4)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f00000002c0)=ANY=[@ANYBLOB="6ea96f71750cb833ad68f8379094558eba6048e0094a8b010074612c00f07f86b826ba2c0c2427c861458f365a6cc00bd5d23161c668bccf4b903223ae3859091008e9295f854fd12ef0ee94479314532f1907ebb899109da0a96b10acf214462043ea73455ac2e669fd7ab21dc283d0a538000336734fc387f19abbf2380b1d29c45949056871160314c461de9a82a445b72122bb3fb2974a1441e01bd32810ed331a5486624af24de53c672a41772d"])

15:55:01 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x507100, 0x0)

15:55:01 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009730000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1436.539756][T13619] binder: 13600:13619 ERROR: BC_REGISTER_LOOPER called without request
15:55:01 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x7a00, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1436.625495][T13646] EXT4-fs (sda1): Unrecognized mount option "n©oqu¸3­hø7�”UŽº`Hà	J‹
" or missing value
15:55:01 executing program 2:
creat(0x0, 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)

15:55:01 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009740000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:01 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x630c}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1436.688768][T13724] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1436.753270][T13727] binder: 13726:13727 ERROR: BC_REGISTER_LOOPER called without request
15:55:01 executing program 2:
creat(0x0, 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1002000, 0x0)

[ 1436.824212][T13737] binder: 13726:13737 ERROR: BC_REGISTER_LOOPER called without request
[ 1436.833021][T13736] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:01 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x1000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:01 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0xffd, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:55:01 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009750000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1436.934399][T13738] binder: 13735:13738 unknown command -1795162112
[ 1436.965511][T13745] binder: 13744:13745 ERROR: BC_REGISTER_LOOPER called without request
15:55:01 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, 0x0, 0x0, 0x1002000, 0x0)

[ 1436.978686][T13738] binder: 13735:13738 ioctl c0306201 200002c0 returned -22
[ 1436.986827][T13747] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1437.012761][T13773] binder: 13744:13773 ERROR: BC_REGISTER_LOOPER called without request
15:55:01 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x2000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1437.141169][T13859] binder: 13858:13859 ERROR: BC_REGISTER_LOOPER called without request
[ 1437.174351][T13860] binder: 13858:13860 ERROR: BC_REGISTER_LOOPER called without request
15:55:04 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x50d000, 0x0)

15:55:04 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x630d}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:04 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009760000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:04 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, 0x0, 0x0, 0x1002000, 0x0)

15:55:04 executing program 3:
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}]})

15:55:04 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x3000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1439.650238][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1439.653790][T13874] binder: 13872:13874 unknown command -1795162112
[ 1439.667832][T13876] binder: 13870:13876 ERROR: BC_REGISTER_LOOPER called without request
[ 1439.685949][T13874] binder: 13872:13874 ioctl c0306201 200002c0 returned -22
15:55:04 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, 0x0, 0x0, 0x1002000, 0x0)

15:55:04 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009770000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1439.695997][T13875] EXT4-fs (sda1): re-mounted. Opts: inode_readahead_blks=0x0000000000000800,
15:55:04 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x4000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1439.768177][T13960] binder: 13955:13960 ERROR: BC_REGISTER_LOOPER called without request
15:55:04 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x6312}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:04 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x5000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1439.823200][T13976] EXT4-fs (sda1): re-mounted. Opts: inode_readahead_blks=0x0000000000000800,
[ 1439.842290][T13990] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:04 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)

[ 1440.046775][T14009] binder: 14005:14009 unknown command 25362
[ 1440.061474][T14009] binder: 14005:14009 ioctl c0306201 20000540 returned -22
[ 1440.077513][T14009] binder: 14005:14009 unknown command -1795162112
[ 1440.085580][T14009] binder: 14005:14009 ioctl c0306201 200002c0 returned -22
15:55:07 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x70c000, 0x0)

15:55:07 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009780000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:07 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB='n\x00\x00\x00'])

15:55:07 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:07 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)

15:55:07 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40046302}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1442.709223][T14122] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1442.710371][T14120] binder_thread_write: 3 callbacks suppressed
[ 1442.710381][T14120] binder: 14118:14120 ERROR: BC_REGISTER_LOOPER called without request
[ 1442.719297][T14119] binder: BC_ACQUIRE_RESULT not supported
[ 1442.745979][T14131] binder: 14118:14131 ERROR: BC_REGISTER_LOOPER called without request
15:55:07 executing program 2:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)

[ 1442.756792][T14121] EXT4-fs (sda1): Unrecognized mount option "n" or missing value
[ 1442.774187][T14119] binder: 14117:14119 ioctl c0306201 20000540 returned -22
15:55:07 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009790000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:07 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x7000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1442.867132][T14183] EXT4-fs (sda1): Unrecognized mount option "n" or missing value
15:55:07 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="161cf86023ad", 0x0, 0x56ce, 0x10002, 0x3, &(0x7f0000000040)})

[ 1442.910316][T14208] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1442.932441][T14229] binder: 14227:14229 ERROR: BC_REGISTER_LOOPER called without request
[ 1442.947941][T14244] binder: 14227:14244 ERROR: BC_REGISTER_LOOPER called without request
15:55:07 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40046304}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:07 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00097a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1443.094730][T14254] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1443.109402][T14251] binder: 14250:14251 IncRefs 0 refcount change on invalid ref 0 ret -22
[ 1443.130054][T14251] binder: 14250:14251 unknown command -1795162112
[ 1443.147849][T14251] binder: 14250:14251 ioctl c0306201 200002c0 returned -22
15:55:10 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x715000, 0x0)

15:55:10 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
ioctl$TIOCCONS(r0, 0x541d)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000240)=ANY=[@ANYBLOB="a77f732e0900057f25558b3e641aa0a8be5c1b23e61f5effd1d751fe190fdbb76685b40d7bc20a195ada768462dbac046f38b94b64487d14c34986f855dfe26f7611ba6a4a5ad0927cc0d8313b14b0f784e5888f41327dd1e55a7bf73e363037576bc0575e9f3c957acba4be1576137a6956cd640d3583a866daead0c19f6b97cd70175e5da205a6fbb210e893463358f6d17783c6ba015dc2df13dabb6a72cca9e4732bd617ba72f91dd31eb70473932f110ea46cfe36719686e0e88f03fa12258be64bfc86818c0bdb671f942e35e24be02781a01b22a3ccafaade9fff12a1"])

15:55:10 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xa000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:10 executing program 2:
setuid(0xee01)
msgget(0x2, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0)
r0 = semget$private(0x0, 0x7, 0x400)
semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)=[0x1, 0x10001])

15:55:10 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00097b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:10 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40046307}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1445.754562][T14359] binder: 14358:14359 ERROR: BC_REGISTER_LOOPER called without request
[ 1445.771321][T14364] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1445.780800][T14363] binder: 14361:14363 DecRefs 0 refcount change on invalid ref 0 ret -22
[ 1445.803793][T14363] binder: 14361:14363 unknown command -1795162112
[ 1445.808792][T14397] binder: 14358:14397 ERROR: BC_REGISTER_LOOPER called without request
[ 1445.815020][T14363] binder: 14361:14363 ioctl c0306201 200002c0 returned -22
[ 1445.838775][T14365] EXT4-fs (sda1): Unrecognized mount option "§s.	" or missing value
15:55:10 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x20000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:10 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00097c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:10 executing program 2:
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c00)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='+'], 0x1)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
write$cgroup_int(r3, &(0x7f0000000000), 0x100000029)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)

15:55:10 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00097d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1445.935446][T14575] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1445.950935][T14588] binder: 14584:14588 ERROR: BC_REGISTER_LOOPER called without request
15:55:10 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40086303}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:10 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffd, 0xffffffffffffffdd, 0x0, 0x824, &(0x7f0000000380)={[{@noquota='noquota'}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@obj_role={'obj_role'}}, {@subj_user={'subj_user', 0x3d, '!'}}, {@uid_gt={'uid>', r1}}, {@obj_user={'obj_user'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'noquota'}}]})

[ 1446.062020][T14601] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1446.093501][T14603] binder: 14602:14603 BC_FREE_BUFFER u0000000000000000 no match
[ 1446.112253][T14603] binder: 14602:14603 unknown command -1795162112
[ 1446.125332][T14603] binder: 14602:14603 ioctl c0306201 200002c0 returned -22
15:55:13 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x740000, 0x0)

15:55:13 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x3f000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:13 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000cc0), &(0x7f0000001380)=0x4)
socket$nl_crypto(0x10, 0x3, 0x15)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB])
sendmmsg$alg(r0, &(0x7f0000001240)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="375afc6ea15b4a2bb552cc8d57033d88176e5c848e2e851aa342e2159c820a8c1470291927c0d6a9bd9c52d5d2b5e551d677fc27dd08860bcd33be4750bc68c1f4272f85e35da2cb81a927e9e712f8b76a75027dd534d6fe8fff11c7f73d26b685d6e5297c18e7cf290463063330e2733cf6d5fb196bc4f08dff0a132a9985cfea76b51c4c11f38c4aea800dd2e85a3dde242d47ac63a7fac99dfd82b1decf27382d617a93b7ca9463c1b18ef09082875d1ebe5b6721a75afdac62bedff95e2d197b2d78f3430ce7ca2c4603557a88", 0xcf}, {&(0x7f0000000040)="54b5e1b50b3330701be5585a4f6b028a3d846901a743d548cfa25f32401ecf472e3f7c423f18", 0x26}, {&(0x7f0000000200)="df78ad6877e28e313eb1ff8d63d1b0e098e7b824969adb1911", 0x19}], 0x3, &(0x7f0000000280)=[@iv={0x98, 0x117, 0x2, 0x83, "b7dac3daaca462013f1d24f9c5528abaa03fb8a128063e2559bd605a18cc7a35201890d412a831e952b89150d42fef405f945e0b2e61dec846e68a56f1d2ddcf4d93e81e848f3e4b5d9180cf46fb89754b0e4d78ca3191ecf6795246e457647fc08a2155d3af23e7d475fb2c0c2d8af543ea43bbe1259294491c45183578e0018ab0b5"}, @op={0x18, 0x117, 0x3, 0x1}], 0xb0, 0x90}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)="17a4841d0bc86828c1a8dce26bebf4beae1cc9ed45cedcea3a52813c0800dfae0f60462851517b63310fb2e1977469d2489ea92edc35eab55c0b7bb3151c7b8fc11b4e86dac4d76d1224a76d04c5bdbd5f3ad39fc693af3e19e4d0571bacb43ed4ef92a642729a933344069c594450077428d465ede12218a9ad8c84029293156a93b0e9918c5e54f1bd53b7e2bf02ed5ab19703438deb05f4b97d56187a4fb0215c25e23164210f9db6c5c72a88da237ada66bcdb36e741d481a625a95da49625a69bfe9ad0ebc006e9e93e6c8be7905805dea2bb061d3928efa2f4b754933f06a6a926200eb27d81", 0xe9}, {&(0x7f0000000440)="483c94a6ab7cd64dc11a2c79e8e4b62107ea71c3ae0c4feb206b8b023390a1582d893e990fce295b023445811091d1e146711e25a12258bfc241e748af2adf80471b2a7833df4bbdde6e9e8d56bd599d61a546512c857ccd5b24e14d5c57d519", 0x60}, {&(0x7f00000004c0)="5a5fe8547be754578f37a687691e93b54e3fe698f25e21fad0e573e17dbad98cad9c01080ed4bb66dda01a0f32e25c9acb8f5c72fabaa2c3d724dcdefca0e7eaed65d6963b2716f65ffb35939c86841e342e7980df31820a2d450cfd696ff8f3fc18983fb3146f16219d008875a8c36f9247107541d6ed1b9c17870329dc84207f43ca099c3eb7f4e5865974a4dfab4489b95f4403fb79677852f469d714d0e46851afd79378d89f0352b0271bbfdd9ba0d50c5b9e94a8a4836abbc2866f9bd28f473d4a9b49b2ec5a492f1917", 0xcd}, {&(0x7f00000005c0)="b663416016517b868b6567f551a2d09274f950463f94383c1455dcb4d5c4315ee65a5971df06fab3b7c2ce9e5a27125a9b36a2a26a842981735fb573975f0b81e5fee3065f444f7d19371489f3551352646a08d3ddc03b0c352366b0e97d99879c0ee32a5a5f501e98ed53fca7a74c2ee269398b4e30a4571fe3a08ff3181b77ac09b35c70ffff830883a3a2986144417d6f01184773e0c12311156418162337c7ebab3f8125ae034965a39ce1baf9cae4bb1c766323f806c449a30b05bc70998b13f4b49a299c0ce5a3d9105664e1999e3a51628791e6", 0xd7}, {&(0x7f00000006c0)="cf4a8252648006c5769208f89ae73cb9177851a39a01157a3bc936d47bea780410e06ce41432f835e23ce46b3572f244336d", 0x32}, {&(0x7f0000000700)="cb30bc42e41b1c6fb5ae7b085caca5360f991ba276664e47b5bd4b303dfd1158d8096230a733fa33749c9c79f0a64598d509a7868ec3d6102cb403010ea0219da591b3283e089489d08daa09f5d0647438f387c2c8961ea883bb5f03e7f705a811bb7b59a008c8fedd755546f05e4cee9d5b68e607e67212f1b477b8b93f8ce575d6955d2e43c5568ebbaf0b", 0x8c}, {&(0x7f00000007c0)="1792806407f376686db1a697f3931ef1a2d1d4c9f4b9143c8b8ca46374d67f3d54c55a412d163005e6d02aa0", 0x2c}], 0x7, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)="2fdbb01ffc071b367697da8216c717bb30930a9b14c4683039ba7b4561989e0429a6780ebb853d418d2014132d4826f07d9f24ef1702000839bdf0059375c23f7f7a9c5f1bf84bb8d84c31e715858f0146df9484e707a3e5e0707d8a9e6149f336ee3fed4a076d734bfddbacf9ad16bece3bdc9eb6df575e005f4118281d47f221d875c26b75e31d19b2dbf95408d2133f8f831b1536f5a05a98a0f7e83143cd025cce5bbcd89814d8", 0xa9}, {&(0x7f0000000940)="8e6b14ed39a6037cb5a044f4a11870a789d4fe0a518b0ff485516aea50194b0dca74b99bbd7392436fc6cf38fe61d47e7cfc8938e5b4b275a3d40d47dd10b7793edfb7f34e19645b237af7601b7dcb6c372e93cc7c47d45d06b4cb301cb8c7645367b1", 0x63}], 0x2, &(0x7f0000000a00)=[@iv={0x40, 0x117, 0x2, 0x27, "80abbdced8db1c0086c83002a373ccbf26dacd484fddb20d4d44de854f557c582128d923471adf"}], 0x40, 0x40}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a40)="b461a60c0df62d8991a76976daa817a845bed25c0f3c2dca8650d6f188d7c613e01ad7ee6733d5fd9063", 0x2a}, {&(0x7f0000000a80)="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", 0xfc}, {&(0x7f0000000b80)="859373dbd749", 0x6}, {&(0x7f0000000bc0)="e27937962f670181743d44ac6846ac07d902c524e96466801992cfc817c329f4bbea07e9d39d80fe73ec29e00067819dd4a3542cb8129197c3e0e6406d761fc2ca8b6c12daf60ba8733eee8c867b54d3ec96fdaf84ae69f8fdd290576fb01994ddfed863f7237c6543e906b28ca76c2a656a0bf97191dc88276c1299c6bb2a5da95abe3eb4d2c2ae9e5e180ec916b0a16846473549a772fe0093cde2166e62002e0ef53dc5a96625", 0xa8}], 0x4, 0x0, 0x0, 0x4004045}, {0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000cc0)}, {&(0x7f0000000d00)="6c6b269d727059e0b4f9809ef77da3b4308e3dca9118571efe5b181cb17c24ccd30ecc0592c2a2b68c1d2085a6fe7f60f0f439b16ac82ebfef955c1ec421d006c0ca5ace0eaaf95f3202b216936086948685da0ded51d6f09565d44269f421b9f9ae8986b707184346316e24d01f22457bae534a7729161c32", 0x79}, {&(0x7f0000000d80)="77bdcb9f2aa403aa9b695dd7c001185bdd5398c71bd0eab5f239319a69f2ab6c40436bc859719865a30cafc3ea4b46a67bfe08510f36637afa09732b9eb65bdd4a28680d941d4528c038875f36a4d818082b2b5aebc2136e0713522277", 0x5d}, {&(0x7f0000000e00)="289aa66ab437d006c8a6d878ab1ffb4b0949b174bf269752778dc1ff8c686bf4f12e54ac53e64eec26d451f7f310008517eeef5fea712a786d76cc8e11b7d276ddda366de9eac795c7a83099ef781c00da19e78d93722367b8811b69c80a8aa4f54e9cbb9ad8b91ab24a4f98afc521149cbe113ea32558167579bc1ed2891c1f02cd52351b5dc7d900af2bb81152fbd39bc99000f232c40554108e81989bba", 0x9f}, {&(0x7f0000000ec0)="bdafcd6effed9d02f12acd93ddfc51617d0f31c7b00a2f2edc39af0a4b2904c0cccf5e4a38ec3667777646d13857731a4531ed43d5ffe5bc9f7e8c020e709b36e80f3be2d4e3796ef69d0c9f1edd7b1fccbd3a4c2fd6bf84186da0a41af8dad3b6986cc5b81e177a5241aefe9b6c721531a41938e63afec57969cf1ad015e0e6488ad8b64a14b7bb76c8b11910d71e579960a6c4782a744d416490bacb2ae2c148ae9e9f43ed270bd5e49ddacd821746207da233923a94c73cfe7b06e67f010928dcca591c898d7b65fb8144", 0xcc}, {&(0x7f0000000fc0)="b003056d8f5c3c6e476d45c96fd4ac2def377ea9c9c3cb87cf5a70185327139da68283c4582758f157cd2a14296eac4fc096630fbf3856c8f7c71b9fb82161b35b2c", 0x42}], 0x6, &(0x7f00000010c0)=[@assoc={0x18, 0x117, 0x4, 0x10000}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x401}, @iv={0x38, 0x117, 0x2, 0x20, "de898a5553543858253d0d580ddc1b14a14b95d33fdf77ca8d07fe00e5affa26"}, @iv={0xd8, 0x117, 0x2, 0xbe, "7b63be8e2d4b0c8f8b2885bffc959b46bff6623df7ca3f1c5bd96fb8fff84b739bd169577aab584815bb33596adcafdede8b15b19e8a47ad8963b416c14b13e83857c13b31441e2be6157e0df75b0087642d7debec3962fbad780869d2d4550e1c3470b10e4a00792e4d05b579f61dbdb0d5b573395ae06c40e71e7652f0c9b27de70362ac94174f7af164ec386376965c57ecbb7b8310bf3e6155caf4ec9a1d4e22f0d4423042545e6b27eac905eed4136b6e8ceeef0121f0bda2312949"}], 0x170, 0x8000}], 0x5, 0x4000000)

15:55:13 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00097e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:13 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x4008630a}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:13 executing program 2:
r0 = socket$kcm(0x10, 0x400000400000003, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001c008104e00f80ecdb4cb91a02c804a001000000810010fb120001000e00da1b40d819a906000500000f", 0x2e}], 0x1, 0x0, 0x0, 0x10}, 0x0)

[ 1448.834448][T14828] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1448.850407][T14832] binder: 14822:14832 ERROR: BC_REGISTER_LOOPER called without request
[ 1448.856068][T14830] EXT4-fs (sda1): re-mounted. Opts: 
15:55:13 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009820000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:13 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioprio_get$uid(0x3, 0x0)

[ 1448.888496][T14826] binder: BC_ATTEMPT_ACQUIRE not supported
[ 1448.894713][T14826] binder: 14825:14826 ioctl c0306201 20000540 returned -22
[ 1448.912532][T14841] binder: 14822:14841 ERROR: BC_REGISTER_LOOPER called without request
[ 1448.956105][T14843] EXT4-fs (sda1): Unrecognized mount option "êvµLóŒJê€
ÒèZ=Þ$-G¬c§úÉ�ý‚±ÞÏ'8-az“·Ê”cÁ±Žð�‚‡]¾[g!§Zý¬b¾ßù^-{-xóCçÊ" or missing value
15:55:13 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x48000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x17a, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0})

[ 1448.998996][T14876] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:13 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009830000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:13 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40086310}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1449.061025][T14950] binder: 14946:14950 ERROR: BC_REGISTER_LOOPER called without request
[ 1449.146685][T14957] binder: 14954:14957 unknown command 378
[ 1449.152743][T14960] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1449.164338][T14962] binder: 14946:14962 ERROR: BC_REGISTER_LOOPER called without request
[ 1449.170864][T14957] binder: 14954:14957 ioctl c0306201 20000040 returned -22
[ 1449.215223][T14961] binder: 14959:14961 BC_DEAD_BINDER_DONE 0000000000000000 not found
[ 1449.272233][T14961] binder: 14959:14961 unknown command -1795162112
[ 1449.288134][T14961] binder: 14959:14961 ioctl c0306201 200002c0 returned -22
15:55:16 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x940000, 0x0)

15:55:16 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, <r1=>0x0}, &(0x7f00000000c0)=0xc)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000200)=ANY=[@ANYBLOB='noquota,smackf\troot=nodev,\fsmackfstrans=no0Wota,euid<\x00'/67, @ANYRESDEC=r1, @ANYBLOB=',\x00'])

15:55:16 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009840000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:16 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x4c000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:16 executing program 2:
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x141042, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[], 0x2e7)
syz_genetlink_get_family_id$tipc2(0x0)
sendfile(r0, r0, &(0x7f0000000040), 0xa198)

15:55:16 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x400c630e}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1451.915221][T15170] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1451.929211][T15172] binder: 15171:15172 ERROR: BC_REGISTER_LOOPER called without request
15:55:16 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000040)={[{@noquota='noquota'}]})
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002500)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000002600)=0xe8)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='\x00', 0x6, 0x7, &(0x7f0000002440)=[{&(0x7f0000000200)="bf5c8d6cb1def6f50fccceebb18347e62c1565c2875d82fcf8733a951faab314c9f2b49cea727acd449f7aacc1abbe7b694e1c2261ada70ca789f929d025c553badc4ba121ec0b4f61c90e9cad372059d50f02ee8c32d6113c569d4d77644f8e172b0b74c357ba0ff6021c65e6f0d05223ce1b21f4d7aee3cbedc133c2693c1739fb45f56de04b0f52b59e00c682b73d1f6bc389b02a52ee141883f2bcb36c3ddfe1d497719ec7b3568456e2999019224a2de17b8e6b3d98ae09d426fe2adb93e15fb4c06c1fc92e6084c9d97503b0", 0xcf, 0x1}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="8ac0d24856b7be6c9295a2e0fa0e15d478835703cd4ab804d91045352c8e89ef6249e4ed7e13c20b38800bf5fb93ebf88529e5d4f6f1ce063010a464517d59803b51f222184fc6073fc6fb152d6495130e018e4aade83ffaa18369610d03c28bf95b2e590c7753f4aa2c26b6731f85d7da6be9edd2ba76bad8aaa7e3224aeb5a4b1733d681a27c110fd53d2491afb12622345c286abfee470cf264d30abb6a7acce23a7a13987dd8a50ff7a8f0bd6b502412da03d87ceffe", 0xb8, 0xfffffffffffffbff}, {&(0x7f0000000140)="200dbed2f74c44a4c0b086c4b352837e58ca1c16cae2320a54232bd6a0de7a8327", 0x21, 0x7}, {&(0x7f0000000180)="b377b4c4d6759f6c74b3", 0xa}, {&(0x7f00000013c0)="fd45cb538e0eb859c2116088782aabfd2c1192aff776c80c0c4f401ad4dde790e3c9c1c5abf430ab498c94d148bf3e2c345b2500a5611a4eed98b098813e6c8a5ad10df8afacfe24fd027c7eedac4c5163edf54917ad3d72035e3fba0890829cb0cf32f87a611d4c2eec8c463d64e20c83e134d623a95932c2713a05763a5be55c9bdc740df0607106e540e5aec3b04da42a5777976e7853659d64561365c9a4ab8fbdbc8adab901f5db8749bde56d618c5376808843695d780c86c12483647ce4f2970224be7701e9431fdcc1e46a9b03f82cccd61aeeae5b663104b41a170d5fb23bb4ff028646094cc1285d9ff3d0274a2cd282a7541659fffe1709a023e7da93d6126d466a1761790fafced7750f8283e00d70ff85bf9b4f772e335cbfaac557fdc2d137eaf8c9eed5145f0fe5c8765283b557c2b448c95981c8f4f811c4042b633c2fb0651479f70ea2fc7916226badd48b9171692ad0344683a2828a1d4dc3c5aed3d88086c8ba1dab4c9d326397bfe40770fdb8201979a491204ea91739126b24386d8d47b1d534463df64650e0ef87d5f936d63567f7b34616be68159f2283d8b2e8619a6bb5646b96da60ded21025d0cb8c6804aedd1b82eb414ecf6f9016017ae471c36af05f7a6b50a91af004786edc90a865d4a3badab46b8b4dbd4de38718ee4dc530fee2431389573c9f0f6361d6335faeb0c93b08355003c6dae3b5a69f65e2cf29f27cd6bc1998ccd798ff263680206eefde680dfa419553c018e29a269220927d6e46c373d71d6f31890a50455090b414dfb9b847696308f44cf36230dae9ab07b2ddd699ffab8978c902d9db9b241826a4bac1af5c0414683601639949cb2b3b30bcbfae4d7fb72fe073bd249ce58cd609d5f288332d162d588490fba1a902adae4aec505e7bde735e12108653bc7adf616db585aa80a022eee73681f75ad437e476a1f3620fcb03946c9b86f05b64f9aa6f6cfc187711ae05089f32e9d897f03b2459e6cd4dd2b0a46639abd4173335a5f6d6b5c73606b6cd78855e3d01ae4a1489689d65b9307715c47af59041b2629454f6a8dd2e02cb5ccbee3b903555893812f9eea3b1901a50633dea09c35bdcafb4a15a21967cbf6e9a23e5ae8209b10fbb29f264dd984bede5b8b415417bf8af72fbdd8be57d226c3e0a53cc979900d50816573b3a8b53211f760a85f042aa06c9e777bde6861c4edb701f45b3869136548998256c8698484371631f09667ab25fef1b6df8440e2ca245f50f94ae7aac1e34016dfca469b10ddb52afe9735c2e773fe56223800ad79b41c0eb673572ed046a2f9ccdec4ef77a78a8eb212a087e6818237d7f5d8ec84240730677241f1655bc092e7c0ed0920c789deb0af21095cc44a790e586e41cc89fa7381bc80969ec33ccfb1717f53ea271bb357269a5fd5b9f27067b5853fbed7663562bac68c700ead009bb0112f12d977ba494e432a5bbfe3a3d7221203052dd225bcc2d4c3c2a1ff1043c878137dd77b38d1356ad6ce96f957eb29be62e74fda701da717adbf2868534c7848c85ce153eb27a47623cde3e665b01146e08c7bfdbec541a3527dd8600108abe1e1c7512f03fb3a264fa434fca2e782d9f7ae36a0383b286d5c175d2c738dc2ace197de89585c3a88e3464669e6576f0f15d133eb63c5af0253905103e91ec9b490db076dde5048eda2cafb4c733b035224f5a13c273165c5bc53d1766a234ae3e018567dc58924d2ef408deef3744a9665423071946edb7a15b811da3236f59e5f62d4ef263b3fa2a771f71de4d9c3a05dc7523691509aa4e1b9e4e0137d27eedbf967367bebb2457d733fc03471a69061a905f80543b852057fea1cb880f23c5866afdb2398f02d34212dfe6280af254f9bc3cb5b53b5e6a36d487d54eae29b0aaa96a8ee9b43d06ced19b63b33792e158740aa6730804807535cce118eb1b65d246b1c89e4831c9e9c837a7978d492db93f5bc0724965b21f2435b4a8c7c31b8533977f45ffab3648bc525dacb5fe970c23d0b52d1ec47e964abca1d9f0ca1211d31dc3a77f05f7ee207dce251709ea257dd0bc906b96c42eb548d933ba487d66c1bd33cbda910fbab459845fe743dbe1477a7671070df94c290a4cecdbae5a743076b603b949e6189a6780c6a37a308138ee3a5a9826e82fe24e0dab39eb317f551d0e8b401228b734c1cc8195614630ff0a79dee3db3bac933d2b7f55eafc13932e4a8a474c1aed9ba632b10ff3408e251136cd02986bbf76dedbfe3fff31f66a7871271ee15bc6d5fc8e50a701249d210cc1b9951c0407b9a1a51fb54a840feff0ae3b583baa3b73700954390b4cb7af690d95cc956df409ba3be31e0e810a30f3e9d4c8f6d19c8fbab36643adf18f82da9959b7798628ce418725314284652161832f7481005cd4b017a3ed5fd3d9d0af0a17c1b42cd474218d58e3362560376d107033cf91087e807651615ac260d1c540e552b053848d7c92618ab55c58cadc003a1a95415eb3c870c2ddcd0b6db2e7b211f3df83eb29d9f86c62ec87e1f716d33fe8735397e4a982bde05c3b8c93189125e89cd766ce9b64002fd363cc98dc630c2b11d0448a83757029bc3f201aad743841e8a79c0a3fc9a10bf5ea6ddc1874eac72d108a30542c783844dca619d48e7bd26cfdf914d73360ce94c1bb1188cb7ddeedf43804bde9bf89bc64146e6f44eac07892a8dd3ff81878fe91b6b562a39c979fd77fd3f0e246d672073e46e6a82532332da62464096290f3579bfa10c34d97bd4857c432f5beb8129af970c7d58b34f5f63628b6c803be52311a8b984d52488b9ef50b1cb91aa211ef64bbf8e059d6e6efb53e32293e157cdff5f8500a409088f80fd7eb29486021c17f297f091efe992c8c1a54a1618defdedf8b758e3116eacda469f7fe10754c1204b1b4a73ed5ada109e0bddd3c065ec2fc49c6e36bb6f7568cbf53fa4b440bb4aa470f4e6b1a255dfa4ed66f511e84306f96d1b02e82270042038b066d1c3b76235b17720d10b05df2d93dff65636ac432c4285fcf8dfb2432bbe058c8c115c5c1c68b66ae5819998876303d3faa86cff843b9fa8c37db652e4f10f0080cb88cb7c8ec2fa635035e4e5eafee2146076972b6b80dc6068efa02a2b2b5b064b59178a7bbca596a9cc501f96952ab083c228ae91e022dc6de316aa6320b010e0b0ae183992d19e7b67fa7af47ffd728241c2058a5cda950a7837e70f2986ceb070c61d091aac1b916b0c7515e105a8ae487e2e1acaf7ea0fff5013d32f78fc060c8ae8e958d50e643bf42c5f650e2469aad4972c124db0e66b5208a560f3e96c8bf93c18aac361b0a7be40851b48400a0647e87474969005c8310c2be994c1e2af2e35648e2a40d0613291cfcf7685aa31d6e3a2e565b806448419b5bfbe0c19ef6574b554d476b6561f2cd20e1889b24e25d9d2a9792bf295d240beba066fbe9a6eaa6b8f23c74df77706d18b2fbfdf72569cf3dd6f7d4468e8ea28a28276623ae82464533e03304880edad61284452570a3007338a8465fd4cabfe228db686d5190fa2e09c2a558870ea99f4b8300a0c2bf432635c5b8bf355397928dd54a3062620600ca00dd7d4ea7e37954296043a2067293df417f016e74f9471dc86d24def7aab638e37497361eb70535b6e2f17a5447dce8d6db8439ca5e7f11f3f435ff6942531bfac1fd1cf452b39424ba75beb7e4cbca3dbe141953cf319915a6c2208dfe906648022ce89e656420273bfc097d58e57af98fdbaa7c211b0d6db56ca8ce22e16d2c09226d28ff7998013e849b3f1e2ec1043ec2f12145c76b269350ce2a6cec95b2b71d23acfb7b3cbfea2c593dbb57e6746475217bfb7386ce37731a8080424ae7a7313868cca2ef8c912a5572aba614c1db573643ef329ed49a0ae6372e672191c1e0e74bfafc21d2623766944af4ba409e0b87d61f9aa7583b8d588aab72cc6bc8160d930286b3d3ddb3a2191a14c7d08ed780f15a982ab9def2bb49c23cec4ade440367de4cf326048faec716ace3fec2a501dd51c20744c1ecd2feed75f5cf8c5a2be9115e563a171056580e10fc6ba2457c8ce6eb1f802bc6d78e498f8d84546fdb6bb1e08c24fa2da4023aad0f0648f72d25d15df3e08704ab9812e635603d4e1d707371fe530762b61a9046bd7c92be42f77e0fb72fcafd185ccacb65dd0ebaa6fa72fa4c6cc6f8cf5571b555950e3b2ee66b95c75ae9dc0faf869dfbf47a779f3e78f2dce07154e154afd79ecb4bef73d4c3c883b12b8781a1c7f9ed7f263c4a0364d1bb3af87c678461c6f9e1bb1f04f2369a621dbc09210c4c3d302f1f157bf4efd196a54f60f628c7826aa1b157a5b01e2bad1af68b36e95e4ef4fbd516e55ac76d1d70df4f95bcbdfbe533a9b20fc24a06285b945620a8f6206f89574ab4ab7c9c4508e583ac1525233aae8fc2adc37b9f33a16a79725c58d810d9e9f1ec5f063b147fc3cecc4a2129d00c85c2e4d5b3cfa8fa48d8254eb87391849e7e16e52b0713d5d10259f274fabc10e476197cef8564f28907ccf96dab417e79afb295aa133371a588b5fc28950823f1280e752c0c10f22ee786cde6d8fe57c2f7d9944a8bbc0357f359689500978bd025f4c059855f914c192303361d03a7edb817724d5ccac135c6c7a0d089fe2c41175e90cbcff74f8bc7a6d470f778b1ffdecb006d73594d491546dc6333b194a541917668759fce186ae1776a126911d2eabf72530db73f444cfde18f730fd0530b5ad58d6641b77ac686c324df8da61390fe09be6cd98a92faea6b9db1600d94de21d34624f581953d0e5888f18e03c59d56b0492f7210540c938d7120a99eb069e246f830f4f2717f178f860e73af51882ac221a6f5ad8af7a03cfb9c71542aa05c67a8334bd5c2a40046686aca496a10602bda45bf7b02df5fda096a17e4c4f63b9980ca945f387c16ff8bb6195c92cc94c055b8300a20d3e9c07bf6df464ff01cabf13e6b4408028b6c4fca60d4daee95683258d867f40334b34af399966630b09681058b94bf4d23926b35660ce7e812d18b173cbe475b1c188ac68d87ec2dc5379535ce432959c5cc7a5f272c0c4480096844561023fabf914e09ddb40145bf833ad6bee2c7c6edc5db7cf2350c9e0ebea649a13a34e24ae88a1ec048c6188334a421899693b40636a8cee080230fd310a4ddc944e28c65d5daf293405a6a4d74dbf749699c8bf5f2db651c7eb596c4aab415a0d342073cd58a6b411d61604b74c949018903aaa0965c6a26c99ede4cd804ee3c31596eba256aa218590b18d3dbca0ee729f5753cb8b3194300d5b05542d4954a572d05c637285cc29f1f77a1478ffeb379e24622a2340c7a7dc566d648b204143d4661f500660bda454bf36a84ed974a626fc0fca25f8c72134519c55baab577301c754a4c2774585835f55d3edd9b0a6aa5cd2803f0881e4f7ec6c10fc25238253683c25acc11ebf7510105d98ec8d6a32a46fef6ae52b0ca6d18b80ddf0498f4a98f67bd4fd9a9344d6b2ed98e9e982c01dab6bbdf03cfc0279118f1a8fd6ed2abd9916a695a6385c1b4853b8644ace2afc303d0e74404652b19dca08193378eb69a6d8465eb356f89106b5110f5cc1b99c8cb60b4171255ae60690ae0a2d39484ed153e47bc78baa8bfb292fdf96fd16e67c64317f9a6ddf661c81c0b3d1f3b358903add95db8f369b8f74e73c888bcd745944d469c0b14274939c3ee85ac3d7182821d3ea661a41d21cd7e7cfed9d6e247", 0x1000}, {&(0x7f00000023c0)="ab1f45caac134d41ce9b050c7670360981b246253e15afad3374d60241d1eb24cab5b3f70ea52b3e8f8ea4f9cfce6d409b71b24e2e964128c2ef11242de5c5e5e7693731672fcaa65efa49e947e816fb1eaf3a126b", 0x55, 0x100}], 0x800000, &(0x7f0000002640)={[{@data_ordered='data=ordered'}, {@nodelalloc='nodelalloc'}, {@test_dummy_encryption='test_dummy_encryption'}, {@discard='discard'}], [{@uid_lt={'uid<', r1}}, {@fsmagic={'fsmagic', 0x3d, 0xbc13}}, {@appraise='appraise'}]})

15:55:16 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009850000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:16 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0xc07000, 0x0)

[ 1451.957889][T15179] binder: 15171:15179 ERROR: BC_REGISTER_LOOPER called without request
[ 1451.965838][T15175] binder: 15167:15175 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1451.997487][T15175] binder: 15167:15175 unknown command -1795162112
15:55:16 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x60000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:16 executing program 2:

[ 1452.055192][T15175] binder: 15167:15175 ioctl c0306201 200002c0 returned -22
[ 1452.089300][T15295] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:16 executing program 3:
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x10)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000180)=0x18)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

[ 1452.143880][T15259] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1452.171422][T15365] binder: 15354:15365 ERROR: BC_REGISTER_LOOPER called without request
15:55:16 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009860000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:16 executing program 2:

15:55:16 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x400c630f}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:16 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x68000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1452.199826][T15396] binder: 15354:15396 ERROR: BC_REGISTER_LOOPER called without request
[ 1452.263071][T15403] binder: 15402:15403 ERROR: BC_REGISTER_LOOPER called without request
[ 1452.341290][T15403] binder: 15402:15403 ERROR: BC_REGISTER_LOOPER called without request
[ 1452.371126][T15414] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1452.387450][T15413] binder: 15408:15413 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
15:55:16 executing program 2:

15:55:17 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6c000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:17 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009870000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1452.420123][T15413] binder: 15408:15413 unknown command -1795162112
[ 1452.434945][T15412] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1452.441988][T15413] binder: 15408:15413 ioctl c0306201 200002c0 returned -22
[ 1452.512422][T15445] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:55:17 executing program 2:

[ 1452.564082][T15482] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:19 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0xd05000, 0x0)

15:55:19 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009880000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:19 executing program 3:
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f71756f74e12c00"])

15:55:19 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x74000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:19 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40106308}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:19 executing program 2:

[ 1455.108189][T15536] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1455.115779][T15543] binder_thread_write: 1 callbacks suppressed
[ 1455.115788][T15543] binder: 15538:15543 ERROR: BC_REGISTER_LOOPER called without request
15:55:19 executing program 2:

[ 1455.159595][T15550] binder: 15538:15550 ERROR: BC_REGISTER_LOOPER called without request
[ 1455.162038][T15544] binder: 15539:15544 BC_INCREFS_DONE u0000000000000000 no match
15:55:19 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009890000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:19 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x1000000, 0x0)

15:55:19 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000200)=""/195)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:55:19 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x7a000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:19 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000003dc0)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
recvmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x60)

[ 1455.317704][T15594] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1455.357882][T15650] binder: 15641:15650 ERROR: BC_REGISTER_LOOPER called without request
15:55:19 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40106309}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:19 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00098a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:20 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xfdfdffff, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1455.402752][T15668] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1455.425164][T15672] binder: 15641:15672 ERROR: BC_REGISTER_LOOPER called without request
15:55:20 executing program 2:

[ 1455.511637][T15681] binder: 15673:15681 ERROR: BC_REGISTER_LOOPER called without request
[ 1455.528336][T15679] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:20 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8800, 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x8, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

[ 1455.575534][T15683] binder: 15680:15683 BC_ACQUIRE_DONE u0000000000000000 no match
[ 1455.585339][T15685] binder: 15673:15685 ERROR: BC_REGISTER_LOOPER called without request
15:55:20 executing program 2:

15:55:20 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00098b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:20 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xfffffdfd, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1455.617346][T15683] binder: 15680:15683 unknown command -1795162112
[ 1455.648963][T15683] binder: 15680:15683 ioctl c0306201 200002c0 returned -22
[ 1455.747833][T15758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1455.759090][T15755] binder: 15693:15755 ERROR: BC_REGISTER_LOOPER called without request
[ 1455.803844][T15795] binder: 15693:15795 ERROR: BC_REGISTER_LOOPER called without request
15:55:22 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x2000000, 0x0)

15:55:22 executing program 2:
unshare(0x8000000)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0xffffffffffffffaa, 0x9, 0x0)
sysfs$2(0x2, 0x1ff, &(0x7f0000000080)=""/6)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:22 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000040)=ANY=[@ANYBLOB="746b9c3333709e2ddc6842cbd5"])

15:55:22 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40406300}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:22 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00098c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:22 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x100000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1458.350446][T15813] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1458.355533][T15816] binder: 15814:15816 ERROR: BC_REGISTER_LOOPER called without request
[ 1458.386563][T15820] EXT4-fs (sda1): Unrecognized mount option "tkœ33pž-ÜhBËÕ" or missing value
15:55:22 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00098d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1458.393579][T15826] binder: 15814:15826 ERROR: BC_REGISTER_LOOPER called without request
[ 1458.408996][T15821] binder: 15815:15821 transaction failed 29189/-22, size 0-0 line 2995
15:55:23 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x200000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1458.442483][ T7901] binder: undelivered TRANSACTION_ERROR: 29189
[ 1458.493890][T15939] EXT4-fs (sda1): Unrecognized mount option "tkœ33pž-ÜhBËÕ" or missing value
[ 1458.513303][T15941] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:23 executing program 2:
unshare(0x8000000)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0xffffffffffffffaa, 0x9, 0x0)
sysfs$2(0x2, 0x1ff, &(0x7f0000000080)=""/6)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:23 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40406301}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:23 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00098e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:23 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x300000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1458.702669][T16078] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1458.722352][T16073] binder: 16071:16073 got reply transaction with no transaction stack
[ 1458.752333][T16073] binder: 16071:16073 transaction failed 29201/-71, size 0-0 line 2900
[ 1458.852868][T18061] binder: undelivered TRANSACTION_ERROR: 29201
15:55:25 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0xfeffffff, 0x0)

15:55:25 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x4e21, 0x4, @ipv4={[], [], @rand_addr=0x9}, 0xffffffff}}}, 0x88)
lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:checkpolicy_exec_t:s0\x00', 0x28, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f92756f74612c00"])

15:55:25 executing program 2:
unshare(0x8000000)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0xffffffffffffffaa, 0x9, 0x0)
sysfs$2(0x2, 0x1ff, &(0x7f0000000080)=""/6)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:25 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00098f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:25 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x400000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:25 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40486311}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1461.424023][T16204] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1461.436400][T16203] binder: 16202:16203 transaction failed 29189/-22, size 0-0 line 2995
[ 1461.440907][T16205] EXT4-fs (sda1): Unrecognized mount option "no’uota" or missing value
[ 1461.454291][T16210] binder_thread_write: 4 callbacks suppressed
[ 1461.454301][T16210] binder: 16201:16210 ERROR: BC_REGISTER_LOOPER called without request
15:55:26 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009900000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:26 executing program 2:
unshare(0x8000000)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0xffffffffffffffaa, 0x9, 0x0)
sysfs$2(0x2, 0x1ff, &(0x7f0000000080)=""/6)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:26 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x500000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1461.501289][T16246] binder: 16201:16246 ERROR: BC_REGISTER_LOOPER called without request
[ 1461.557254][T16307] binder: 16297:16307 ERROR: BC_REGISTER_LOOPER called without request
[ 1461.567581][T16317] binder: 16297:16317 ERROR: BC_REGISTER_LOOPER called without request
15:55:26 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x600000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:26 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper={0x40486312}], 0x0, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1461.619675][T16322] EXT4-fs (sda1): Unrecognized mount option "no’uota" or missing value
[ 1461.632896][T16326] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1461.650125][ T7901] binder: undelivered TRANSACTION_ERROR: 29189
15:55:26 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f483022e3756f74612c00"])
r1 = dup3(r0, r0, 0x80000)
ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000100)={0x2, 0x7fa3, {0x57, 0xfff, 0x1, {0x8, 0x7fff}, {0x101, 0x19ea}, @rumble={0x9, 0x67}}, {0x55, 0x10000, 0x5, {0xffffffff, 0x6}, {0x1f, 0x800}, @period={0x5c, 0x80, 0x7, 0x1, 0x0, {0xfc, 0x3f, 0xfffffffffffffffa, 0x8}, 0x2, &(0x7f00000000c0)=[0x9, 0x2]}}})

[ 1461.742538][T16334] binder: 16332:16334 ERROR: BC_REGISTER_LOOPER called without request
[ 1461.760775][T16331] binder: 16330:16331 got reply transaction with no transaction stack
[ 1461.790605][T16337] binder: 16332:16337 ERROR: BC_REGISTER_LOOPER called without request
[ 1461.799535][T16331] binder: 16330:16331 transaction failed 29201/-71, size 0-0 line 2900
[ 1461.844031][T16340] EXT4-fs (sda1): Unrecognized mount option "noH0"ãuota" or missing value
[ 1461.918015][T18061] binder: undelivered TRANSACTION_ERROR: 29201
[ 1461.926832][T16412] EXT4-fs (sda1): Unrecognized mount option "noH0"ãuota" or missing value
15:55:28 executing program 2:
unshare(0x8000000)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0xffffffffffffffaa, 0x9, 0x0)
sysfs$2(0x2, 0x1ff, &(0x7f0000000080)=""/6)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:28 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009910000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:28 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0xff600000, 0x0)

15:55:28 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x3f00, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:28 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000240)="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", 0x1000)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}}, 0x4000840)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:55:28 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x700000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1464.472810][T16452] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1464.473647][T16454] binder: 16453:16454 ERROR: BC_REGISTER_LOOPER called without request
[ 1464.497201][T16458] binder: 16457:16458 ERROR: BC_REGISTER_LOOPER called without request
15:55:29 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009920000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:29 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xa00000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1464.518623][T16456] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1464.530810][T16465] binder: 16457:16465 ERROR: BC_REGISTER_LOOPER called without request
[ 1464.555460][T16454] binder: 16453:16454 ioctl c0306201 20000540 returned -14
15:55:29 executing program 2:
unshare(0x8000000)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0xffffffffffffffaa, 0x9, 0x0)
sysfs$2(0x2, 0x1ff, &(0x7f0000000080)=""/6)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:29 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x117, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r1, 0x43, 'bV#', "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"}}, 0x110)

[ 1464.645974][T16513] binder: 16508:16513 ERROR: BC_REGISTER_LOOPER called without request
[ 1464.657190][T16512] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:29 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x2000000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:29 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009930000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:29 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x3f00000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1464.812154][T16590] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1464.813545][T16585] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:55:29 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009940000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1465.041327][T16598] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:32 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0xfffffffe, 0x0)

15:55:32 executing program 2:
unshare(0x8000000)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0xffffffffffffffaa, 0x9, 0x0)
sysfs$2(0x2, 0x1ff, &(0x7f0000000080)=""/6)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:32 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x48)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={<r1=>0x0}, &(0x7f00000000c0)=0xc)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000100)={0xb69})
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:55:32 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x1000000, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:32 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x4800000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009950000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1467.532355][T16605] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1467.542181][T16602] binder_thread_write: 5 callbacks suppressed
[ 1467.542193][T16602] binder: 16601:16602 ERROR: BC_REGISTER_LOOPER called without request
15:55:32 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
mkdir(&(0x7f0000000040)='./file0\x00', 0x10)

15:55:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009960000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:32 executing program 2:
unshare(0x8000000)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0xffffffffffffffaa, 0x9, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:32 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x4c00000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1467.586874][T16610] binder: 16607:16610 ERROR: BC_REGISTER_LOOPER called without request
[ 1467.609984][T16610] binder: 16607:16610 ioctl c0306201 20000540 returned -14
[ 1467.627501][T16610] binder: 16607:16610 unknown command -1795162112
15:55:32 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x400000000000, 0x0)

[ 1467.698996][T16610] binder: 16607:16610 ioctl c0306201 200002c0 returned -22
[ 1467.721137][T16620] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1467.760268][T16631] binder: 16630:16631 ERROR: BC_REGISTER_LOOPER called without request
[ 1467.761259][T16661] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:32 executing program 2:
unshare(0x8000000)
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:32 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6000000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:32 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x3f000000, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1467.855172][T16667] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:55:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009970000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:32 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x60ffffffffff, 0x0)

[ 1467.944642][T16748] binder: 16747:16748 ERROR: BC_REGISTER_LOOPER called without request
15:55:32 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f00000000c0))

15:55:32 executing program 2:
unshare(0x8000000)
mq_notify(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[ 1467.996212][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:32 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6800000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009980000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1468.085801][T16832] binder: 16824:16832 ERROR: BC_REGISTER_LOOPER called without request
[ 1468.133043][T16847] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1468.143802][T16866] binder: 16824:16866 ERROR: BC_REGISTER_LOOPER called without request
15:55:32 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x6c00000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1468.193209][T16872] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1468.225926][T16873] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:55:32 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009990000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:32 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfdfdffff, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:32 executing program 2:
unshare(0x8000000)
mq_notify(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[ 1468.268356][T16877] binder: 16876:16877 ERROR: BC_REGISTER_LOOPER called without request
15:55:32 executing program 3:
unlink(&(0x7f0000000080)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0)
ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000180)=0xff)
creat(&(0x7f0000000200)='./file0\x00', 0x4)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB="8771756f74612c0000"])
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x2, 0x3f, 0x2, @dev={[], 0x13}, 'eql\x00'})

[ 1468.314118][T16878] binder: 16876:16878 ERROR: BC_REGISTER_LOOPER called without request
[ 1468.350106][T16886] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:32 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x7400000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:32 executing program 2:
unshare(0x8000000)
mq_notify(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[ 1468.399316][T16887] binder: 16881:16887 ERROR: BC_REGISTER_LOOPER called without request
[ 1468.408652][T16887] binder: 16881:16887 ioctl c0306201 20000540 returned -14
[ 1468.421104][T16887] binder: 16881:16887 unknown command -1795162112
[ 1468.467748][T16887] binder: 16881:16887 ioctl c0306201 200002c0 returned -22
[ 1468.483311][T16894] EXT4-fs (sda1): Unrecognized mount option "‡quota" or missing value
[ 1468.532029][T16955] binder: 16906:16955 ERROR: BC_REGISTER_LOOPER called without request
[ 1468.564441][T16996] EXT4-fs (sda1): Unrecognized mount option "‡quota" or missing value
15:55:35 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x740000000000, 0x0)

15:55:35 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00099a0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:35 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x7a00000000000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:35 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfffffdfd, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:35 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:35 executing program 3:
r0 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'por\xff\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1f\x00\x00\xff\xff\xff\xff\xff\xff\xff\xef\x00\x00\x03\xff\x00\x00\x00\x00\x00\x00\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00', 0xc3, 0x80003})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000001b40)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000040)=ANY=[@ANYBLOB="311276bac34fec706aba39637e30"])
sendmmsg(r1, &(0x7f0000008440)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local}, 0x3, 0x0, 0x3}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000200)="397c9fa575454eb3fe3643b07d6bced2ff65c8d8c7482c47a74ff521aace93f89de7829ec56f4a5f4925f9a01544e7fa5b3a76a729a69f8f0975d4046eaf5bf16fba005aa1e5de352f3203187326aefe7fceb3e58782e70aaeb500af0cb0ac60e48249f288b63f6ef4f2f0a1496452f40dedd73704f416e0030743665b23d9826e1461e0a80da535b07402e9b95f38bcb00b9bbe442803bc6aa3912e848ca8087aa2f3c7c4e2b82953cf83bfe2f2e889dec7977a192f6ec625031135dc4b085a663df653388fb09983faaa5903f42757b4a72892e0bf5a330217544ad54049f0ebf5d7708bd73993b007d5f3f6", 0xed}, {&(0x7f0000000300)="a152ce5aeb3db5bdc4b201183a2f077f71aa7fec919abb0609c8b0db4cbda169389d487c81bec25ad06bd6dc7ef8bcb0a0a53972bf9917cfe1d2079dcdf904d1f905b7e5d4f84502237b81db578ac3fca91f675f25522dc36e18226fd4424244c080c0a69de754fa2e6ad2f91d99a49e2f698cf8764a33b919d0b74fd6fbd075144e49b83afb250515a2", 0x8a}], 0x2, &(0x7f00000003c0)=[{0x78, 0x10e, 0x9, "02caa3dd190632fd57b2922bf06028c3bb44d77d7f63b02d3ee3f068a62d29c31ba537d6d21fa0bb4a6161e86993d66653c6d7156a9ae3e34a0afa6a7e380248685a22c8d6657b381e3be8cc5e06c5db079be54ac83c3908c877b2b092758ab193ce"}], 0x78}, 0x9}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)="2d31571b6ff11e143ac4a4ef1910b361cb98090bb58c3db927e577ee1fe7516c7b86bd87cbce7dc38c00c7bd275ca39b1b790c4c1a1199921efd75d6fbd90f96d49c79daa648ca9fab641c2db58859aeb52eeb61e1b9a959b2e2a302fcfeda670ce226688aaa", 0x66}], 0x1, &(0x7f0000000640)=[{0x1010, 0x105, 0x100000000, "9a5231721a4f64ec6ba404f7415340a391da080ef2611d6af36e5c97ed0e27845b6e2b0f43f5f249bf19fae6676e8345f10c4078e288b58defc76c9286914606f9ea76da95f28a5f2bbdb1a44e2eb010ceca5a3786dfcf4c1c2fe4abdaf14a15d448b9c8b7b3ff36d857f7d2a2832d19296b62662e328955ba8c4f49ac07146a11b710e734819b71c479824d6ed69e8e6efe72d19a836fb2a2c2c7e72df1141045c2c0a2d41db78d78f7d74adce4c778d1da904fee03308049852547c0b4156d214fc9281d90f4ef15dc03cb2efb3867801d29eeddf33dbfc6e6cee7076073b26e564f9f93a1ba1ab857da2708a06ca11fa56cab72ec12ab816da85a539d7de26f9373e32d4cd361e8681809dca6f4ae466bbd074f9948209c0b4a3e6a00ed577373ad0fabbf5a223bed73147cc1066d877ee9acea9a7fb545693962468dc0b008602563e7b7cbf8d2af472d3923799a01275549d3b38c2efd5b273d9cc478e3c9e79a11865ddaa0c2317d2d6315ed6f1beaea99751978bdf748183daf48e530e3cc497b6c6030e0074cb840aad5cbcfaee8358f4be4aeda55b5e2287b989aba33a6d445f13a3fba1404aa307b045868d61cd82a3db701019772625683de2c30d3f4a267b46a3b4ebb3152834e858f1c09069991645698bd67c78d9541b8adcb36c08927d1e88e85e4bb4cfc195e7be3a38d6a8a643790d32b6bb9a5bf12ab212d5c5e9391eadb3192d3da24e0102548b1ec56ffe4f509fbbd8b043383e9f30fc0dffddc05c46f43faaca21edae3db939f3d135874c8ed10aa949b28436823e72731d89b8e8d9c7cb420d046456cf54a5a3bb22479a735fb73930f6c64250f14ec32996f9837a0f7d202526991dc670abed2f68d72a4c7cd0e1ec86a3b8b9a48dd46f92e8f686338d7f12e80ab328dd73c24442b0422ee1fa774df3fd2f0dcc4ba25c2cb82d543da98065930572ba968848dde5a24c1875be9f8af8522c51a2cb08fe48fde3ceed9598f4404d9b0f7559c365ad1993dbff5db0b7bff8b63efa0d419edce1200c75c36e915fb6ce0471bc9a89223aa419a3047aba37aee2d6ec0a5642f3ea81bc408ca03b59689878a7dfcbdab4d96c26a25b7b71a9ad9f57e46977a15738fd8e41fd8c156332fbb50742de9cedbd04283362ac993a97e4e964ae9efdca6fa2ee3a56885bca3c9af09428d93dd4a88a1381eea5d7a23e4c24f65decd1fdf714c091d648c9dec1259d4557faa39e809e1583d031c40bd6a7f34da7d6be2a24dcdc602ba8232442c42f821c7c7f2e4c80f1da9a11154740e6ce2963861872be2cf1ac0ceeea219624b8bddec0f6e967f0e044135bf44f6f5cf0f734f1f9f64b7fe614a8c6625129b103435179b295aa957fae52172ccf34cbfe0db22e6b1c631ca1dc642944b25d457329e890aa938b2c1da1d1219129194069a7ac19eed845ee9fcae34f2dc1e7e469645dd7d8e6cf6a91d5b7b2c593974b6b85e719e245fb7d2112656093b691f6812884c310b79ca27954ce7655798ecdc878735b610a0c35ec868f277c6ad08fa3139d7547a40dd8a010e11222a7bb575d1379eec266e3464d3cbf1c4815b34090b005134cd03d47a48c7a868c020d5066994357d873fad792552e9a63b1ba14512d31891c3566b3ade719755ab75ad4f2a1f529f638172658cd2c9715799e104b73cd2eb8601d317ca8e54de5a063e7260780f867f07cd1f06d6438828d6d25dd9cd4546ac11097fcb706855d1619d3558127c10c9b8c20c8fd1d650f37725da971d006611b5e91fe9c43b21d31d16b11cedc44bd52c0ef69b73236c4a69bc3d6e1f089ff91145e645e5a6e378ffe4997347d4c20d6da8e48376eabf3133ea6c0c5494cb6fbe9c76c8ec32d108c7cc0f09e6a23aff1e799284cc36fc61c37833f8512fc7dabbe15e8f101395f1b4db76bbd79e0692225ba193cc11c7b8b40340f2cdf44a39bd309f898a820b5f5a51b34fa37b66a85ddcb99a2089ff9cefdc267a967e0459588131b0501c7d4fba6a3790fcc2f438be844ee047f653f97425b691b7b32feaec23aa83762f44943b5c3169950af1caf74ddd352e1af1ca6d5f13c8e023496e89e9265c0af3844593550738573828e8fadfd08186f29b9afda396561fda6ff592c7e0b530e32bc501e40770cf7f8892f48503e0b8b2dd3a3669a28e08fd32e1553b1237d13268623f39cbb0be3ea704b010a630d14cccf6130f19ce8be2fd1db6c4a2c9a4e9b7b27df2ca482f3b4692a188ba3d0a817df7dd1effae92f04c73b2e054af97e6488df5c913adb9ef1c4b39a5dd0cc303f0b470fb71bc99552d7389cc78fd0ef96b002d6bbb9e646c19aaf09042c5e093be747fc3633b9cd587e0738572068185e09888cc64adaf4d8fa41cb64a99a2c7e22a58b49c7167503d341648865df16920cfafe9f7ed30a3da9e1f51f676753bb19fc9456831bacad8f59f7296a5dd97da12a073c9a8fe5eaa881c020e7946b02fa0e7d868da50e9fc7e5334be4119db9d11474ccdb6a9bf3ef067f853b27fa13bc5a7059b4442ba0689660c4f9134960de379a8ca1a9d8e7d3aaf7442e97b595b3f349d1299f604ebb90e30dc1799261e2d9349682b4b9cacb6e0c35474a0f5dc2fd85789e849964cfc7bc1727e782c549b0e8e3aec72dec67881a87cc7d30330b24a323732b659e82e901feac3b3a77bef98096fb8905c629a1c6d4fefe8cd2b9eea9a7710332fdcd84767582ff7b29b85418ecd4aded6d5a559050a3f3c7ee6a310bbc4b5dd77274a857a455aad38b89605ce70730f6ee35f90b8dc536fb822d5d2efdcc4e27add97cfbedb80f9819a0cf07c940bac217235d2590cb62edd33caefc7ee5f2602b7020a4db25e95c300e90a1e69649d4421ba03a21505386cd51237fddd8569d9a92b14117bcae1c3367622d86e304f3485fdd744417dac25617a438c71aa3de7fd0623d5d14cdc009fee953bd56ad11eece598dfb1620934c01bd02a9f8706ba913f7dc0798458cbbade13dfc85968d12941817fa12a3155668a04b01c43eaa5c01bb393df4dfa3b6570ec16e3f5715d5e993e3750bc107f9d8ffeb1d8fa9b8e79185fbe37f4d99f80a891b5e3a64b79c27d6101a462b075a979a3403d603b2a498786aeb5a125840cdb6c24697ea5fac260f06387095d9dec2992778b09c83ce26c2b09b5ea4ddbb850408d8e4030fc24cd281184bb14b7f619d054b831e13301e6ba455f8d3c0f75bb9653749dacb5a6d3b954e7552677ed589da78fd0b4da7938038a00076f583b84fc2eeb0e294377c87c0a88f106936200bb8a0929fa272a256f6dea1f15873801ee0c346f08e86f1a09324e17fc0ba086c7fd162553cd9d401a5620ca3ea74608689ee0494744abf837d173f826939161e4ae240b146e5b8f4dd011d5c03e39e033cfcabad167df7090f57c5ba7567b9a0dfeafdafa5c166dc91a4ee9e32eac31d966dd2396484559dcb333d7e9b6ce58001b9d2c3c98753d3ed3801d8e0410b807de2caf3f01a2cb2f027588a45637560ea4571fd88e285380da273ab0d98c853301301c652bd7fed97bf99db8787aa3eab89ec1700dd46c3580407c6db03c37a89d9e9607b6d95bebc4849b0b22b286765a095114d4002c4effaf948ddf0ef3270e1a9f3f973a0af0dfdd6fbf912e0d73d8f3cd8806db4687578b8172a09f537c5096b64b6d5cfd7e7c2318fd485127c8dc6c5b71bfea7a67bc91e3dafcf4aba53061b46a7488a0e32f5c583713b97d0646244922f16fbf0ab39b54bb5d09b33952df7340996b32d48f4ebdfb21b97d6da47908a1cf6e02456142595b464410d6e36880f9e641af4c7b7d581ea3497d5b79eee4de2888c31a55388ba3a394e138c97406fe65d9f7bde0fdb173f58f156823211754ff1d565e0f4f70c40ac6236df29ac87c3628678bd19637ba4e698b370cfccbabdf4337bd106fd23c39210b58cd5fe93a328a356ddae3f0f11729e077e5fed9c0513d5f09a066a92017fe1faadfd8af4cd735f090d5080c317a08a06ab217e3dc21036513a6ca2b4a78e16f9b021823c9add403580b139f3868ba6fa7358177ea4c531742de0a5f277204e77b3d7919101893a4ce4f11b75bc85492523501168ee4ad8b2be336cbb17298b5abf1544d8c99baecca92a4a1e81e5dc53d437cda9a6bbedb9fbeae63443323a789a11482f011e9783594793e65fbcd0c0dec09bc4e96275c066d46bbff64acb11c3bc236288920bf948d4e5e1e340578905dd5887459f526c7ceb5bef0acd5c2e533def37f3470ad4cdb6af6c63fa4d4221ccc942493a3f182d9ba7966677f42f215309314f03920eaf0e858880b922127f6fa9b81b070c909eef771f502cf30bfa4953ddb631c6d627f290aff586e0dc301ffb03d742bb5cab710b8e6be003ca29ace7d0eb41fdde00c4383a3c41bcc2739c389319e19098499888050759f630d45cc892dc4a83fdbc6791682daf97b42858f8eed1144e2a37ee39f9669bb7ba16dd441adc8ee9d6b0953f65de0800b8e9ebfdc5468e04143551317428771da16d3fac747f7683d58c3d7acac955beb83f6fc8542db8c5135c678533b5aa7723d6fa07331d7370b8c62c57dcfb9e2b2f84084e42798482a7330e20abc28e83ecb6fd01522e08bc9b6168bb1e0aa2942675e3c80c2ee37b60f8e35c53d0a4f7ab78b9dc67b6643f06dff31d91db0e5dabbe1f90ebb9cb35375237c8bfc1deccaeb9bfcf9015ba72da9069f6a6784183854e1bbea3df8b97b7cb1efed15c67cdb005dc97be765dcb68661efca074f4a37489e66795d52ebdded50df80bcc4d0749a8623febbbbd487e367897a98795616490b1f8ddb6a24b2e041709a2e81f9a35a1b34db662201d5b7ab8a15199f09262eb850b162b12e014336349e6f3f4f1b0da7c2898a286b394d56f54c7ffdf7190f974be4149b0eab1b6223fe1eb07dd728fd0f0d9ed57f5ba0467ed31c90edf9a83e852f57de6362eec22d77f0676f8da34c8e117ee18512bd18d1ca2819ee2582484a6b80e0bc2b88647ad0e50352b3e47be02c92ac666c4a88cc9ac10b175d67c047ec5ca2c2495db4bb313dc96201157e182298db5c47e0c3829bc001957d27c0247052f7816ffb5fc590173c47fd6b32d43a1eada50657e7a8b52db99a9ef8cdf2ee0f8b575f9041db563286923d4d79327b699672d6cdd6a8678b4ee6f76a9422a5ae2c85dd75dbd97f7d68a915badf49faf0f8d78631094c70f29c8fbda559cc715091d8cc8dc86471d419dbabc1fc365f65828e0f0e87b9d8638b0b7655d130f327a432efd2d6d745c21e61055fdc2178a9bcdbea719478a6d9172bc05cb88cfc1fe3b823d984e6143cd80b8e667c8033f8467bce6c41b98b587073fd2c6329e27a5f23c868d02f14529af304f97c0f9263e91d14ef5f11276640eed6aae10123081efd9b33c3dc08f4697d54cc083478c394ad4eac23328aea1f7c5a429a623fbbe006d077c3cd3ec4a94061edf8d64651dec137858710a53b417faf5ca7b297285563b4948cade5c07d34522a95936d54527cc45fc21af80617604e1f4688ed181ce9e8f94a62a5847819d293678d240055592fe41546400495a0fdf676c986f2aa73543820f761366f788f1b6fd5b4d72d485f2e7d936bc11f51244a277593b1505f7c5fee07759d33ffa5fd78cfecaffc2c16575b5070be1835aa107e69fce3cd6ebb2ce22fa627d3bb86db9093f21e20b86fcf6499ffb446fe3a47b72ee2e42648bf04a0df28caa78c81a4efecb30b"}, {0x88, 0x19d, 0xcb86, "943876125e2fd7e31817d3b9ef9ff988799de2b196f898e162259351378c5727f79c11da9b22f15aad1fa6d1ace12140f3c3e8498df658b2cec2a9376456270d0a499c0058f5a88df5642a3dd444438fc2ae3d61266ff0d7da9b127281f00f179cd9781af358c2681976cc376920c97564"}], 0x1098}, 0x7}, {{&(0x7f00000004c0)=@llc={0x1a, 0x303, 0xfffffffffffffff8, 0x8000000, 0x7, 0x6, @dev={[], 0xe}}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000000540)="2e8cd8a009d3c5f2535c9f9e7da3df2a23262d52075593c4842b6a3a1f1d7d1835d9a1f130dbcdd8682eef8959795af4ba53a0c578522143b79061e0a702e3", 0x3f}, {&(0x7f0000001700)="453833d56e198ff2c0367d16936573355646be7842b4d51ee152d5e314583ed56a47f7a2dfcd734f13dfbdbd0ae0085c06cdefb9374703a374cf60b60e82b1ab5222c8c6d3d1a470c9a213852fd2d2f563ddcb65f3936457da83cfb4264045085b94185ee0914cb7c83eb9c9c7404421f9a9ad27be3697639f452c60dc62412bf57119691bd86e2ca7a447ea4584bd6548fcaaa5de773ec25b112e772400d045dc8d7abaa9cce67ce33968fe29bfddb94adc9f4fe19efcfbefb4e262d93d964d4557e9c696a24f233805ef7ab238bbf3eb9abb02d9dc52a17ce5266bbbfb130c2078b4adda0cde56bfd1c8431e", 0xed}, {&(0x7f0000000580)="beb73770df627866256553e06c04680f8bc1bdda8990bc46abd0b65bd910cc561bc3cb9f968d6bb43de7ac11c8e3c5ef94444e341676b37b1b5a21c1921084542dc6976761f8021d609248baa0d74fc488e9fd96e00a038a7f056353d52f3b217ab7bbc8", 0x64}, {&(0x7f0000001800)="deb781d0f669561a91fa03bdf42f9b1fe5fcc96f83c00cd8b628b9b1c6702a454f530d9fddf739d57d980c07ddffa24faf375834cb5965dcdf0da7081201fd3b94bff9dcd3416c7c5a772298cd9638255e682dbd109864f4932e261b70125c9ba9251a9dbf2536c927564b3495f76e9360252d8826a669ff458aa67e58b76e7deb35aa87df8ac9d4956c068e13c441f5c96db34f46343060deb89c5dd753f5021fe976a9a85fa098c6f2685d95ed2bf68496f0163b1304b5334b6b97e2f55a9e2ca2b92e9b9b089da5f625969091eaea", 0xd0}, {&(0x7f0000001900)="8b8b3beb0af3429c9ae1f89aa11db53b789fd9c7ea26465da1643fc926f1a7b90ca3ae5b2aef89003b1fda989b646b270747d8cc1c8159ae8c2ae20a0c90143497645cdd8b71d7b97c00a804b90138d1ac84dbfee243fe205c9193e379582f11caa9be0095db4b87c53f250346c37e970e434e0b102f01d56edce3a66d0437d37e0ca51462df3842878b60fb90ffe137e1e450de6d50284684fb015e1363e7dee465006a58c3d00472f3cb8ed233a6528d6589e794f5b6a4109a", 0xba}, {&(0x7f00000019c0)="24907c95cd64482f1d9117ab6d8b030451da9c2a734704763d6c325607a43a71e5585175d3683d5ae3a391b73f34ea26e6397853f079aa52fb8b34322d85457dd7329233e1d357fb8840b2276f6ce48c66f0782546874ff82b6bf74975eed6f061ef7d7f96734b2ca8dd7dcd80c7b82f4c57fb9978a8166ab6b047dbc4b096de47352182e157a4223844244e23b74dbf4977c0465f4822cd20b5", 0x9a}, {&(0x7f0000001a80)="765b7fd45c5a933f945f520f099587bd899601d9eb78cb6a800ec51dc4481ea649288dc5c8e2ebe372892c8be6bc9ee9f6b384248608cae862bfa65de3f536b72680e18dc951baa1f029959509da0df52547ae667187bbdc9ed5e8f0cfd7e272951a3d098cdb1de7ca65c6a19cbeb711976cbb5a1d6c4fd739e0a2a7402ae441a6b1616c7e98acc3d73b98a46387a368633f", 0x92}, {&(0x7f0000001b40)}], 0x8, &(0x7f0000001c00)=[{0x1010, 0x10c, 0x8, "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"}, {0x70, 0x117, 0x2, "17c655db8cba38f3c306fcb96602dc9bda14e2e1bb1312033ee23e948089a2d654b790215fa44addae1b65947e176836668df960d5b5ac4a099ed475ec307916b8b93f2e32facc140e8655256c08d5927298be120c43c935e474d4ac2a12"}, {0xe8, 0x116, 0xfc3c, "882d7ed464c3bc2773ce165c139b836e66df7aac8ef06b5c701d8805db9b2a9d86549a6bbd91dae2b85aa4cd2354653ee4f570baa14878facf5da7f7d54b12b2bcaaabfd5725aae092473bce39478786442d89e510a7825d39986fd85f61927ff94479c0990b7f30dcb06b6e2af7cb68df3a5e4ec7b8288d6b4f08c0350b96949c06bf80743808237862f87839808b96650494cba04260b7c2cbc87ee869725efe933de8a3c69b84fe7f379ac35d8a590304e17611cdd7de2ea3365aa8cc1f0ca27e97180cfa8c30f9d85c133f22da951dcc"}, {0x98, 0x11f, 0x7, "71234185ed524950add379f588584d4fefff1c9a57a3d88f55acd75242a8cef36bc3303090ce216ea50fc2d551379f83062ff0764a736e6cde86fe662882683ff68e128a91ed4246dc324e23356edf3a72b7f9aa65445e2959f1dc5357c63f95425129347a3619dde8faaca89c83ea2be76b5ebd8f450b4663ec114ee2f0377a7cef"}], 0x1200}, 0x2}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002e00)="b216c438", 0x4}, {&(0x7f0000002e40)="fd2c8c1c10c68cd3da69795d355e9be0a15f9bd7a6654cfcf93f17f5bce8e6f7b3df4881f5b93644393a134faae8ce37a3d1521324bc4e05b2081c2beb1fefcb8dda0897502d5bc761762ea7564978528a60f4ce71eb4025027d0e64fd3cbbb432469bd90486216b017bb4b4c0909feee47a13df175bf1ac9cf537f62baaf11411bfcbb1611603af05b0c14c11", 0x8d}, {&(0x7f0000002f00)="829c343fb2a4378d926654ac0cd5aa58b1ba33a47526353122799c144e9f6bc36e8db2aad4fad8e7d41cd5cc71decb04feba0b04fb001c61811d0182edc1c7dd66b33ad7d1c11804e99721fc230917fd53479dacc06274d5317adefe01c4b9f48c3c63a9cf038a60e0643e03d2fdeb554a14d896f2c2201a828db8f25f63b9ede298974aaeeaa9442e7f369db29b9c80d6111a3d201e601c59a136ed40cf9aa2a15fdd9fa6a099c88c74084d96316f13642cb662bba71a88", 0xb8}, {&(0x7f0000002fc0)="7b8c7d9fe910079aa2a3d05d3778cde4589f21b2578de8aebb869a79ab740a3e437093d057baf2c70f120daa99cdfaf4ed344b2705f37845b4217813b37764731f609d08efa84ea76f77fc9b022e3c4a84aa9caeefbd6412450c89826630c8c0fd782ce14cd649d33f9f02572f097e8ddc37293588906bdd544b91152572d6c5573e941f51f151045bb2cf7912eada6b5072eddd62340a8bca2d7d986a4691651468e73a478d22680c51d0244927681a620531b4303f00aacf885502f18862cc7ef9610f75e638561f732510434ff16cf365175c645227f6c1a49fc7fd9cf5becc", 0xe1}, {&(0x7f00000030c0)="d1fa0d2af7251acb09b8dd8b62d4ac2d5731e66a230393b1e7ab7cac83ca859c09406d2e0d25650c1f3bb5e51a97f30b9d159c23aa692fa437a1f22b1ab73b0253b729c05521d39673ea8b00fa2c568a84370373bcc84852e4d4e14a9ed60383cad6458c6a71707ec5bc938f5e3f4f6896cab1e6f89cd2c3fc785de4a0cd22ef3950b13284314dae84e33f2dbd3934e014927223d7c6c06d59abbd324d6cd7171902a44af5b03c3db11ba9ccf0012fa93010bd026572b57e7ec2ab267ca55ea65fff6849", 0xc4}], 0x5, &(0x7f0000003240)=[{0x18, 0x0, 0x1ff, "c0c7"}, {0x38, 0x116, 0x7fff, "bdf2aa7eca603dd70d5d2f3d5cc4650e30f23c521f9086926150735ab42df4c3178dff"}, {0xf8, 0x107, 0x7, "d5f701181897b9eb599af0fd8497dc8d268da1ba93949039278ef4914bea7f7f81b5dbe71d180320cf467f8eacf3a8457e51e0ed35ade6d2951273d2b6d88fddb554bbd864d166e07482eff015217940c9c6f82ce314a3195c6111de58dc2fe0d04516e7f78da747118cf91ce79e0f1cdbde38789d645489c8f90a3bca5db583c2807a7c21ff6db91eaaf8238f21839d510a8c9b065a8135e5715a3b53a0ab679994dc0a9248586c6ec3efb4158ec92c8d0a1f527fb82c79610db7adbb0d2fd018544e63c312ae56c7f1ca3cf49199b79fcb5e1635d50067e08ab70bc4519fb59237"}, {0x98, 0x108, 0x0, "afadd2b56dd27c15575f344dee2198a2706ccca1e648918f29cda2582c461b27ea42f9d15ac9103e8f3b81a40bbb7ee418669efae1bedabde0ba3d64188f297f7cf4186979e0902ac21f74387745e089cf8019e60d5cdbb533152c6e8b725d0f0fc775a46fe07925b5e58fc98cfb3f8ba8cda0834decf71d29134e38a6ad0e49bd5b0560f966"}, {0x1010, 0x107, 0x4, "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"}, {0x110, 0x10f, 0x8, "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"}, {0x100, 0x197, 0x0, "6560b093d458c6fbecba4e33af859c81581405fca8dba499706539a81a3dcccb5b106b44b8e5bd9cb99369bfa997255c3995332b8cfba092145c73b2d1f6211fe02d0093125615aa1cc78c96e5a2700a98e241d75ff83a7215634218c4ec7bb7d4dd6e785481c1c58d811cb6894c5464b76587156631205a87f1f33dccd52695841c02eb401511d1b73177e8983e216f098052f0b74eabcb0e458fe50fed1fec12630ddf69ef77cc31445d9393ce2cc7e7af321e80db43c05f5a22cf06d32ef51f2584bd98abe4dcc23ef304e2ebadaa073a2be87c1ff46ec3faa033ae1b6d01fce610447c6094cb34"}, {0x88, 0x3a, 0x10000, "85d4ca01f1ad723bfaf0678dec94e8783e3541c91afeea7b7f536732d2f58728303250fa612cba23872321ac0d21dc03c5dbd7be900cfa43d0954e9ba187be3f0e998d22a7a391a2c11d6a696d9f83bab1e0b5863b615b91a2eca569543ae60a68b96010dad62dd9813fc365ea7cb40b0aaa6b"}, {0xe0, 0x116, 0xfffffffffffffffd, "75e03b7caf16f73e8b819f33d38cd72cd4967da0282c519255452ad9650743438afb1f2f3a36a0c1e51acb1c613452b195de501d92707f8883445d5f4be52370545fc2189fd226137f1b30c727e85d2da719f68c0d9abae4d8f499700110f563fd50ecd637496db3e00d21398dbfa3cc4f23d3762b39c00bebad390b35cba0340022cde5daa5aa07297e31ec3042372d480b8c1dc5855d3fb7846592f9a6408f64c2abef75ea7504a9da07c283439795be44fc070a3bc6f76c8b362b5cd3f813f3b0a8c6d5c926e40f55aa791051c820"}, {0xc8, 0x108, 0x5, "02d22f49f2a1a9978c23f350d7d1af405482d46bd60ac904ceba632fb44dcb290adc5e1ec11b7aef785de6af44db08c58f61efa957be183bba9920394ccf8ba74a2b36582fc66d6000227840ba41ae05071720fb85e871441e0e7545e453684e7c006e8c6bcd34f36c3d49580486e3ca9b0849da02ba00dfccb343d96460a82f36a47c1c8c9fc2b5bc7f28ac6721abd815c16f9697941166e89001e808019f2bc8a55f5afdc9231f3fda2221f748069ad1"}], 0x1630}, 0x4}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000004880)="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", 0x1000}, {&(0x7f0000005880)="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", 0x1000}, {&(0x7f0000006880)="5860a3d6dc3496715eb1af951395d5df5afb90fff9d31681fc9c58730960cee8b6cb072aeab56101f1a9e50ce016b33cabbc9be0c322545be397f9b1a16342b6ebfb21fd98ec2c3ea3f5fc921ea203c14383a94d2e1f701c1bf7a6368966409e6576d7ae82dbee5e9a037b0e621af2d1cf55e4d4559cd697f938c98aacee08547090832f22b8b0d883e4766f81b5984cd0586772d51ce58b39db5f3a079181e4b07082b4e57027532bfa4c291cf0c6bb9cc2ce0c398aaaf43bb60ce4f696ed28739900d3726c9dd4c552c4be5e72f659d8f9f9facefe3170db3a993a3ad6b543813e82fa986252cd87ed6d8706bdfc5c4d6a8b69cbc48b", 0xf7}, {&(0x7f0000006980)="f658d137fa3a778622489672bab3229ed2b3ea93ec485f34fd90b545466131e3fa823aa3a532ac69ec1a7a909e3835b4a32a512e28b3780204579835e1df30e418f52a8ab9f430579d2fbd90924b67839e274a4bf434e1c72df0b88330774e77354370a911f7f02a72e515b6b40a35fc4c13b35ad59f5211d59a2bfbc8cf0398c112c5d86abc38f080acbfd3247b9d67c98c163a0986853a8b0f7b2aa94bda15b493824e47006e278b95cd15d04f96bdd4fa3d60a3aeff18ba8ab1d30aba203defe1", 0xc2}], 0x4}}, {{&(0x7f0000006ac0)=@un=@file={0x1, './file0/file0\x00'}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006b40)="3c8bb9da2a6e26bc827e424e6c2d9cd8f4fb2091c2e0ed8aeb5665980bec682eb46020f983861d492c94a7f1ecc1bb4c8113f1e343fc5455b9482dca2715997a38169237371583ac13fc6dbea9cb888fc57d", 0x52}, {&(0x7f0000006bc0)="9d832769ee6fad92839f3e44f8003b4757aed8e75f55b6df7294c0b09162077bc9918dffff737ca3d12ee010cb3a8d434d95849e0a254ff58e28fd0d48d845886bf3812a6cb82b38b1a78d70567482438c6b593bc04f8cfcba79e8a4a1297815", 0x60}, {&(0x7f0000006c40)="d143cf132e081296196aef58f0f581a63724fca8684d40d7a8d23685108b831774bab53d31ec473cf45d607efe0924d7c63c65a031a4be9c4b51fcf1cfecd0a78e29799447fb31238796663c217da23896b4eba6bc2ec443c1be405227fbc78d2f579b28d9a509fb13fc8ca17573516f3fd0c78cec37e7b557d150e7b41f49eb56651e52e52778c73077aadf0bb79655292cb5cb9fec675d38968888900f0f7da7e2fa9f2e840521ca005410fbe2dc06220251c27a19710cc54bb5fd9894c23942b324e04921348b1881c85d41f350b4d595722d", 0xd4}, {&(0x7f0000006d40)="0194fb5e26d5a382921554506cb02671238048ec7e7835d4e09ba5fd57636e654ab7c1849c36bb8e6fb1d4f5306c2d9e91dece2ce36d456c16038ed3615f968bb1be63b5e48dd1bdaf97f0a72c1fb6c4761a187c477d00b6f6fc89716a4866e8944fa8b7351e511afa71f2382e70353c", 0x70}, {&(0x7f0000006dc0)="2967ad07dd51534dfd9e10e462faaf9d", 0x10}, {&(0x7f0000006e00)="a7b72d4711de94f1964478d7440c885295225223fd6d6b776f63ddf6515c3050748b0bfaf0a4d1470d74d69756ce6d6276d91dc81415204c3f24623f6544b7f1bf1e28881f1060ab6b3fa4e8f271b3f7b7cc91fbe93067cdcb5dfa1cea9117f1e96cc85c889b5daee347256ce6443984b5deeecee9a410a1046eb59e0a640b59954909fc03609942c940a8172633963c594f968e8312fa3738b537a1db004d1cfc5d3ece0a538fda03acaa43b8fdcbf4e49476cf068ad5a300ed4f2241d5a7acffd36c", 0xc3}], 0x6, &(0x7f0000006f80)=[{0x38, 0x6, 0x40, "565bb9bc3f9cba48b4d2bff25e04b37081e063b5b5aa1bf0f358eac32afbc289aa56"}, {0x90, 0x11f, 0x2, "27dcae9522612ba6237b7b649ff6c165444eef5244ba47e1326eed4b0dc91c13d6ad970dd93b9e58bfac573b56cf5b39754c52486091d67606a9c02794479d59331d674642a95c1b7d62acf9a5a2663594f7b4dc73c5cd8e70ae0062294499afbe45fce99612090cd6c671f7a98c068b4359ab992415879596999ff6"}, {0x30, 0x108, 0xeed1, "cc9f2c49e96fc3efeb7336b2cf0086aa27793fa0afc3a54cd6f7"}, {0x50, 0x13f, 0x2, "20cdcda84c1072f5f9b69560b61ed629f4e6d4f7d78b06d0eb9e179bfcb3a90288a43b3ea48f0b97db1fc69cb4b46caf0a28efc22c6b351aab70d73a88501d86"}, {0xc8, 0x1, 0xffffffffffffffff, "50f95b2bb0f2eb62877afdaf4dbcf784e93ddf3c6984c1c131d439df1a83839323f3e5dff970dafda6a88806c755471dcaccaa207e4483044053fbfff28cedac5470bd45818f010bb28559d051fbf5a5378571b543e0b9407e781249ca15650decc13fc6bb08b664d3e886456fb2972ed21169f956028a796fb4bdc253d9dc7b174f539c3df55c940a6c31f5c52a306f32ea69496a0d88c95c7c0b057101da2fe118739247127b6bc64e106cb154a67b72ded2e0a9f0"}, {0x1010, 0x0, 0x1, "e59cc15f08dc7e7cb1f0727d5939323a4a3ea5edc0cd0488d8658c2a1035f7f8ace406b0ad6322e7047e4ca632ca715c1fec4b43f0c204602778640c111bf98dd397c61f28d9efe71cc52b7e64173a55454bc6c961b58695ec50d69d3e84f568f65855535647e0b74f38cd5132d014b6a5ea7fada21f962b22b279677b64cc08b79fab2f60d6286073f8993dbf2aee4e7757aa2a7ec5b678ea2a93a7325a90781c81e61a93166f86ddbcf9ddb1408c7ba95bdc13838002eae9d2c034930f8cc66ddb691e4234f55a4925c7ef1391af1352c76a98b32d146b633eca94c63d6383648d9a31abf2c629062c0875b1a7d7366e2695f5e75714a1eb1ac6b139b04a0365c06ec868f3b2fdc7d34e2e1ff7cf98223e485a831d6314124b8f683a26338b07eb73fadafd573ca2a505b973f9a4bae898583d627d63a9912bf88c47e28e17a8f5e4c3cc1303849d81f89b02fe172985d6170740f5a798342c3720771aad9a0b6421f0bd488a7d6c7756a789dd9b9065aa0158dcfb831e5cde44652c5196b16b5a562fb8cb0e59588ee89313ec3c069108bc31906def41e1aea3b3ab208ba59f71b3d5db70b118ff652743f4ee5214615a61228317d730b8b1f6d9f834c31f9f9d41bc0df45b0090915bc6fbe856a9903a868a9c87b8f99b9c21c7e2a07f5c67c284af19422e1f1ee9979be5c13308bbe9ff4f758bac07a87f3e523fc70de52330665cb0ef0e7874d4a10c21ec4879d67629671e6b7d2c6c7b901082f8d34aaf7192e498787af81e7f7c852e6457a3bef255bc64e88621981eb10a2a74d4d49b000bea8474f8cf6fe03b643e9b88098a86c7c46cbd031061d5f663640fddfdc647351fe3bf715888a6a9905aa954f8d9b051e2bdc1d062e3f9a266dc80d548756c5aafbbfee2879da985762f9eadb59eb69d46f1bd2b35d1bc9bf9ae0d790f9d5828e40a80550b060c2d07cbe575d1f0663a158b61069e68d60365c8ea57486cb7aeb86a64cf2769860228a90cea69091e4be4dba31f7eb309f9d62ac7f10e483c6ae660c5e72cf134d9e1f2d0eef7b312ed0375cfba184ab290caf575394f8aa1049266e41289c3a25cf092cb43b640ff44eadcb3d9f74b3408341badb3b55540946c9c13c6c652346aa4a2320b2611190a4612ace4dd37e91342c391e8bc30582300af2a118c4da19362b202ab43fa31f5f3429816e4ea36927515889fedcaf84f30b81fbacbe4af03165a33a7ff3b0fa2b83c47d384a4180fe3b78d355be44dab2bdf14fe7308e8b21660813abde1cda9bc2c1ea774b39635cc59beb556ab827a6a5af541c9b6ca579df8c637ffe6b45f69d9b21889373e2ca421798081351156f75d15df7216bf7d8c43647bbdf36e0f8ab3ee832b05adeb2f7940bd55c3604d03afeafc780d9b9d0dc367cd8217046dfa534f06c8da95e885027d758e6867e8c87427e8ba7e71f585b8488a9baaecc487aa3e15ca3bb97b542456ebe25482bc51de38b46a89a6fb031d715643f0dbca31f3540d616274fb4c44218e73e896c9238840cc03c6cf84f804f69aa3a630a7988c5b32ba0b8cf4d329bfe7ce74618da6e251118ab88b42b3625d017564f3606d9c354c274675bf860e2e7d5771cef43a31b640f203219e3d480f30f34d39090f1365359791b9f3dd8a3555d6beedb82e3125ed1655effa7368e1c73fdc7347e7275e05a29ead2dbbadd5c3fd461bd443284b0ba12fe1ce874d7671593287f314b92e78c26bb8265a0c18acf02a4d1eca88967620d48a241bcd27f65b0c61a73fc0db20ce34a8954c1a3c766adb3fe9787aa85b0dd4079cb46b774e65f4a27c742a7ac5509181d7bd6f1090f75258a42fec7a657f503ee225610fc0f5009f6698f5feb66774837c26cb0e7f9f805ac12bf7db80fe963c55ed1d33194285d59a3ff2435916b556997a6e3e462445aac20d7d9ee5f65c687c869e6c7628ceb84b6a59bc495cbfc1bf5d60151357b5f960fd8162fb9e5bb11961b81a548e707b1406e7169377db166461ce30cb614b7139b93a25f28338251ba5e036784f07b3e0fbc64709d74ce86510fc07cf91382ba3ff06e129ea51a2c388ee54d5ff0de8d4108bfccfafba3fc4861483d255a7ddb3d328b7a181ab1ece86db47d68ebed30a4ae8300b29b70a577dd9837da1de86cb013401a4d7988c458e12513c5d1f3aa8c22a9331934b01acbe2eebf984774b9ad9890aeddb100e0d1a21eacd836661e3581d6fa66a2c3b6d5b651f6584554ea21583f276c3031190408d989196a4ed55147bfea35b947fc2576b92c181a96d9e0e66dafed787abdb51c2f9d9f11009326d4c936820b0d8bda1dd8a4fcaaa8a0a2aa20d26d203bac5dcceb7590332802a54518fc45e1257fd5e83478d3d243a9e9d47b4195a46600f685868d47191f20ac5156ce0fd102cf84564c804ecb19459c34cd8d2c2628f9bc76dfe7d33859999403453086f5f1128d2b76bab47cd012306c6cbefd2d0587c0d9545761f8eb0ecc7385e4e323a9efc59bb301e947b77013b6fd5466119b17ebf5fa0c35a14256df2603aa44385c647f264d64e8379f37ed10d363561741a88fa349f452b0c6b5f530702cd589336681a33cedbf7d1842b6cef93907bf551573b835c7b72e5fc8d63f1a3c0aa6c995daa7c04036cd68d66d0bcd60b786330342dcfbaf8b62426e1c9892c2b8f585f684a6253f02c49b5381ee7b112b95e92fd1eb19e7f50691123ff2859759a5680e090eb4e57d95df3ab222fd28e5b9b68441b919c891212be7991e0a1caceb0dfdb7da79f8d191c54008764fa633c668cb397b2daf0d2a5fcffb37f9535918322ecfcdc8155322ce6961ba230f163207872e1ed0cfa1cc2e1080b1c5a43cae934b94a3d60a7c191c86a27ed2ae286585644dc8f348025485b72c88379ad93497ec27ac62f32fc86b82474d38924f5e5494e364739d55b6c4d040acddde5efa039a09d7d06f5ec08bf3e880aa883787762bd4461095d99cbdbcf149cfbbd47854cce30bf00fd59f8b0fec264967a5936b22770fbb96123a77e509163ee6a57790fef6218c83e7002beff6bd376083c9e65798a352fd7578d2d0d568e8e1c3ff5ccee633d1722d49e0c27a6f29f1d78ace6c06d297de5fcc7b3082720d32d22db5ec0b0ae531e3380b1cde06cdf7852798c319d7680909e224ec14c1acc1b1314232e912101a49b5daf27a1c1a668384b49ffbbb3368487b3573ae7aa678f04ba1ed6f5287a491f56617e4fbf35b4892bf89d12b311d238b49b8e7f93cd28f2b3509ba8a4932131baa21ebfa1553b0f23e5462f794463b89520f958c7dbf983070e1b06a2f380a35d8f54cbd5bcafb6471d4635e3f326849df58677e758dbbe1773bb79747f9ed810cd173feae35cd7f9040c2ed1825a127e66a25efc09d9ff1f7ea58b464a3cda1726505ec79950de71020a24015ef44adb6111076ea0cf9b72077fac591027a8dbb999fdea1e0911904c0771bfb88907d12c6f184ab24a89110a903d712deabb892d83c5fe2c4b91530f8b8f6aa60a4359627a570c976fd1b1e2d793f167acda535b6da9fe2d867aa61241e02fa0510eac80af50fb3641beb92cd9ea0a0b0fe27b5e796aba39c32b6cff3a6892b28d5bded0f35ff08a046569067644b1402bee8db522f27af7098e7f67e84d839565c62eb9559e54d6e6bf310fe122b1ce76909e2b3b9c89b93f1afb79ef08129c104384659a7125198799ea016884968ab5b74c071c73a1c9df33145b504aadf4a5e73483969ab89777a655bb7fd25d037fe0cba2db76e820ffbf496eb5ecc51ca6a8281b301e3bac88f117119f872bf74afc0a1aea1bb0f21947fe2f4be1b6b6aaf284abcd35f8a8658f5d5f7cc771bd1182b8d0eed4aec40c813b397b8cf6d251923adabee7b46883c4a14271a458a9160c0159cd4ece14d40d372b6d0cc3c8be3a0761b2fb381a6c7b4794767ff75175f01ad327a1ef18aeeea479990368ef07d69583869a3de75b9e892cafe8bbb1e60e0cabb05f3f69dc7ef19aa4edc541df4e3d4f023dbf960a1eb2adf8094f2730c275555b1644bd0f320831cb9559355629e7d913e60318bef938d26f18835bbc67a503b459a6daa2b39187131b9568c36a53da86b040cabc9284b004f5dece256089534237f0f4a79a8b9cebf816c0bc1401c4fba351e1a306ce647457e045bf03387ce606dbeb62cf0e5e47827b517be7f29091d1748cb030bbb9a8bf61548fbabf9ceab719557f5f946a8e4e49ccd090e95a2feadd88c42bffe0c4c1d633ac68b88a3885800446f4c6ab6773024cf3f26e13613bee9eb04615b7d7c71dea719af4a05e9c19412bfdc84f0635388159461d8aec715439a1c0f835b60b3153aa9103184984c68979aead14bc1a8ec5f440708702bdf7ae3b8e60c82e9554711b32a9aaf9006a4511b030f38d27aaa036dd4324a5564d867cc85ee21bd5a06818d1886144cd20c6432af9723a01cb11b79a379863a5e3ab3f0cb907ccc45cc157501f75cd01a74a583bf96cfe878a44945419dff1960ed6b3d9aa6dbe9cc78d505a403d60855d90fb9f7fbe6d86f4f0894369d2ed0c1f62844dd177e2dd0c3009c7ee0e04339b53c0c58c0b0456b4063cc33d5637a34f90fbd51a133ceb52c8ad9c32c4d0180add480e9ab5cd89de7ddbd583e9a9733208f65e066632926b4d49fd0d582f112d08e5ae7661998e7dc7ddf645c1d657447fd1895c451677f34a0311170b5e9b3660baddf973c1adde82e5e46bc2fffded4a4e1af11fb915c3a5d2f5993dd5d1d1cbbc73b9ced4f25e13ac22945ba5311ad7c15845a67385791f9151b06ac6956efb742142f8e584c4a83fad550ffc82b57b64cd57a85af5b2b11fc345e8f8a20fc02930a75df491063b0f949f21b38c97b1690ae9f2764dafba060aa974f636541d09bc0a760218d21db738345324649d1b8a3471efd6f1e1b0582e471e2c94e7c21615d5e4927845d09b5ca275be45fd57e645759000e324da67c5167f8d2798f62b8771060b53ac0eddae612e6822f9aee316730e0caecf9d8113516aef845f95d805bc4de9ade4e6353b8e9f2aa39ede39a0681e21fae30c829d923079efacc3de65f3ea936044c4daec6c46f63c23fb8bbabebe3598e08bea9e6fa3478002333e15c55992bc61b7984009fa79c46f8211d22a9195f1dcd0ada0c3f3f8be7345d489a74bdcab06d366aedb9cdc1ace10bc6d56f80417d76f3943c69f93c20b2e2a12e214c2e9bba7f18f4b48a5ef514b4f8af9d5f34903216eb83e99221ed2a86299fe761a20eee5974a2e4fcb43bcd1e6689e264ba380eaef409a7821442be14583a7abf1a202984a8fc7abc3104026cecf1da1a9ef399c20bad27077668f5693e0b173188b27b92e80a507169bfe4cd0d5f430a2d3e1fc681debc2b3c5b3f54d63d4e095009f58e1eae63f760fe7e3e2a97c9e2bf6deeeae234a92d2c6f75ea3c5ac6d74d5011fcfc0f3c9d3c97fa899f97930d6e529f1610db13d5e01196c09266f8b481316bc606e8718177a88f892457bf7ebfd09abb5a599380ca7cc54308833c42012b9b9c6f262994a3c3e44cf31cfbec3d0f50ae57dba3937127a89eeb6e118a6e299bd54a405c69c810c59491c319b29868f8d9d8bcd211977bb0ebe0958cdc7525caf440314e3ca3cf59301a74071fc94407f3748b4f5e4393f31f2286084aa104cbf97454f96fad7c090ae9d2c02a1a453215c9078bf4dd3d16957752d1232b02b4830c0dc86fc0f18f8617cd328c1c7462ec3d8"}, {0x60, 0x10f, 0x5, "f74874f099359d71102651e03d2abe52abd277b1f787280813d45dd1fdf9b78e0f1670c6794b519909d7d01ddea31956ad5099af68e5e64080f06cc0aa2f0a00848482f306a0c23b196058"}, {0xe8, 0x118, 0xa586, "769d770f61fe4e9364a5d0e43ee64344c3dcab8505f599a655be031f3b575923dc88f7001caac21b621e0795cff652c4b0765b0d0644ac7416b1876d845bc4484d469fb44b6e0e75c4588a3d27cda68646e589f9cde0e99bedbfa4220a5007f60da13e82c91da8f31d1c0267a72d12e5910fb34afb9e4921649b827f85035ee4e3580606eaa290b1efec5c4b45b1a8d91daf9f1e20f3504b215c35d199016f59fea4cfb77a9260f3ed49afadde78f227c0defb3ca06fa700979bc95ee0d9cf159354523226c1d26a434dd410fb874ed3cc2414849fcd1758"}, {0x78, 0x100, 0x52, "27b1be558d6e387852dee98aee571cefb89080243ba258657f5c248c85eedf134efd60575dca7dd8709282b7f14f86845af10a7aedbe5a84be926230d61789d40a29cba1061b2ac022effb4a22f6a5089f9a1623f3f24847f9f6dca89023b18fc7172cb438bc2a"}], 0x13e0}, 0x800}, {{&(0x7f0000008380)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000008400)}, 0x6}], 0x7, 0x1)

[ 1471.003785][T17010] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1471.039941][T17018] binder: 17012:17018 ioctl c0306201 20000540 returned -14
15:55:35 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00099b0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:35 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xfdfdffff00000000, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:35 executing program 2:
r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

[ 1471.058061][T17019] EXT4-fs (sda1): Unrecognized mount option "1vºÃOìpjº9c~0" or missing value
[ 1471.085549][T17018] binder: 17012:17018 unknown command -1795162112
[ 1471.125355][T17018] binder: 17012:17018 ioctl c0306201 200002c0 returned -22
[ 1471.128649][T17031] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:35 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00099c0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:35 executing program 2:
r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:35 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000040)=ANY=[@ANYBLOB="d42cda757be9e8d17ec9f3946aaddd2a4c1e1273b9e516554c6ebad4f48f5222d3d2ef81892ee4262de70cfa1d2c2fc8d02baba7e788f6252865106a14"])

[ 1471.307321][T17148] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1471.391536][T17153] EXT4-fs (sda1): Unrecognized mount option "Ô" or missing value
[ 1471.514346][T17159] EXT4-fs (sda1): Unrecognized mount option "Ô" or missing value
15:55:38 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x7fffffffefff, 0x0)

15:55:38 executing program 0:
r0 = creat(0x0, 0x141)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="ff6397aa008c596c406758a78e77208c562181f04d9d711600ce03b3b68716dbd22581f0fd22ef64824d3eb3cd7b6056b57cf27c807a611067df580a0e667a69eb9cf9eb9abeb38f30503cb251774840a1f203cff0757e21ff7b1f7bf8cf4f3699f3835ac6f34b857dd8d5c4cca18819566986a6fd812ff019"], 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/174)
ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, 0x0)
open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1c007e967b2e6c4dcf3693e1021631a45fb752628d00000000000000"], 0x80002)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={<r2=>0x0, 0x8000}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r2, 0x1}, 0x8)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f00000002c0)={0x1, 0x0, {0x80000001, 0x1f, 0x0, 0xb3f0}})
syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800)
ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000280))

15:55:38 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x100000000000000, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:38 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00099d0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:38 executing program 2:
r0 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:38 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
getresuid(&(0x7f0000000180)=<r1=>0x0, &(0x7f0000000540), &(0x7f0000000580))
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file1\x00', 0x100000000, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000200)="15b6de252cc2d5f6c06acb1b831748feb4fa959cab40bf5079bbb2022f412ed0f7ba8bcac5ad578154a9998a042f20fe09e3fc39aee8a7b2ae43214e57b4da2908d53bca136365b2cfa416a877753c4e99b917c2f07c618c4a93613171d4db5f137fcb597ad7d6309695244fab32a6a11c36112abb3e73b8d2c3fb696cbe20b4b542208e29384afc2d15165085bd83e1039fe998c278b19082e42796134eb4b99a9873556b20", 0xa6, 0x9}, {&(0x7f00000002c0)="65b2a2b78e57c4ae7c8d378dc6c539deb795c3351d9323f462be62806116f1eff1e9305cf60bbef6c04418ca78ea35c72d276d8c550a0cbe1670ff857275dcc06732e7a815651cbdc1bf16712d601c86c1bac39aad0010488dd802f3e9207fc8fde35d1e07de9f0327ff7666686b63b74c7628d8840f29f1fe73e6114b26f65004522a57", 0x84, 0xd4060000000000}, {&(0x7f0000000380)="3c073328a50ea9150f587104d08f87cf07b91292c392e7021bf533f3e0b900ddf49972263e06a103cb5eeca1f02cae4a446ee2ca711adffe32c83a1183e3aa30f039044c0c28b48f489c8374ca17942ce10fafff", 0x54, 0x5bb5}, {&(0x7f0000000400)="ccb779bdac2f0d4a513fc8bd371ce4c1db9282ab7c74d31d3ab96042b963df5be69ba56f1e6debb2615ab78ca273803a57157ec0e8bed46dd4e5105d6ec8ccdf01fe37554443286280fd7ccb4adab27cfc6dfa9894798b702377c006599e50523b511bb826de59b0276e9c41bd4c73903fa6d160b0ff244be2f09125c7bc1001512cc7834beeeb9921532e3e3693160a9fd56d4e01ea2093", 0x98, 0x2}], 0x5810, &(0x7f00000005c0)={[{@nodots='nodots'}, {@fat=@quiet='quiet'}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'noquota'}}, {@smackfsdef={'smackfsdef', 0x3d, 'noquota'}}, {@seclabel='seclabel'}, {@euid_eq={'euid', 0x3d, r1}}, {@subj_user={'subj_user', 0x3d, '-wlan1csecurityvmnet0'}}, {@appraise_type='appraise_type=imasig'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]})
fsetxattr$security_smack_transmute(r0, &(0x7f0000000680)='security.SMACK64TRANSMUTE\x00', &(0x7f00000006c0)='TRUE', 0x4, 0x2)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

[ 1474.079906][T17169] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1474.111523][T17175] binder: 17167:17175 unknown command -1432919041
15:55:38 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140))

15:55:38 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:38 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00099e0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1474.123372][T17175] binder: 17167:17175 ioctl c0306201 20000540 returned -22
[ 1474.134337][T17173] binder_thread_write: 6 callbacks suppressed
[ 1474.134364][T17173] binder: 17166:17173 ERROR: BC_REGISTER_LOOPER called without request
15:55:38 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x7ffffffff000, 0x0)

[ 1474.222531][T17173] binder: 17166:17173 ioctl c0306201 20000540 returned -14
[ 1474.233011][T17175] binder: 17167:17175 ioctl c004ae02 0 returned -22
[ 1474.258165][T17209] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:38 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a00099f0000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1474.319816][T17223] EXT4-fs (sda1): re-mounted. Opts: 
15:55:38 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:38 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x3f00000000000000, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:38 executing program 0:
creat(0x0, 0x44)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1474.441678][T17302] EXT4-fs (sda1): re-mounted. Opts: 
[ 1474.474176][T17312] binder: 17310:17312 ERROR: BC_REGISTER_LOOPER called without request
[ 1474.477097][T17315] binder: 17311:17315 ERROR: BC_REGISTER_LOOPER called without request
[ 1474.484675][T17313] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1474.509125][T17316] binder: 17311:17316 ERROR: BC_REGISTER_LOOPER called without request
15:55:39 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001280)={0x0, <r1=>0x0}, &(0x7f00000012c0)=0xc)
getresuid(&(0x7f0000001300)=<r2=>0x0, &(0x7f0000001340), &(0x7f0000001380))
fstat(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vga_arbiter\x00', 0x301001, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xffff, 0x3, &(0x7f0000001200)=[{&(0x7f0000000100)="d56e208aabdd895b1f688eb89c3ba60277d5eeaaf36a4ff666090f110188b7db8049292925192d7b880be03f5a0bcbc0e176e7", 0x33, 0x4}, {&(0x7f0000000200)="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", 0x1000, 0xaa}, {&(0x7f0000000180)="9ef62d836a97b7dd", 0x8, 0x200}], 0x8002, &(0x7f0000001440)=ANY=[@ANYBLOB='auto_da_alloc=0x0000000000000003,discard,discard,nomblk_io_submit,noquota,nojournal_checksum,subj_role=noquota,euid=', @ANYRESDEC=r1, @ANYBLOB=',euid=', @ANYRESDEC=r2, @ANYBLOB="40d672eecee8640e", @ANYRESDEC=r3, @ANYBLOB=',\x00'])

15:55:39 executing program 0:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="518300260c000000000400"], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x2b, &(0x7f0000000040)="88fc5b6d245bcca763e143b45fa3a0962c6f63dff43e52d1b3504f39562b8b1fab880e1d47274474dfe09648c0675a35c3dbe4cf0e503f7b7e851a3d70e8d4a5ae95b7beea53616ca752084073d67253b9ca718e88446980e805ad39824d834464240e5f6e0d298473801e31ef173613558bcd", 0x73)

[ 1474.526152][T17312] binder: 17310:17312 ioctl c0306201 20000540 returned -14
15:55:39 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009a00000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:39 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

[ 1474.636147][T17343] binder: 17341:17343 unknown command 637567825
[ 1474.653011][T17354] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1474.676060][T17343] binder: 17341:17343 ioctl c0306201 20000540 returned -22
[ 1474.690942][T17396] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:39 executing program 3:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)=ANY=[@ANYBLOB='noquo~a,\x00'])

15:55:39 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0xfdfdffff00000000, 0x0, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1474.732056][T17420] binder: 17341:17420 unknown command 637567825
[ 1474.738665][T17420] binder: 17341:17420 ioctl c0306201 20000540 returned -22
15:55:39 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

[ 1474.873039][T17438] EXT4-fs (sda1): Unrecognized mount option "noquo~a" or missing value
[ 1474.884361][T17437] binder: 17434:17437 ERROR: BC_REGISTER_LOOPER called without request
[ 1474.913676][T17437] binder: 17434:17437 ioctl c0306201 20000540 returned -14
[ 1475.011001][T17545] EXT4-fs (sda1): Unrecognized mount option "noquo~a" or missing value
15:55:41 executing program 0:
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x0, 0x0})
r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x204000, 0x0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000))
ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, 0x0)

15:55:41 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009a10000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:41 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x940000000000, 0x0)

15:55:41 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:41 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74fa2c002b58a3b634ce0ba5d8539a310fea413ee471885fda2afe0a4c90cd22e6f236acf1edb6fdab7e0393387e2bf84b533ca835cc9d4ec4799d126c6518000000000000000044ecbabba2226503e62548"])
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r1, 0x20, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x89b}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000280)="728103d8b61e6651d9d9644929a918633e46f4c7634c807f67cb95985038aae33bba17a679eec8acbbb8e1e1271501c67bf63817a06568422f901703f4bff036839a1968af4a243c86cb11c885da96e5d6ba8d9f32afbd56046fc684695bc1ac9a868d")

15:55:41 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x3f00, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1477.313834][T17558] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1477.341546][T17560] binder: 17553:17560 ERROR: BC_REGISTER_LOOPER called without request
[ 1477.342288][T17557] binder: 17556:17557 ERROR: BC_REGISTER_LOOPER called without request
15:55:41 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x17, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

[ 1477.366186][T17555] EXT4-fs (sda1): Unrecognized mount option "noquotú" or missing value
[ 1477.387717][T17557] binder: 17556:17557 unknown command -1795162112
[ 1477.394421][T17557] binder: 17556:17557 ioctl c0306201 200002c0 returned -22
15:55:41 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009a20000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1477.417104][T17571] binder: 17553:17571 ERROR: BC_REGISTER_LOOPER called without request
15:55:42 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:42 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0x0, 0x3)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="987862d770f039600b630000"], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1477.498627][T17619] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1477.536234][T17564] EXT4-fs (sda1): Unrecognized mount option "noquotú" or missing value
15:55:42 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009a30000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:42 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x1000000, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:42 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:42 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0x31, 0x23, 0x2, 0x13, 0x1, 0x3, 0x6, 0x108})
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x7, 0x8, 0x5, 0xffffffff, 0x0, 0x5})
ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000180)={0x0, 0x2d, 0x7, &(0x7f0000000140)=0x1})
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000200)=ANY=[@ANYBLOB="c81eba33e5e0d7b91f5f6eed87cace3b200100d1896f74612e00ca6ddc5fb50b67eade1955e0ba32c9a78898c992cf99801a35edbe51c89f46e7a8deab090800000000000000687279270a8173d47294eb51b8de23072ee96e3971a6b6b2b39ee7"])
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x80, 0x1)

[ 1477.620337][T17686] binder: 17685:17686 unknown command -681412456
[ 1477.628934][T17686] binder: 17685:17686 ioctl c0306201 20000540 returned -22
[ 1477.680311][T17692] binder: 17685:17692 unknown command -681412456
[ 1477.692989][T17690] binder: 17687:17690 ERROR: BC_REGISTER_LOOPER called without request
[ 1477.710461][T17693] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1477.766441][T17692] binder: 17685:17692 ioctl c0306201 20000540 returned -22
[ 1477.801293][T17744] EXT4-fs (sda1): Unrecognized mount option "Ⱥ3åà×¹_ní‡ÊÎ; 
" or missing value
15:55:44 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009a40000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

15:55:44 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x50710000000000, 0x0)

15:55:44 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:44 executing program 0:
creat(0x0, 0x0)
r0 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05bb6efa05949f38543efd66925c83b8f622b8a35ffe63df1cddafa4a71c08cd47125d74940ee919586ff8176a8d8d45cfd0207476140062f29d3071986da19f12e123afeb63629874446da8f83b9d15f6d4475a5d723c1c291cbf1f00e267240080b37133c65fafeae7123995e9a99db7671209401cac6ffba89a8efbc4ba9fd8f797cf9594a03ba3b2db17456167666c8aea7ef5963761cf343d5716e3606157f269a7651dc8d409521a3ae7571f2eea5c27b29967fec100000000000000"], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

15:55:44 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x3f000000, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:44 executing program 3:
r0 = accept4$x25(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000180)=0x12, 0x0)
pwrite64(r0, &(0x7f00000002c0)="e2aa458b8785a72a676bd00d0fa26667ce20d86f9906dc6cd23d5776d9451bb48f1b16c37b58dd16f545e97f5e60b63eaf0d63c18a5fe0f83f5a93e323276812633751e62f67aab5bc99ec9df9d189020cc2284e50bb85e9a8c283938a89f511b8fb19d87dc72181a24aca61fb003a343f3daccd6ea4ac7f1e0b0a7aef78ceeb01fabc4245c15b6cab69d80462da2ff23e3107b797f769a8ef33eaac4a56c735bed80d4cbdc38186707a68", 0xab, 0x0)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xfe)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f71756f74612c003d6f482b0624363726b2d493874d0b67cfd27d38f831"])
setsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000200)="7c8f360912fe0c192a90aa30d1e82668d14f10101a89e4d6a513fd6185e3fa0f8ead1542fe017cad09833cbadd525f156c7890b42b1331368abde9c417baa5276ce5096127028ce0caaeb537b9b0b4bb5394fbaca3f98d12b53cb65ad870a76ca8a933b58715a0b3906f9973aabf467163df43cf0be7354b4c409808d8d36055a52a50f097c89c43e3b8c6f1e522fdd8d5474d8b334c", 0x96)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f00000000c0)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}]})

[ 1480.435087][T17816] binder: 17810:17816 unknown command -93406459
[ 1480.440059][T17817] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1480.465697][T17814] EXT4-fs (sda1): re-mounted. Opts: noquota,
[ 1480.474690][T17819] binder: 17809:17819 ERROR: BC_REGISTER_LOOPER called without request
15:55:45 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x0, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

[ 1480.479620][T17816] binder: 17810:17816 ioctl c0306201 20000540 returned -22
15:55:45 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009a50000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1480.506912][T17819] binder: 17809:17819 unknown command -1795162112
[ 1480.513851][T17819] binder: 17809:17819 ioctl c0306201 200002c0 returned -22
15:55:45 executing program 0:
r0 = creat(0x0, 0x0)
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0)={<r2=>0x0})
syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x401, 0x0)
ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000000))
ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000080)=0xf)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)={<r3=>0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f630c4001000000000000000000000003e8fa36", @ANYRES64=r2, @ANYBLOB="0b63000009631040", @ANYRES64=r3, @ANYBLOB="010000000000c7f60ee95244e9000000"], 0x6d, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)

[ 1480.553604][T17827] EXT4-fs (sda1): re-mounted. Opts: noquota,
15:55:45 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xfdfdffff, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1480.604441][T17904] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
15:55:45 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x0, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:45 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x101008, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000380)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7ff}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'noquota'}}, {@smackfsdef={'smackfsdef', 0x3d, '@'}}]})

15:55:45 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009a60000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1480.809778][T17944] binder: 17942:17944 ERROR: BC_REGISTER_LOOPER called without request
[ 1480.831383][T17949] EXT4-fs (sda1): Unrecognized mount option "smackfsfloor=noquota" or missing value
[ 1480.862903][ T8307] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16535: comm syz-executor.2: corrupted xattr entries
[ 1480.866140][T17953] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16538: comm syz-executor.5: corrupted xattr entries
[ 1480.906384][T17953] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16538: comm syz-executor.5: corrupted xattr entries
[ 1480.965109][T18047] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1481.197842][ T8310] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16516: comm syz-executor.3: corrupted xattr entries
[ 1483.279501][ T2616] device bridge_slave_1 left promiscuous mode
[ 1483.287034][ T2616] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1483.362231][ T2616] device bridge_slave_0 left promiscuous mode
[ 1483.371025][ T2616] bridge0: port 1(bridge_slave_0) entered disabled state
15:55:47 executing program 1:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
clone(0xfffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
clone(0x40000104001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x9b})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0xc0700000000000, 0x0)

15:55:47 executing program 0:
r0 = creat(0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0xb61, 0x101, 0x5, 0x8, 0x3ff, 0x7c9})
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='o\x00\x00\f'], 0x0, 0x0, 0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, 0x0)
syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1800)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000940)={0x0, 0x0, 0x2080})

15:55:47 executing program 2:
r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_notify(r0, &(0x7f0000000600)={0x0, 0x0, 0x1, @thr={0x0, 0x0}})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)

15:55:47 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0xfffffdfd, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

15:55:47 executing program 3:
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x4)
ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000100)={0x2, &(0x7f0000000040)=""/113, &(0x7f00000000c0)=[{0x6, 0xf1, 0x8001, &(0x7f0000000300)=""/241}, {0xc7, 0x1000, 0x1, &(0x7f0000000400)=""/4096}]})
mount$fuse(0x20000000, &(0x7f0000000240)='./file0\x00', 0x0, 0x101008, 0x0)
syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x820, &(0x7f0000000140)={[{@noquota='noquota'}]})

15:55:47 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009a70000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1483.462889][T18064] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 1483.462897][T18060] binder: 18059:18060 unknown command 201326703
[ 1483.462916][T18060] binder: 18059:18060 ioctl c0306201 20000540 returned -22
[ 1483.474379][T18065] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16536: comm syz-executor.4: corrupted xattr entries
[ 1483.521579][T18066] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16537: comm syz-executor.1: corrupted xattr entries
[ 1483.539641][T18065] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16536: comm syz-executor.4: corrupted xattr entries
15:55:48 executing program 5:
r0 = socket(0x10, 0x80002, 0xc)
sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000040)="24000000030607031dfffd946fa2830020200a0009a80000061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0)

[ 1483.567341][ T8317] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16505: comm syz-executor.5: corrupted xattr entries
[ 1483.595165][T18066] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16508: comm syz-executor.1: corrupted xattr entries
[ 1483.643069][T18067] binder: 18065:18067 ERROR: BC_REGISTER_LOOPER called without request
[ 1483.671317][T18060] binder: 18059:18060 unknown command 201326703
[ 1483.692602][T18060] binder: 18059:18060 ioctl c0306201 20000540 returned -22
15:55:48 executing program 4:
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r0 = request_key(&(0x7f0000000080)='trusted\x00', 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={'syz'}, 0x0, 0x0, r0)
dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000)
openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
creat(0x0, 0x0)
unlink(&(0x7f0000000940)='./file0\x00')
r1 = syz_open_dev$binder(&(0x7f0000000480)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x4020011, r2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x4, 0x0, &(0x7f0000000900)=[@register_looper], 0x0, 0x100000000000000, 0x0})
prctl$PR_SET_NAME(0xf, &(0x7f0000000380)='/group.stat\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000095"], 0x0, 0x0, 0x0})
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
getpid()

[ 1483.870259][ T8314] EXT4-fs error (device sda1): ext4_xattr_set_entry:1603: inode #16503: comm syz-executor.4: corrupted xattr entries
runtime: pointer 0xc42e59e140 to unallocated span idx=0x72cf span.base()=0x0 span.limit=0xc42e5a0000 span.state=0
runtime: found in object at *(0xc42fa8a000+0x16338)
object=0xc42fa8a000 k=0x6217d45 s.base()=0xc42fa6a000 s.limit=0xc42fab6000 s.spanclass=0 s.elemsize=311296 s.state=_MSpanInUse
 *(object+0) = 0xc428d5ee00
 *(object+8) = 0xc429049800
 *(object+16) = 0xc4255aeac0
 *(object+24) = 0xc427db9000
 *(object+32) = 0xc428f98440
 *(object+40) = 0xc427cc6840
 *(object+48) = 0xc428d0f740
 *(object+56) = 0xc428d0fb00
 *(object+64) = 0xc427730900
 *(object+72) = 0xc428cb8200
 *(object+80) = 0xc4281e05c0
 *(object+88) = 0xc4281e1c80
 *(object+96) = 0xc428847a40
 *(object+104) = 0xc428847f40
 *(object+112) = 0xc4276e9c00
 *(object+120) = 0xc4256c6600
 *(object+128) = 0xc4267593c0
 *(object+136) = 0xc428d49940
 *(object+144) = 0xc428d49f00
 *(object+152) = 0xc42858fa40
 *(object+160) = 0xc4267aea40
 *(object+168) = 0xc424336e40
 *(object+176) = 0xc42543c800
 *(object+184) = 0xc4274bd4c0
 *(object+192) = 0xc4267c5f40
 *(object+200) = 0xc424323f00
 *(object+208) = 0xc4254215c0
 *(object+216) = 0xc4214d5c40
 *(object+224) = 0xc427fdc980
 *(object+232) = 0xc4271bc3c0
 *(object+240) = 0xc42823fd40
 *(object+248) = 0xc4271d8bc0
 *(object+256) = 0xc425709100
 *(object+264) = 0xc425539000
 *(object+272) = 0xc426d7a040
 *(object+280) = 0xc426b162c0
 *(object+288) = 0xc4280c36c0
 *(object+296) = 0xc426903380
 *(object+304) = 0xc4285ef9c0
 *(object+312) = 0xc42737f2c0
 *(object+320) = 0xc4247005c0
 *(object+328) = 0xc425211880
 *(object+336) = 0xc42138ba80
 *(object+344) = 0xc42894b100
 *(object+352) = 0xc425348dc0
 *(object+360) = 0xc4283627c0
 *(object+368) = 0xc4249a0540
 *(object+376) = 0xc4269c3400
 *(object+384) = 0xc424e59440
 *(object+392) = 0xc426883b00
 *(object+400) = 0xc427c603c0
 *(object+408) = 0xc42744c140
 *(object+416) = 0xc4256ef840
 *(object+424) = 0xc4288fe740
 *(object+432) = 0xc428884f40
 *(object+440) = 0xc428c2ad00
 *(object+448) = 0xc42907f180
 *(object+456) = 0xc4290d9ac0
 *(object+464) = 0xc4290fc540
 *(object+472) = 0xc4290fd640
 *(object+480) = 0xc42919d2c0
 *(object+488) = 0xc4291c79c0
 *(object+496) = 0xc42542e840
 *(object+504) = 0xc42542fe00
 *(object+512) = 0xc4254f0040
 *(object+520) = 0xc4254f0a40
 *(object+528) = 0xc4254f0f00
 *(object+536) = 0xc4255142c0
 *(object+544) = 0xc424657140
 *(object+552) = 0xc424a76440
 *(object+560) = 0xc424a77380
 *(object+568) = 0xc425758340
 *(object+576) = 0xc425758ec0
 *(object+584) = 0xc425759ac0
 *(object+592) = 0xc427c96700
 *(object+600) = 0xc426fb6200
 *(object+608) = 0xc426fb6440
 *(object+616) = 0xc426fb7000
 *(object+624) = 0xc4257dc100
 *(object+632) = 0xc4257dcf00
 *(object+640) = 0xc427a804c0
 *(object+648) = 0xc427c3f400
 *(object+656) = 0xc4255c6500
 *(object+664) = 0xc4277a11c0
 *(object+672) = 0xc4277a1580
 *(object+680) = 0xc42761c340
 *(object+688) = 0xc427f41140
 *(object+696) = 0xc427f41640
 *(object+704) = 0xc42692b080
 *(object+712) = 0xc427e15980
 *(object+720) = 0xc426a44dc0
 *(object+728) = 0xc426a44fc0
 *(object+736) = 0xc424f9d200
 *(object+744) = 0xc4288aa480
 *(object+752) = 0xc4288ab840
 *(object+760) = 0xc4271bee80
 *(object+768) = 0xc4271bfc80
 *(object+776) = 0xc426765ac0
 *(object+784) = 0xc426bbb940
 *(object+792) = 0xc426bbbd80
 *(object+800) = 0xc428bb6bc0
 *(object+808) = 0xc4285ac500
 *(object+816) = 0xc4285ad880
 *(object+824) = 0xc4268feb80
 *(object+832) = 0xc427727800
 *(object+840) = 0xc428cd5200
 *(object+848) = 0xc4289ec700
 *(object+856) = 0xc428be2200
 *(object+864) = 0xc427f4dc00
 *(object+872) = 0xc427ad6280
 *(object+880) = 0xc42736d500
 *(object+888) = 0xc42862e580
 *(object+896) = 0xc427a3e8c0
 *(object+904) = 0xc427a3f100
 *(object+912) = 0xc4288b2340
 *(object+920) = 0xc4288b3b00
 *(object+928) = 0xc426b5d100
 *(object+936) = 0xc42573c3c0
 *(object+944) = 0xc42573cc40
 *(object+952) = 0xc42573d000
 *(object+960) = 0xc428904300
 *(object+968) = 0xc428905580
 *(object+976) = 0xc42850cfc0
 *(object+984) = 0xc428543400
 *(object+992) = 0xc425498e00
 *(object+1000) = 0xc425499cc0
 *(object+1008) = 0xc427ae8240
 *(object+1016) = 0xc427ae8880
 ...
 *(object+90816) = 0xc42db43100
 *(object+90824) = 0xc42db43400
 *(object+90832) = 0xc42db43c40
 *(object+90840) = 0xc42db43dc0
 *(object+90848) = 0xc42d4040c0
 *(object+90856) = 0xc42d404300
 *(object+90864) = 0xc42d404e40
 *(object+90872) = 0xc42d405300
 *(object+90880) = 0xc42d4056c0
 *(object+90888) = 0xc42d405ac0
 *(object+90896) = 0xc42e286fc0
 *(object+90904) = 0xc42e287500
 *(object+90912) = 0xc42e287a00
 *(object+90920) = 0xc42e287c80
 *(object+90928) = 0xc42e287e00
 *(object+90936) = 0xc42e59e140 <==
 *(object+90944) = 0xc42e59ec40
 *(object+90952) = 0xc42e59f400
 *(object+90960) = 0xc42e59fb80
 *(object+90968) = 0xc426f86380
 *(object+90976) = 0xc426f86600
 *(object+90984) = 0xc426f86a40
 *(object+90992) = 0xc426f86d40
 *(object+91000) = 0xc426f86f00
 *(object+91008) = 0xc426f87d40
 *(object+91016) = 0xc426f87fc0
 *(object+91024) = 0xc42ab26180
 *(object+91032) = 0xc42ab26440
 *(object+91040) = 0xc42ab26600
 *(object+91048) = 0xc42ab27780
 *(object+91056) = 0xc427fd0780
 ...
fatal error: found bad pointer in Go heap (incorrect use of unsafe or cgo?)

runtime stack:
runtime.throw(0x92ea1f, 0x3e)
	/syzkaller/go/src/runtime/panic.go:605 +0x95 fp=0xc420121e28 sp=0xc420121e08 pc=0x42b955
runtime.heapBitsForObject(0xc42e59e140, 0xc42fa8a000, 0x16338, 0xc41f8ebc0f, 0xc400000000, 0x7feadffbf860, 0xc42001a560, 0x78)
	/syzkaller/go/src/runtime/mbitmap.go:425 +0x489 fp=0xc420121e80 sp=0xc420121e28 pc=0x412ad9
runtime.scanobject(0xc42fa8a000, 0xc42001a560)
	/syzkaller/go/src/runtime/mgcmark.go:1187 +0x25d fp=0xc420121f28 sp=0xc420121e80 pc=0x41defd
runtime.gcDrain(0xc42001a560, 0x5)
	/syzkaller/go/src/runtime/mgcmark.go:943 +0x1ea fp=0xc420121f78 sp=0xc420121f28 pc=0x41d73a
runtime.gcBgMarkWorker.func2()
	/syzkaller/go/src/runtime/mgc.go:1794 +0x1a9 fp=0xc420121fb8 sp=0xc420121f78 pc=0x457889
runtime.systemstack(0xc420019300)
	/syzkaller/go/src/runtime/asm_amd64.s:344 +0x79 fp=0xc420121fc0 sp=0xc420121fb8 pc=0x459e79
runtime.mstart()
	/syzkaller/go/src/runtime/proc.go:1125 fp=0xc420121fc8 sp=0xc420121fc0 pc=0x430120

goroutine 4 [GC worker (idle)]:
runtime.systemstack_switch()
	/syzkaller/go/src/runtime/asm_amd64.s:298 fp=0xc42001ff48 sp=0xc42001ff40 pc=0x459df0
runtime.gcBgMarkWorker(0xc420019300)
	/syzkaller/go/src/runtime/mgc.go:1760 +0x202 fp=0xc42001ffd8 sp=0xc42001ff48 pc=0x419ab2
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42001ffe0 sp=0xc42001ffd8 pc=0x45c971
created by runtime.gcBgMarkStartWorkers
	/syzkaller/go/src/runtime/mgc.go:1655 +0x7e

goroutine 1 [select]:
runtime.gopark(0x987bf8, 0x0, 0x8bacf1, 0x6, 0x18, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42edc5808 sp=0xc42edc57d8 pc=0x42d4cc
runtime.selectgo(0xc42edc5b60, 0xc42035c120)
	/syzkaller/go/src/runtime/select.go:395 +0x1138 fp=0xc42edc5a80 sp=0xc42edc5808 pc=0x43d8e8
main.(*Fuzzer).pollLoop(0xc4200aba40)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:256 +0x170 fp=0xc42edc5bf0 sp=0xc42edc5a80 pc=0x7ba280
main.main()
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:246 +0x1330 fp=0xc42edc5f80 sp=0xc42edc5bf0 pc=0x7b99c0
runtime.main()
	/syzkaller/go/src/runtime/proc.go:185 +0x20d fp=0xc42edc5fe0 sp=0xc42edc5f80 pc=0x42d02d
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42edc5fe8 sp=0xc42edc5fe0 pc=0x45c971

goroutine 2 [force gc (idle), 2 minutes]:
runtime.gopark(0x987bb8, 0x1751210, 0x8d8a4c, 0xf, 0x1752514, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420022768 sp=0xc420022738 pc=0x42d4cc
runtime.goparkunlock(0x1751210, 0x8d8a4c, 0xf, 0xc400000014, 0x1)
	/syzkaller/go/src/runtime/proc.go:283 +0x5e fp=0xc4200227a8 sp=0xc420022768 pc=0x42d5be
runtime.forcegchelper()
	/syzkaller/go/src/runtime/proc.go:235 +0xcc fp=0xc4200227e0 sp=0xc4200227a8 pc=0x42d2ec
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc4200227e8 sp=0xc4200227e0 pc=0x45c971
created by runtime.init.4
	/syzkaller/go/src/runtime/proc.go:224 +0x35

goroutine 3 [GC sweep wait]:
runtime.gopark(0x987bb8, 0x1751360, 0x8ce884, 0xd, 0x457a14, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420022f60 sp=0xc420022f30 pc=0x42d4cc
runtime.goparkunlock(0x1751360, 0x8ce884, 0xd, 0x14, 0x1)
	/syzkaller/go/src/runtime/proc.go:283 +0x5e fp=0xc420022fa0 sp=0xc420022f60 pc=0x42d5be
runtime.bgsweep(0xc42004c000)
	/syzkaller/go/src/runtime/mgcsweep.go:71 +0x134 fp=0xc420022fd8 sp=0xc420022fa0 pc=0x41f114
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc420022fe0 sp=0xc420022fd8 pc=0x45c971
created by runtime.gcenable
	/syzkaller/go/src/runtime/mgc.go:216 +0x58

goroutine 17 [finalizer wait, 23 minutes]:
runtime.gopark(0x987bb8, 0x1771958, 0x8d4912, 0xe, 0x14, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42001e700 sp=0xc42001e6d0 pc=0x42d4cc
runtime.goparkunlock(0x1771958, 0x8d4912, 0xe, 0x2000000014, 0x1)
	/syzkaller/go/src/runtime/proc.go:283 +0x5e fp=0xc42001e740 sp=0xc42001e700 pc=0x42d5be
runtime.runfinq()
	/syzkaller/go/src/runtime/mfinal.go:175 +0xb8 fp=0xc42001e7e0 sp=0xc42001e740 pc=0x415e78
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42001e7e8 sp=0xc42001e7e0 pc=0x45c971
created by runtime.createfing
	/syzkaller/go/src/runtime/mfinal.go:156 +0x62

goroutine 26 [chan receive, 23 minutes]:
runtime.gopark(0x987bb8, 0xc420058178, 0x8cc3dc, 0xc, 0x17, 0x3)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420023e78 sp=0xc420023e48 pc=0x42d4cc
runtime.goparkunlock(0xc420058178, 0x8cc3dc, 0xc, 0x17, 0x3)
	/syzkaller/go/src/runtime/proc.go:283 +0x5e fp=0xc420023eb8 sp=0xc420023e78 pc=0x42d5be
runtime.chanrecv(0xc420058120, 0x0, 0x1, 0x0)
	/syzkaller/go/src/runtime/chan.go:506 +0x304 fp=0xc420023f68 sp=0xc420023eb8 pc=0x404ac4
runtime.chanrecv1(0xc420058120, 0x0)
	/syzkaller/go/src/runtime/chan.go:388 +0x2b fp=0xc420023f98 sp=0xc420023f68 pc=0x40476b
main.main.func1(0xc420058120)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:124 +0x34 fp=0xc420023fd8 sp=0xc420023f98 pc=0x7c3044
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc420023fe0 sp=0xc420023fd8 pc=0x45c971
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:122 +0x53c

goroutine 19 [syscall, 23 minutes]:
runtime.notetsleepg(0x1771d20, 0xffffffffffffffff, 0x0)
	/syzkaller/go/src/runtime/lock_futex.go:227 +0x42 fp=0xc42001f780 sp=0xc42001f750 pc=0x40fb12
os/signal.signal_recv(0x0)
	/syzkaller/go/src/runtime/sigqueue.go:131 +0xa6 fp=0xc42001f7a8 sp=0xc42001f780 pc=0x443416
os/signal.loop()
	/syzkaller/go/src/os/signal/signal_unix.go:22 +0x22 fp=0xc42001f7e0 sp=0xc42001f7a8 pc=0x75dc92
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42001f7e8 sp=0xc42001f7e0 pc=0x45c971
created by os/signal.init.0
	/syzkaller/go/src/os/signal/signal_unix.go:28 +0x41

goroutine 21 [syscall]:
runtime.notetsleepg(0x17518a0, 0x3b706dc7, 0x0)
	/syzkaller/go/src/runtime/lock_futex.go:227 +0x42 fp=0xc420020760 sp=0xc420020730 pc=0x40fb12
runtime.timerproc()
	/syzkaller/go/src/runtime/time.go:216 +0x305 fp=0xc4200207e0 sp=0xc420020760 pc=0x44b905
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc4200207e8 sp=0xc4200207e0 pc=0x45c971
created by runtime.addtimerLocked
	/syzkaller/go/src/runtime/time.go:122 +0xed

goroutine 23 [GC worker (idle)]:
runtime.gopark(0x987a48, 0xc420010070, 0x8dad54, 0x10, 0x693414, 0x0)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420020f48 sp=0xc420020f18 pc=0x42d4cc
runtime.gcBgMarkWorker(0xc420018000)
	/syzkaller/go/src/runtime/mgc.go:1707 +0x143 fp=0xc420020fd8 sp=0xc420020f48 pc=0x4199f3
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc420020fe0 sp=0xc420020fd8 pc=0x45c971
created by runtime.gcBgMarkStartWorkers
	/syzkaller/go/src/runtime/mgc.go:1655 +0x7e

goroutine 25 [chan receive, 23 minutes]:
runtime.gopark(0x987bb8, 0xc42004e0b8, 0x8cc3dc, 0xc, 0x17, 0x3)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420261e10 sp=0xc420261de0 pc=0x42d4cc
runtime.goparkunlock(0xc42004e0b8, 0x8cc3dc, 0xc, 0xc420261e17, 0x3)
	/syzkaller/go/src/runtime/proc.go:283 +0x5e fp=0xc420261e50 sp=0xc420261e10 pc=0x42d5be
runtime.chanrecv(0xc42004e060, 0x0, 0x75dd01, 0xc420010090)
	/syzkaller/go/src/runtime/chan.go:506 +0x304 fp=0xc420261f00 sp=0xc420261e50 pc=0x404ac4
runtime.chanrecv1(0xc42004e060, 0x0)
	/syzkaller/go/src/runtime/chan.go:388 +0x2b fp=0xc420261f30 sp=0xc420261f00 pc=0x40476b
github.com/google/syzkaller/pkg/osutil.HandleInterrupts.func1(0xc420058120)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:74 +0xed fp=0xc420261fd8 sp=0xc420261f30 pc=0x76013d
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc420261fe0 sp=0xc420261fd8 pc=0x45c971
created by github.com/google/syzkaller/pkg/osutil.HandleInterrupts
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/osutil/osutil_unix.go:71 +0x3f

goroutine 9 [IO wait]:
runtime.gopark(0x987b88, 0x7feae05cbf98, 0x8bb749, 0x7, 0xc42001801b, 0x5)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc4203616b0 sp=0xc420361680 pc=0x42d4cc
runtime.netpollblock(0x7feae05cbf70, 0x72, 0xc)
	/syzkaller/go/src/runtime/netpoll.go:366 +0xaa fp=0xc4203616f8 sp=0xc4203616b0 pc=0x42860a
internal/poll.runtime_pollWait(0x7feae05cbf70, 0x72, 0x1)
	/syzkaller/go/src/runtime/netpoll.go:173 +0x57 fp=0xc420361720 sp=0xc4203616f8 pc=0x427c07
internal/poll.(*pollDesc).wait(0xc42d4a9788, 0x72, 0xffffffffffffff01, 0xbcae20, 0xbba4d0)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae fp=0xc420361758 sp=0xc420361720 pc=0x4953fe
internal/poll.(*pollDesc).waitRead(0xc42d4a9788, 0xc42d7ba601, 0xc, 0xc)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d fp=0xc420361790 sp=0xc420361758 pc=0x49547d
internal/poll.(*FD).Read(0xc42d4a9770, 0xc42d7ba6b0, 0xc, 0xc, 0x0, 0x0, 0x0)
	/syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a fp=0xc4203617e0 sp=0xc420361790 pc=0x49621a
os.(*File).read(0xc4239824d0, 0xc42d7ba6b0, 0xc, 0xc, 0x0, 0x0, 0x0)
	/syzkaller/go/src/os/file_unix.go:216 +0x4e fp=0xc420361828 sp=0xc4203617e0 pc=0x49f2ae
os.(*File).Read(0xc4239824d0, 0xc42d7ba6b0, 0xc, 0xc, 0xc42d7ba6b0, 0xc420088700, 0x0)
	/syzkaller/go/src/os/file.go:103 +0x6d fp=0xc4203618a0 sp=0xc420361828 pc=0x49c4dd
io.ReadAtLeast(0xbc97a0, 0xc4239824d0, 0xc42d7ba6b0, 0xc, 0xc, 0xc, 0x861800, 0xc42c7a1901, 0xc42d7ba6b0)
	/syzkaller/go/src/io/io.go:309 +0x86 fp=0xc420361900 sp=0xc4203618a0 pc=0x473506
io.ReadFull(0xbc97a0, 0xc4239824d0, 0xc42d7ba6b0, 0xc, 0xc, 0x0, 0x0, 0xc42c7a1bc0)
	/syzkaller/go/src/io/io.go:327 +0x58 fp=0xc420361958 sp=0xc420361900 pc=0x473678
github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc43029c1c0, 0xc420012040, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc42c7a1c60, 0x4401c8, 0x3, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:756 +0x28c fp=0xc420361bd0 sp=0xc420361958 pc=0x783abc
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc426f61830, 0xc420012040, 0xc42c382500, 0x6, 0x507093, 0xc42007f500, 0x6f104fbe4b90f367, 0xc42c7a1d20, 0x507093, 0xc43045a3f0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:283 +0x118 fp=0xc420361cc8 sp=0xc420361bd0 pc=0x77fc18
main.(*Proc).executeRaw(0xc4304f0080, 0xc420012040, 0xc42c382500, 0x5, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x209 fp=0xc420361df0 sp=0xc420361cc8 pc=0x7be229
main.(*Proc).execute(0xc4304f0080, 0xc420012040, 0xc42c382500, 0x0, 0x5, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 fp=0xc420361e90 sp=0xc420361df0 pc=0x7bdc47
main.(*Proc).smashInput(0xc4304f0080, 0xc421675130)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:219 +0x1d8 fp=0xc420361f18 sp=0xc420361e90 pc=0x7bd7a8
main.(*Proc).loop(0xc4304f0080)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:82 +0x182 fp=0xc420361fd8 sp=0xc420361f18 pc=0x7bc4f2
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc420361fe0 sp=0xc420361fd8 pc=0x45c971
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:243 +0x1161

goroutine 8 [select, 23 minutes, locked to thread]:
runtime.gopark(0x987bf8, 0x0, 0x8bacf1, 0x6, 0x18, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42001eca0 sp=0xc42001ec70 pc=0x42d4cc
runtime.selectgo(0xc42001ef50, 0xc42035c060)
	/syzkaller/go/src/runtime/select.go:395 +0x1138 fp=0xc42001ef18 sp=0xc42001eca0 pc=0x43d8e8
runtime.ensureSigM.func1()
	/syzkaller/go/src/runtime/signal_unix.go:511 +0x220 fp=0xc42001efe0 sp=0xc42001ef18 pc=0x459680
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42001efe8 sp=0xc42001efe0 pc=0x45c971
created by runtime.ensureSigM
	/syzkaller/go/src/runtime/signal_unix.go:494 +0xda

goroutine 28 [IO wait]:
runtime.gopark(0x987b88, 0x7feae05cbd58, 0x8bb749, 0x7, 0xc42001931b, 0x5)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42011f7d0 sp=0xc42011f7a0 pc=0x42d4cc
runtime.netpollblock(0x7feae05cbd30, 0x72, 0x1000)
	/syzkaller/go/src/runtime/netpoll.go:366 +0xaa fp=0xc42011f818 sp=0xc42011f7d0 pc=0x42860a
internal/poll.runtime_pollWait(0x7feae05cbd30, 0x72, 0x0)
	/syzkaller/go/src/runtime/netpoll.go:173 +0x57 fp=0xc42011f840 sp=0xc42011f818 pc=0x427c07
internal/poll.(*pollDesc).wait(0xc420112698, 0x72, 0xffffffffffffff00, 0xbcae20, 0xbba4d0)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae fp=0xc42011f878 sp=0xc42011f840 pc=0x4953fe
internal/poll.(*pollDesc).waitRead(0xc420112698, 0xc420158000, 0x1000, 0x1000)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d fp=0xc42011f8b0 sp=0xc42011f878 pc=0x49547d
internal/poll.(*FD).Read(0xc420112680, 0xc420158000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
	/syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a fp=0xc42011f900 sp=0xc42011f8b0 pc=0x49621a
net.(*netFD).Read(0xc420112680, 0xc420158000, 0x1000, 0x1000, 0x7fead913f3a0, 0x0, 0xc42011fa08)
	/syzkaller/go/src/net/fd_unix.go:202 +0x52 fp=0xc42011f968 sp=0xc42011f900 pc=0x56c142
net.(*conn).Read(0xc42000c040, 0xc420158000, 0x1000, 0x1000, 0x0, 0x0, 0x0)
	/syzkaller/go/src/net/net.go:176 +0x6d fp=0xc42011f9d0 sp=0xc42011f968 pc=0x57ed3d
bufio.(*Reader).fill(0xc420078480)
	/syzkaller/go/src/bufio/bufio.go:97 +0x11a fp=0xc42011fa20 sp=0xc42011f9d0 pc=0x51ecca
bufio.(*Reader).ReadByte(0xc420078480, 0x5, 0x3, 0x0)
	/syzkaller/go/src/bufio/bufio.go:239 +0x39 fp=0xc42011fa50 sp=0xc42011fa20 pc=0x51f709
compress/flate.(*decompressor).moreBits(0xc42001a600, 0xc420112700, 0xc4200d8b00)
	/syzkaller/go/src/compress/flate/inflate.go:694 +0x37 fp=0xc42011fa90 sp=0xc42011fa50 pc=0x603577
compress/flate.(*decompressor).nextBlock(0xc42001a600)
	/syzkaller/go/src/compress/flate/inflate.go:303 +0x39 fp=0xc42011fae0 sp=0xc42011fa90 pc=0x6012c9
compress/flate.(*decompressor).Read(0xc42001a600, 0xc420320000, 0x1000, 0x1000, 0x85e260, 0xc42400aed0, 0xc42011fba0)
	/syzkaller/go/src/compress/flate/inflate.go:347 +0x72 fp=0xc42011fb18 sp=0xc42011fae0 pc=0x6015c2
github.com/google/syzkaller/pkg/rpctype.(*flateConn).Read(0xc42014e930, 0xc420320000, 0x1000, 0x1000, 0x986b30, 0xc42011fc18, 0x42a8e8)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/rpctype/rpc.go:131 +0x51 fp=0xc42011fb60 sp=0xc42011fb18 pc=0x7b27f1
bufio.(*Reader).Read(0xc4200784e0, 0xc4200666b0, 0x1, 0x9, 0xc42011fca8, 0x42a8e8, 0x986b30)
	/syzkaller/go/src/bufio/bufio.go:213 +0x30b fp=0xc42011fbf8 sp=0xc42011fb60 pc=0x51f49b
io.ReadAtLeast(0xbc8820, 0xc4200784e0, 0xc4200666b0, 0x1, 0x9, 0x1, 0xc420019300, 0xc42400aed0, 0x199)
	/syzkaller/go/src/io/io.go:309 +0x86 fp=0xc42011fc58 sp=0xc42011fbf8 pc=0x473506
io.ReadFull(0xbc8820, 0xc4200784e0, 0xc4200666b0, 0x1, 0x9, 0xc42011fd10, 0x4043ab, 0x3)
	/syzkaller/go/src/io/io.go:327 +0x58 fp=0xc42011fcb0 sp=0xc42011fc58 pc=0x473678
encoding/gob.decodeUintReader(0xbc8820, 0xc4200784e0, 0xc4200666b0, 0x9, 0x9, 0xc42011fd88, 0x42a229, 0xc400000008, 0xc42008a540)
	/syzkaller/go/src/encoding/gob/decode.go:120 +0x63 fp=0xc42011fd18 sp=0xc42011fcb0 pc=0x788b33
encoding/gob.(*Decoder).recvMessage(0xc420112700, 0xc42011fda0)
	/syzkaller/go/src/encoding/gob/decoder.go:80 +0x57 fp=0xc42011fd70 sp=0xc42011fd18 pc=0x791ef7
encoding/gob.(*Decoder).decodeTypeSequence(0xc420112700, 0x987d00, 0xc420112700)
	/syzkaller/go/src/encoding/gob/decoder.go:144 +0x14c fp=0xc42011fd98 sp=0xc42011fd70 pc=0x7924ec
encoding/gob.(*Decoder).DecodeValue(0xc420112700, 0x7ff620, 0xc42014f8c0, 0x16, 0x0, 0x0)
	/syzkaller/go/src/encoding/gob/decoder.go:212 +0xe6 fp=0xc42011fdd8 sp=0xc42011fd98 pc=0x7927e6
encoding/gob.(*Decoder).Decode(0xc420112700, 0x7ff620, 0xc42014f8c0, 0x0, 0x0)
	/syzkaller/go/src/encoding/gob/decoder.go:189 +0x16d fp=0xc42011fe38 sp=0xc42011fdd8 pc=0x79267d
net/rpc.(*gobClientCodec).ReadResponseHeader(0xc42014ec00, 0xc42014f8c0, 0xc42400aea0, 0x0)
	/syzkaller/go/src/net/rpc/client.go:223 +0x45 fp=0xc42011fe70 sp=0xc42011fe38 pc=0x7ab2f5
net/rpc.(*Client).input(0xc4200785a0)
	/syzkaller/go/src/net/rpc/client.go:109 +0xb5 fp=0xc42011ffd8 sp=0xc42011fe70 pc=0x7aa125
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42011ffe0 sp=0xc42011ffd8 pc=0x45c971
created by net/rpc.NewClientWithCodec
	/syzkaller/go/src/net/rpc/client.go:201 +0xc5

goroutine 10 [IO wait, 21 minutes]:
runtime.gopark(0x987b88, 0x7feae05cbe18, 0x8bb749, 0x7, 0xc42001801b, 0x5)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420023550 sp=0xc420023520 pc=0x42d4cc
runtime.netpollblock(0x7feae05cbdf0, 0x72, 0x1fccc)
	/syzkaller/go/src/runtime/netpoll.go:366 +0xaa fp=0xc420023598 sp=0xc420023550 pc=0x42860a
internal/poll.runtime_pollWait(0x7feae05cbdf0, 0x72, 0x1)
	/syzkaller/go/src/runtime/netpoll.go:173 +0x57 fp=0xc4200235c0 sp=0xc420023598 pc=0x427c07
internal/poll.(*pollDesc).wait(0xc42d4a94b8, 0x72, 0xffffffffffffff01, 0xbcae20, 0xbba4d0)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae fp=0xc4200235f8 sp=0xc4200235c0 pc=0x4953fe
internal/poll.(*pollDesc).waitRead(0xc42d4a94b8, 0xc433a80301, 0x1fccc, 0x1fccc)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d fp=0xc420023630 sp=0xc4200235f8 pc=0x49547d
internal/poll.(*FD).Read(0xc42d4a94a0, 0xc433a80334, 0x1fccc, 0x1fccc, 0x0, 0x0, 0x0)
	/syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a fp=0xc420023680 sp=0xc420023630 pc=0x49621a
os.(*File).read(0xc4239824c0, 0xc433a80334, 0x1fccc, 0x1fccc, 0x52, 0x0, 0x0)
	/syzkaller/go/src/os/file_unix.go:216 +0x4e fp=0xc4200236c8 sp=0xc420023680 pc=0x49f2ae
os.(*File).Read(0xc4239824c0, 0xc433a80334, 0x1fccc, 0x1fccc, 0x52, 0x0, 0x0)
	/syzkaller/go/src/os/file.go:103 +0x6d fp=0xc420023740 sp=0xc4200236c8 pc=0x49c4dd
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc4239824c0, 0xc43029c1c0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:602 +0xc6 fp=0xc4200237d0 sp=0xc420023740 pc=0x7848a6
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc4200237d8 sp=0xc4200237d0 pc=0x45c971
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0x80e

goroutine 29 [IO wait]:
runtime.gopark(0x987b88, 0x7feae05cba58, 0x8bb749, 0x7, 0xc42001801b, 0x5)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42edc7340 sp=0xc42edc7310 pc=0x42d4cc
runtime.netpollblock(0x7feae05cba30, 0x72, 0xc)
	/syzkaller/go/src/runtime/netpoll.go:366 +0xaa fp=0xc42edc7388 sp=0xc42edc7340 pc=0x42860a
internal/poll.runtime_pollWait(0x7feae05cba30, 0x72, 0x1)
	/syzkaller/go/src/runtime/netpoll.go:173 +0x57 fp=0xc42edc73b0 sp=0xc42edc7388 pc=0x427c07
internal/poll.(*pollDesc).wait(0xc42f697508, 0x72, 0xffffffffffffff01, 0xbcae20, 0xbba4d0)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae fp=0xc42edc73e8 sp=0xc42edc73b0 pc=0x4953fe
internal/poll.(*pollDesc).waitRead(0xc42f697508, 0xc42d7ba501, 0xc, 0xc)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d fp=0xc42edc7420 sp=0xc42edc73e8 pc=0x49547d
internal/poll.(*FD).Read(0xc42f6974f0, 0xc42d7ba570, 0xc, 0xc, 0x0, 0x0, 0x0)
	/syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a fp=0xc42edc7470 sp=0xc42edc7420 pc=0x49621a
os.(*File).read(0xc42a32a360, 0xc42d7ba570, 0xc, 0xc, 0x0, 0x0, 0x0)
	/syzkaller/go/src/os/file_unix.go:216 +0x4e fp=0xc42edc74b8 sp=0xc42edc7470 pc=0x49f2ae
os.(*File).Read(0xc42a32a360, 0xc42d7ba570, 0xc, 0xc, 0xc42d7ba570, 0xc420088700, 0x0)
	/syzkaller/go/src/os/file.go:103 +0x6d fp=0xc42edc7530 sp=0xc42edc74b8 pc=0x49c4dd
io.ReadAtLeast(0xbc97a0, 0xc42a32a360, 0xc42d7ba570, 0xc, 0xc, 0xc, 0x861800, 0xc42edc7501, 0xc42d7ba570)
	/syzkaller/go/src/io/io.go:309 +0x86 fp=0xc42edc7590 sp=0xc42edc7530 pc=0x473506
io.ReadFull(0xbc97a0, 0xc42a32a360, 0xc42d7ba570, 0xc, 0xc, 0x0, 0x0, 0xc42edc7850)
	/syzkaller/go/src/io/io.go:327 +0x58 fp=0xc42edc75e8 sp=0xc42edc7590 pc=0x473678
github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc42f03c230, 0xc420012040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42a8e8, 0x40b5e6, 0x3, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:756 +0x28c fp=0xc42edc7860 sp=0xc42edc75e8 pc=0x783abc
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc42f612000, 0xc420012040, 0xc42b714200, 0x5, 0x7bbac8, 0xc4200abb30, 0xc42b714200, 0xc423575158, 0xffffffffffffffff, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:283 +0x118 fp=0xc42edc7958 sp=0xc42edc7860 pc=0x77fc18
main.(*Proc).executeRaw(0xc4304220c0, 0xc420012040, 0xc42b714200, 0x6, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x209 fp=0xc42edc7a80 sp=0xc42edc7958 pc=0x7be229
main.(*Proc).execute(0xc4304220c0, 0xc420012040, 0xc42b714200, 0x0, 0x6, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 fp=0xc42edc7b20 sp=0xc42edc7a80 pc=0x7bdc47
main.(*Proc).executeHintSeed.func1(0xc42b714200)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:250 +0xdc fp=0xc42edc7b78 sp=0xc42edc7b20 pc=0x7c347c
github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1()
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:71 +0x67 fp=0xc42edc7ba0 sp=0xc42edc7b78 pc=0x72d6b7
github.com/google/syzkaller/prog.checkConstArg(0xc42f17a5a0, 0xc42cd14ba0, 0xc42edc7e00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:112 +0x75 fp=0xc42edc7bf8 sp=0xc42edc7ba0 pc=0x70e845
github.com/google/syzkaller/prog.generateHints(0xc42cd14ba0, 0xbd6660, 0xc42f17a5a0, 0xc4303e7e00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:100 +0x13f fp=0xc42edc7c30 sp=0xc42edc7bf8 pc=0x70e75f
github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xbd6660, 0xc42f17a5a0, 0xc42f17a620)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:74 +0x47 fp=0xc42edc7c60 sp=0xc42edc7c30 pc=0x72d717
github.com/google/syzkaller/prog.foreachArgImpl(0xbd6660, 0xc42f17a5a0, 0xc42b714948, 0x0, 0x0, 0x0, 0xc42edc7de8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0xc2 fp=0xc42edc7d70 sp=0xc42edc7c60 pc=0x6f9492
github.com/google/syzkaller/prog.ForeachArg(0xc42b714940, 0xc42edc7de8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:118 +0x92 fp=0xc42edc7dd8 sp=0xc42edc7d70 pc=0x6f9352
github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc430905480, 0xc, 0xc42cd14ba0, 0xc4303e7e60)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:73 +0x9d fp=0xc42edc7e30 sp=0xc42edc7dd8 pc=0x70e5fd
main.(*Proc).executeHintSeed(0xc4304220c0, 0xc430905480, 0xc)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0x134 fp=0xc42edc7e90 sp=0xc42edc7e30 pc=0x7bdbb4
main.(*Proc).smashInput(0xc4304220c0, 0xc42f798b70)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:212 +0x21d fp=0xc42edc7f18 sp=0xc42edc7e90 pc=0x7bd7ed
main.(*Proc).loop(0xc4304220c0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:82 +0x182 fp=0xc42edc7fd8 sp=0xc42edc7f18 pc=0x7bc4f2
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42edc7fe0 sp=0xc42edc7fd8 pc=0x45c971
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:243 +0x1161

goroutine 30 [IO wait, 2 minutes]:
runtime.gopark(0x987b88, 0x7feae05cbc98, 0x8bb749, 0x7, 0xc42001801b, 0x5)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42025cd50 sp=0xc42025cd20 pc=0x42d4cc
runtime.netpollblock(0x7feae05cbc70, 0x72, 0x1fc82)
	/syzkaller/go/src/runtime/netpoll.go:366 +0xaa fp=0xc42025cd98 sp=0xc42025cd50 pc=0x42860a
internal/poll.runtime_pollWait(0x7feae05cbc70, 0x72, 0x1)
	/syzkaller/go/src/runtime/netpoll.go:173 +0x57 fp=0xc42025cdc0 sp=0xc42025cd98 pc=0x427c07
internal/poll.(*pollDesc).wait(0xc42f697468, 0x72, 0xffffffffffffff01, 0xbcae20, 0xbba4d0)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae fp=0xc42025cdf8 sp=0xc42025cdc0 pc=0x4953fe
internal/poll.(*pollDesc).waitRead(0xc42f697468, 0xc433aa0301, 0x1fc82, 0x1fc82)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d fp=0xc42025ce30 sp=0xc42025cdf8 pc=0x49547d
internal/poll.(*FD).Read(0xc42f697450, 0xc433aa037e, 0x1fc82, 0x1fc82, 0x0, 0x0, 0x0)
	/syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a fp=0xc42025ce80 sp=0xc42025ce30 pc=0x49621a
os.(*File).read(0xc42a32a350, 0xc433aa037e, 0x1fc82, 0x1fc82, 0xb, 0x0, 0x0)
	/syzkaller/go/src/os/file_unix.go:216 +0x4e fp=0xc42025cec8 sp=0xc42025ce80 pc=0x49f2ae
os.(*File).Read(0xc42a32a350, 0xc433aa037e, 0x1fc82, 0x1fc82, 0xb, 0x0, 0x0)
	/syzkaller/go/src/os/file.go:103 +0x6d fp=0xc42025cf40 sp=0xc42025cec8 pc=0x49c4dd
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc42a32a350, 0xc42f03c230)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:602 +0xc6 fp=0xc42025cfd0 sp=0xc42025cf40 pc=0x7848a6
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42025cfd8 sp=0xc42025cfd0 pc=0x45c971
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0x80e

goroutine 12 [wait for GC cycle]:
runtime.gopark(0x987bb8, 0x1752618, 0x8e2a9b, 0x11, 0xc42d7ba814, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42ff2d550 sp=0xc42ff2d520 pc=0x42d4cc
runtime.goparkunlock(0x1752618, 0x8e2a9b, 0x11, 0x20014, 0x1)
	/syzkaller/go/src/runtime/proc.go:283 +0x5e fp=0xc42ff2d590 sp=0xc42ff2d550 pc=0x42d5be
runtime.GC()
	/syzkaller/go/src/runtime/mgc.go:1054 +0xb1 fp=0xc42ff2d5e0 sp=0xc42ff2d590 pc=0x418251
runtime/debug.freeOSMemory()
	/syzkaller/go/src/runtime/mheap.go:1183 +0x22 fp=0xc42ff2d5f8 sp=0xc42ff2d5e0 pc=0x423a22
runtime/debug.FreeOSMemory()
	/syzkaller/go/src/runtime/debug/garbage.go:100 +0x20 fp=0xc42ff2d608 sp=0xc42ff2d5f8 pc=0x6ee160
main.(*Proc).executeRaw(0xc430443f40, 0xc42e41c7c0, 0xc42eff1040, 0x4, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:298 +0x19d fp=0xc42ff2d730 sp=0xc42ff2d608 pc=0x7be1bd
main.(*Proc).execute(0xc430443f40, 0xc42e41c7c0, 0xc42eff1040, 0x0, 0x4, 0xc42400ade0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 fp=0xc42ff2d7d0 sp=0xc42ff2d730 pc=0x7bdc47
main.(*Proc).triageInput.func1(0xc42eff1040, 0x2, 0xc42ff2d870)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:152 +0x95 fp=0xc42ff2d838 sp=0xc42ff2d7d0 pc=0x7c3275
github.com/google/syzkaller/prog.Minimize.func1(0xc42eff1040, 0x2, 0xc4242e4700)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:20 +0xac fp=0xc42ff2d880 sp=0xc42ff2d838 pc=0x72d82c
github.com/google/syzkaller/prog.minimizeInt(0xc4358c3980, 0xbd6660, 0xc4242e4620, 0xc42fcc9680, 0xe, 0xe)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:192 +0xbe fp=0xc42ff2d8b0 sp=0xc42ff2d880 pc=0x7108ae
github.com/google/syzkaller/prog.(*IntType).minimize(0x148adc0, 0xc4358c3980, 0xbd6660, 0xc4242e4620, 0xc42fcc9680, 0xe, 0xe)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:168 +0x53 fp=0xc42ff2d8f0 sp=0xc42ff2d8b0 pc=0x7106f3
github.com/google/syzkaller/prog.(*minimizeArgsCtx).do(0xc4358c3980, 0xbd6660, 0xc4242e4620, 0xc42fcc9680, 0xe, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:98 +0x1c2 fp=0xc42ff2d958 sp=0xc42ff2d8f0 pc=0x70fcd2
github.com/google/syzkaller/prog.(*StructType).minimize(0xccd9e0, 0xc4358c3980, 0xbd66e0, 0xc42edfa630, 0xc42fcc9650, 0x8, 0x8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:112 +0xa8 fp=0xc42ff2d9b0 sp=0xc42ff2d958 pc=0x70fe18
github.com/google/syzkaller/prog.(*minimizeArgsCtx).do(0xc4358c3980, 0xbd66e0, 0xc42edfa630, 0xc42fcc9650, 0x8, 0xc42ff2da50)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:98 +0x1c2 fp=0xc42ff2da18 sp=0xc42ff2d9b0 pc=0x70fcd2
github.com/google/syzkaller/prog.(*PtrType).minimize(0xe17f20, 0xc4358c3980, 0xbd6720, 0xc42edfa600, 0xc42fcc9648, 0x7, 0x7)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:138 +0x294 fp=0xc42ff2da88 sp=0xc42ff2da18 pc=0x7101c4
github.com/google/syzkaller/prog.(*minimizeArgsCtx).do(0xc4358c3980, 0xbd6720, 0xc42edfa600, 0xc42fcc9648, 0x7, 0xc42fcc9640)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:98 +0x1c2 fp=0xc42ff2daf0 sp=0xc42ff2da88 pc=0x70fcd2
github.com/google/syzkaller/prog.Minimize(0xc42f8f1dc0, 0x2, 0x0, 0xc42ffd18a0, 0x7feadc879518, 0xb2)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/minimization.go:47 +0x269 fp=0xc42ff2dc38 sp=0xc42ff2daf0 pc=0x70f459
main.(*Proc).triageInput(0xc430443f40, 0xc42dd2ae40)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:149 +0xae5 fp=0xc42ff2df18 sp=0xc42ff2dc38 pc=0x7bd3b5
main.(*Proc).loop(0xc430443f40)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:78 +0x1b9 fp=0xc42ff2dfd8 sp=0xc42ff2df18 pc=0x7bc529
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42ff2dfe0 sp=0xc42ff2dfd8 pc=0x45c971
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:243 +0x1161

goroutine 15043 [select]:
runtime.gopark(0x987bf8, 0x0, 0x8bacf1, 0x6, 0x18, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420261490 sp=0xc420261460 pc=0x42d4cc
runtime.selectgo(0xc420261738, 0xc42bd24900)
	/syzkaller/go/src/runtime/select.go:395 +0x1138 fp=0xc420261708 sp=0xc420261490 pc=0x43d8e8
github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc43029c1c0, 0xc42bd24960, 0xc42bd24900)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:741 +0xf5 fp=0xc4202617c8 sp=0xc420261708 pc=0x784c95
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc4202617d0 sp=0xc4202617c8 pc=0x45c971
created by github.com/google/syzkaller/pkg/ipc.(*command).exec
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:739 +0x1a3

goroutine 13 [wait for GC cycle]:
runtime.gopark(0x987bb8, 0x1752618, 0x8e2a9b, 0x11, 0x1752514, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42edc9c10 sp=0xc42edc9be0 pc=0x42d4cc
runtime.goparkunlock(0x1752618, 0x8e2a9b, 0x11, 0x14, 0x1)
	/syzkaller/go/src/runtime/proc.go:283 +0x5e fp=0xc42edc9c50 sp=0xc42edc9c10 pc=0x42d5be
runtime.GC()
	/syzkaller/go/src/runtime/mgc.go:1070 +0x250 fp=0xc42edc9ca0 sp=0xc42edc9c50 pc=0x4183f0
runtime/debug.freeOSMemory()
	/syzkaller/go/src/runtime/mheap.go:1183 +0x22 fp=0xc42edc9cb8 sp=0xc42edc9ca0 pc=0x423a22
runtime/debug.FreeOSMemory()
	/syzkaller/go/src/runtime/debug/garbage.go:100 +0x20 fp=0xc42edc9cc8 sp=0xc42edc9cb8 pc=0x6ee160
main.(*Proc).executeRaw(0xc42d1de700, 0xc420012040, 0xc42c383200, 0x5, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:298 +0x19d fp=0xc42edc9df0 sp=0xc42edc9cc8 pc=0x7be1bd
main.(*Proc).execute(0xc42d1de700, 0xc420012040, 0xc42c383200, 0x0, 0x5, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 fp=0xc42edc9e90 sp=0xc42edc9df0 pc=0x7bdc47
main.(*Proc).smashInput(0xc42d1de700, 0xc42fef5a20)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:219 +0x1d8 fp=0xc42edc9f18 sp=0xc42edc9e90 pc=0x7bd7a8
main.(*Proc).loop(0xc42d1de700)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:82 +0x182 fp=0xc42edc9fd8 sp=0xc42edc9f18 pc=0x7bc4f2
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42edc9fe0 sp=0xc42edc9fd8 pc=0x45c971
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:243 +0x1161

goroutine 15033 [select]:
runtime.gopark(0x987bf8, 0x0, 0x8bacf1, 0x6, 0x18, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420024490 sp=0xc420024460 pc=0x42d4cc
runtime.selectgo(0xc420024738, 0xc427688660)
	/syzkaller/go/src/runtime/select.go:395 +0x1138 fp=0xc420024708 sp=0xc420024490 pc=0x43d8e8
github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc42f03d5e0, 0xc4276886c0, 0xc427688660)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:741 +0xf5 fp=0xc4200247c8 sp=0xc420024708 pc=0x784c95
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc4200247d0 sp=0xc4200247c8 pc=0x45c971
created by github.com/google/syzkaller/pkg/ipc.(*command).exec
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:739 +0x1a3

goroutine 14 [IO wait]:
runtime.gopark(0x987b88, 0x7feae05cb158, 0x8bb749, 0x7, 0xc42001931b, 0x5)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42ff29120 sp=0xc42ff290f0 pc=0x42d4cc
runtime.netpollblock(0x7feae05cb130, 0x72, 0xc)
	/syzkaller/go/src/runtime/netpoll.go:366 +0xaa fp=0xc42ff29168 sp=0xc42ff29120 pc=0x42860a
internal/poll.runtime_pollWait(0x7feae05cb130, 0x72, 0x1)
	/syzkaller/go/src/runtime/netpoll.go:173 +0x57 fp=0xc42ff29190 sp=0xc42ff29168 pc=0x427c07
internal/poll.(*pollDesc).wait(0xc42af2aa68, 0x72, 0xffffffffffffff01, 0xbcae20, 0xbba4d0)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae fp=0xc42ff291c8 sp=0xc42ff29190 pc=0x4953fe
internal/poll.(*pollDesc).waitRead(0xc42af2aa68, 0xc42f30c501, 0xc, 0xc)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d fp=0xc42ff29200 sp=0xc42ff291c8 pc=0x49547d
internal/poll.(*FD).Read(0xc42af2aa50, 0xc42f30c530, 0xc, 0xc, 0x0, 0x0, 0x0)
	/syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a fp=0xc42ff29250 sp=0xc42ff29200 pc=0x49621a
os.(*File).read(0xc42a32adf0, 0xc42f30c530, 0xc, 0xc, 0x41eba6, 0xc42f30c530, 0x7feae025d752)
	/syzkaller/go/src/os/file_unix.go:216 +0x4e fp=0xc42ff29298 sp=0xc42ff29250 pc=0x49f2ae
os.(*File).Read(0xc42a32adf0, 0xc42f30c530, 0xc, 0xc, 0xc42f30c530, 0xc42ff29370, 0x0)
	/syzkaller/go/src/os/file.go:103 +0x6d fp=0xc42ff29310 sp=0xc42ff29298 pc=0x49c4dd
io.ReadAtLeast(0xbc97a0, 0xc42a32adf0, 0xc42f30c530, 0xc, 0xc, 0xc, 0x861800, 0xc42ff29301, 0xc42f30c530)
	/syzkaller/go/src/io/io.go:309 +0x86 fp=0xc42ff29370 sp=0xc42ff29310 pc=0x473506
io.ReadFull(0xbc97a0, 0xc42a32adf0, 0xc42f30c530, 0xc, 0xc, 0x0, 0x0, 0xc42ff29630)
	/syzkaller/go/src/io/io.go:327 +0x58 fp=0xc42ff293c8 sp=0xc42ff29370 pc=0x473678
github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc42f03d5e0, 0xc420012040, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc42ff29688, 0xc420088a80, 0x456cd0, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:756 +0x28c fp=0xc42ff29640 sp=0xc42ff293c8 pc=0x783abc
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc42afe6ea0, 0xc420012040, 0xc42d0f8440, 0x0, 0x7bbac8, 0xc4200abb30, 0xc42d0f8440, 0xc42400b638, 0xffffffffffffffff, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:283 +0x118 fp=0xc42ff29738 sp=0xc42ff29640 pc=0x77fc18
main.(*Proc).executeRaw(0xc42d1de840, 0xc420012040, 0xc42d0f8440, 0x6, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x209 fp=0xc42ff29860 sp=0xc42ff29738 pc=0x7be229
main.(*Proc).execute(0xc42d1de840, 0xc420012040, 0xc42d0f8440, 0x0, 0x6, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 fp=0xc42ff29900 sp=0xc42ff29860 pc=0x7bdc47
main.(*Proc).executeHintSeed.func1(0xc42d0f8440)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:250 +0xdc fp=0xc42ff29958 sp=0xc42ff29900 pc=0x7c347c
github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1()
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:71 +0x67 fp=0xc42ff29980 sp=0xc42ff29958 pc=0x72d6b7
github.com/google/syzkaller/prog.checkConstArg(0xc42fc19c60, 0xc42f6e5140, 0xc42ff29e00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:112 +0x75 fp=0xc42ff299d8 sp=0xc42ff29980 pc=0x70e845
github.com/google/syzkaller/prog.generateHints(0xc42f6e5140, 0xbd6660, 0xc42fc19c60, 0xc42ff29e00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:100 +0x13f fp=0xc42ff29a10 sp=0xc42ff299d8 pc=0x70e75f
github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xbd6660, 0xc42fc19c60, 0xc42965e920)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:74 +0x47 fp=0xc42ff29a40 sp=0xc42ff29a10 pc=0x72d717
github.com/google/syzkaller/prog.foreachArgImpl(0xbd6660, 0xc42fc19c60, 0xc42f3c5c60, 0xc42f3c5c20, 0x20, 0xc430861c00, 0xc42ff29de8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0xc2 fp=0xc42ff29b50 sp=0xc42ff29a40 pc=0x6f9492
github.com/google/syzkaller/prog.foreachArgImpl(0xbd66e0, 0xc42f3c5c50, 0xc42d0f8c48, 0xc42f3c5c20, 0x0, 0xc42d0f8400, 0xc42ff29de8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:134 +0x1ea fp=0xc42ff29c60 sp=0xc42ff29b50 pc=0x6f95ba
github.com/google/syzkaller/prog.foreachArgImpl(0xbd6720, 0xc42f3c5c20, 0xc42d0f8c48, 0x0, 0x0, 0x0, 0xc430861de8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:151 +0x3d2 fp=0xc42ff29d70 sp=0xc42ff29c60 pc=0x6f97a2
github.com/google/syzkaller/prog.ForeachArg(0xc42d0f8c40, 0xc42ff29de8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:118 +0x92 fp=0xc42ff29dd8 sp=0xc42ff29d70 pc=0x6f9352
github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc42ffce3c0, 0xc, 0xc42f6e5140, 0xc430861e60)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:73 +0x9d fp=0xc42ff29e30 sp=0xc42ff29dd8 pc=0x70e5fd
main.(*Proc).executeHintSeed(0xc42d1de840, 0xc42ffce3c0, 0xc)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0x134 fp=0xc42ff29e90 sp=0xc42ff29e30 pc=0x7bdbb4
main.(*Proc).smashInput(0xc42d1de840, 0xc434125900)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:212 +0x21d fp=0xc42ff29f18 sp=0xc42ff29e90 pc=0x7bd7ed
main.(*Proc).loop(0xc42d1de840)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:82 +0x182 fp=0xc42ff29fd8 sp=0xc42ff29f18 pc=0x7bc4f2
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42ff29fe0 sp=0xc42ff29fd8 pc=0x45c971
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:243 +0x1161

goroutine 36 [IO wait]:
runtime.gopark(0x987b88, 0x7feae05cb398, 0x8bb749, 0x7, 0xc42001801b, 0x5)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420024d50 sp=0xc420024d20 pc=0x42d4cc
runtime.netpollblock(0x7feae05cb370, 0x72, 0x1c962)
	/syzkaller/go/src/runtime/netpoll.go:366 +0xaa fp=0xc420024d98 sp=0xc420024d50 pc=0x42860a
internal/poll.runtime_pollWait(0x7feae05cb370, 0x72, 0x1)
	/syzkaller/go/src/runtime/netpoll.go:173 +0x57 fp=0xc420024dc0 sp=0xc420024d98 pc=0x427c07
internal/poll.(*pollDesc).wait(0xc42af2a978, 0x72, 0xffffffffffffff01, 0xbcae20, 0xbba4d0)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae fp=0xc420024df8 sp=0xc420024dc0 pc=0x4953fe
internal/poll.(*pollDesc).waitRead(0xc42af2a978, 0xc433b03601, 0x1c962, 0x1c962)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d fp=0xc420024e30 sp=0xc420024df8 pc=0x49547d
internal/poll.(*FD).Read(0xc42af2a960, 0xc433b0369e, 0x1c962, 0x1c962, 0x0, 0x0, 0x0)
	/syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a fp=0xc420024e80 sp=0xc420024e30 pc=0x49621a
os.(*File).read(0xc42a32ade0, 0xc433b0369e, 0x1c962, 0x1c962, 0x1c, 0x0, 0x0)
	/syzkaller/go/src/os/file_unix.go:216 +0x4e fp=0xc420024ec8 sp=0xc420024e80 pc=0x49f2ae
os.(*File).Read(0xc42a32ade0, 0xc433b0369e, 0x1c962, 0x1c962, 0x1c, 0x0, 0x0)
	/syzkaller/go/src/os/file.go:103 +0x6d fp=0xc420024f40 sp=0xc420024ec8 pc=0x49c4dd
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc42a32ade0, 0xc42f03d5e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:602 +0xc6 fp=0xc420024fd0 sp=0xc420024f40 pc=0x7848a6
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc420024fd8 sp=0xc420024fd0 pc=0x45c971
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0x80e

goroutine 15 [IO wait]:
runtime.gopark(0x987b88, 0x7feadfe7dda8, 0x8bb749, 0x7, 0xc42001801b, 0x5)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc43085cca0 sp=0xc43085cc70 pc=0x42d4cc
runtime.netpollblock(0x7feadfe7dd80, 0x72, 0xc)
	/syzkaller/go/src/runtime/netpoll.go:366 +0xaa fp=0xc43085cce8 sp=0xc43085cca0 pc=0x42860a
internal/poll.runtime_pollWait(0x7feadfe7dd80, 0x72, 0x1)
	/syzkaller/go/src/runtime/netpoll.go:173 +0x57 fp=0xc43085cd10 sp=0xc43085cce8 pc=0x427c07
internal/poll.(*pollDesc).wait(0xc42af2bc38, 0x72, 0xffffffffffffff01, 0xbcae20, 0xbba4d0)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae fp=0xc43085cd48 sp=0xc43085cd10 pc=0x4953fe
internal/poll.(*pollDesc).waitRead(0xc42af2bc38, 0xc42d7ba801, 0xc, 0xc)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d fp=0xc43085cd80 sp=0xc43085cd48 pc=0x49547d
internal/poll.(*FD).Read(0xc42af2bc20, 0xc42d7ba800, 0xc, 0xc, 0x0, 0x0, 0x0)
	/syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a fp=0xc43085cdd0 sp=0xc43085cd80 pc=0x49621a
os.(*File).read(0xc42a32b090, 0xc42d7ba800, 0xc, 0xc, 0x41eba6, 0xc42d7ba800, 0x7feae025d798)
	/syzkaller/go/src/os/file_unix.go:216 +0x4e fp=0xc43085ce18 sp=0xc43085cdd0 pc=0x49f2ae
os.(*File).Read(0xc42a32b090, 0xc42d7ba800, 0xc, 0xc, 0xc42d7ba800, 0xc43085cef0, 0x0)
	/syzkaller/go/src/os/file.go:103 +0x6d fp=0xc43085ce90 sp=0xc43085ce18 pc=0x49c4dd
io.ReadAtLeast(0xbc97a0, 0xc42a32b090, 0xc42d7ba800, 0xc, 0xc, 0xc, 0x861800, 0xc43085cf01, 0xc42d7ba800)
	/syzkaller/go/src/io/io.go:309 +0x86 fp=0xc43085cef0 sp=0xc43085ce90 pc=0x473506
io.ReadFull(0xbc97a0, 0xc42a32b090, 0xc42d7ba800, 0xc, 0xc, 0x0, 0x0, 0xc43085d1b0)
	/syzkaller/go/src/io/io.go:327 +0x58 fp=0xc43085cf48 sp=0xc43085cef0 pc=0x473678
github.com/google/syzkaller/pkg/ipc.(*command).exec(0xc42f03db90, 0xc420012040, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc43085d208, 0xc420088700, 0x456cd0, ...)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:756 +0x28c fp=0xc43085d1c0 sp=0xc43085cf48 pc=0x783abc
github.com/google/syzkaller/pkg/ipc.(*Env).Exec(0xc42afe74d0, 0xc420012040, 0xc42e309240, 0xb, 0x7bbac8, 0xc4200abb30, 0xc42e309240, 0xc423575278, 0xffffffffffffffff, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:283 +0x118 fp=0xc43085d2b8 sp=0xc43085d1c0 pc=0x77fc18
main.(*Proc).executeRaw(0xc42d1df340, 0xc420012040, 0xc42e309240, 0x6, 0x0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:292 +0x209 fp=0xc43085d3e0 sp=0xc43085d2b8 pc=0x7be229
main.(*Proc).execute(0xc42d1df340, 0xc420012040, 0xc42e309240, 0x0, 0x6, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:255 +0x67 fp=0xc43085d480 sp=0xc43085d3e0 pc=0x7bdc47
main.(*Proc).executeHintSeed.func1(0xc42e309240)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:250 +0xdc fp=0xc43085d4d8 sp=0xc43085d480 pc=0x7c347c
github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func1()
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:71 +0x67 fp=0xc43085d500 sp=0xc43085d4d8 pc=0x72d6b7
github.com/google/syzkaller/prog.checkDataArg(0xc42fee1770, 0xc42ec238f0, 0xc43085de00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:131 +0xaf fp=0xc43085d598 sp=0xc43085d500 pc=0x70e93f
github.com/google/syzkaller/prog.generateHints(0xc42ec238f0, 0xbd66a0, 0xc42fee1770, 0xc43085de00)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:102 +0x119 fp=0xc43085d5d0 sp=0xc43085d598 pc=0x70e739
github.com/google/syzkaller/prog.(*Prog).MutateWithHints.func2(0xbd66a0, 0xc42fee1770, 0xc429087b60)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:74 +0x47 fp=0xc43085d600 sp=0xc43085d5d0 pc=0x72d717
github.com/google/syzkaller/prog.foreachArgImpl(0xbd66a0, 0xc42fee1770, 0xc42fee1720, 0xc42fee1740, 0x0, 0xc43085d700, 0xc43085dde8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:123 +0xc2 fp=0xc43085d710 sp=0xc43085d600 pc=0x6f9492
github.com/google/syzkaller/prog.foreachArgImpl(0xbd6720, 0xc42fee1740, 0xc42fee1720, 0xc42fee16b0, 0x0, 0xc43085d800, 0xc43085dde8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:151 +0x3d2 fp=0xc43085d820 sp=0xc43085d710 pc=0x6f97a2
github.com/google/syzkaller/prog.foreachArgImpl(0xbd66e0, 0xc42fee1710, 0xc42fee1660, 0xc42fee16b0, 0x0, 0xc43085da00, 0xc43085dde8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:134 +0x1ea fp=0xc43085d930 sp=0xc43085d820 pc=0x6f95ba
github.com/google/syzkaller/prog.foreachArgImpl(0xbd66e0, 0xc42fee16e0, 0xc42fee1660, 0xc42fee16b0, 0x0, 0xc43085db00, 0xc43085dde8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:134 +0x1ea fp=0xc43085da40 sp=0xc43085d930 pc=0x6f95ba
github.com/google/syzkaller/prog.foreachArgImpl(0xbd6720, 0xc42fee16b0, 0xc42fee1660, 0xc42fee1620, 0x10, 0xc43085dc00, 0xc43085dde8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:151 +0x3d2 fp=0xc43085db50 sp=0xc43085da40 pc=0x6f97a2
github.com/google/syzkaller/prog.foreachArgImpl(0xbd66e0, 0xc42fee1650, 0xc42e309308, 0xc42fee1620, 0x0, 0xc42e309200, 0xc43085dde8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:134 +0x1ea fp=0xc43085dc60 sp=0xc43085db50 pc=0x6f95ba
github.com/google/syzkaller/prog.foreachArgImpl(0xbd6720, 0xc42fee1620, 0xc42e309308, 0x0, 0x0, 0x0, 0xc43085dde8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:151 +0x3d2 fp=0xc43085dd70 sp=0xc43085dc60 pc=0x6f97a2
github.com/google/syzkaller/prog.ForeachArg(0xc42e309300, 0xc43085dde8)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/analysis.go:118 +0x92 fp=0xc43085ddd8 sp=0xc43085dd70 pc=0x6f9352
github.com/google/syzkaller/prog.(*Prog).MutateWithHints(0xc42da3a1c0, 0x1, 0xc42ec238f0, 0xc43085de60)
	/syzkaller/gopath/src/github.com/google/syzkaller/prog/hints.go:73 +0x9d fp=0xc43085de30 sp=0xc43085ddd8 pc=0x70e5fd
main.(*Proc).executeHintSeed(0xc42d1df340, 0xc42da3a1c0, 0x1)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:248 +0x134 fp=0xc43085de90 sp=0xc43085de30 pc=0x7bdbb4
main.(*Proc).smashInput(0xc42d1df340, 0xc4303bc7c0)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:212 +0x21d fp=0xc43085df18 sp=0xc43085de90 pc=0x7bd7ed
main.(*Proc).loop(0xc42d1df340)
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/proc.go:82 +0x182 fp=0xc43085dfd8 sp=0xc43085df18 pc=0x7bc4f2
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc43085dfe0 sp=0xc43085dfd8 pc=0x45c971
created by main.main
	/syzkaller/gopath/src/github.com/google/syzkaller/syz-fuzzer/fuzzer.go:243 +0x1161

goroutine 38 [IO wait]:
runtime.gopark(0x987b88, 0x7feae05cb098, 0x8bb749, 0x7, 0xc42001931b, 0x5)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc420025550 sp=0xc420025520 pc=0x42d4cc
runtime.netpollblock(0x7feae05cb070, 0x72, 0x1f132)
	/syzkaller/go/src/runtime/netpoll.go:366 +0xaa fp=0xc420025598 sp=0xc420025550 pc=0x42860a
internal/poll.runtime_pollWait(0x7feae05cb070, 0x72, 0x1)
	/syzkaller/go/src/runtime/netpoll.go:173 +0x57 fp=0xc4200255c0 sp=0xc420025598 pc=0x427c07
internal/poll.(*pollDesc).wait(0xc42af2ba08, 0x72, 0xffffffffffffff01, 0xbcae20, 0xbba4d0)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:85 +0xae fp=0xc4200255f8 sp=0xc4200255c0 pc=0x4953fe
internal/poll.(*pollDesc).waitRead(0xc42af2ba08, 0xc433b34e01, 0x1f132, 0x1f132)
	/syzkaller/go/src/internal/poll/fd_poll_runtime.go:90 +0x3d fp=0xc420025630 sp=0xc4200255f8 pc=0x49547d
internal/poll.(*FD).Read(0xc42af2b9f0, 0xc433b34ece, 0x1f132, 0x1f132, 0x0, 0x0, 0x0)
	/syzkaller/go/src/internal/poll/fd_unix.go:125 +0x18a fp=0xc420025680 sp=0xc420025630 pc=0x49621a
os.(*File).read(0xc42a32b080, 0xc433b34ece, 0x1f132, 0x1f132, 0x1c, 0x0, 0x0)
	/syzkaller/go/src/os/file_unix.go:216 +0x4e fp=0xc4200256c8 sp=0xc420025680 pc=0x49f2ae
os.(*File).Read(0xc42a32b080, 0xc433b34ece, 0x1f132, 0x1f132, 0x1c, 0x0, 0x0)
	/syzkaller/go/src/os/file.go:103 +0x6d fp=0xc420025740 sp=0xc4200256c8 pc=0x49c4dd
github.com/google/syzkaller/pkg/ipc.makeCommand.func2(0xc42a32b080, 0xc42f03db90)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:602 +0xc6 fp=0xc4200257d0 sp=0xc420025740 pc=0x7848a6
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc4200257d8 sp=0xc4200257d0 pc=0x45c971
created by github.com/google/syzkaller/pkg/ipc.makeCommand
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:596 +0x80e

goroutine 15044 [select]:
runtime.gopark(0x987bf8, 0x0, 0x8bacf1, 0x6, 0x18, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc4304d4490 sp=0xc4304d4460 pc=0x42d4cc
runtime.selectgo(0xc4304d4738, 0xc42bd249c0)
	/syzkaller/go/src/runtime/select.go:395 +0x1138 fp=0xc4304d4708 sp=0xc4304d4490 pc=0x43d8e8
github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc42f03db90, 0xc42bd24a20, 0xc42bd249c0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:741 +0xf5 fp=0xc4304d47c8 sp=0xc4304d4708 pc=0x784c95
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc4304d47d0 sp=0xc4304d47c8 pc=0x45c971
created by github.com/google/syzkaller/pkg/ipc.(*command).exec
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:739 +0x1a3

goroutine 15042 [select]:
runtime.gopark(0x987bf8, 0x0, 0x8bacf1, 0x6, 0x18, 0x1)
	/syzkaller/go/src/runtime/proc.go:277 +0x12c fp=0xc42da88c90 sp=0xc42da88c60 pc=0x42d4cc
runtime.selectgo(0xc42da88f38, 0xc42bd247e0)
	/syzkaller/go/src/runtime/select.go:395 +0x1138 fp=0xc42da88f08 sp=0xc42da88c90 pc=0x43d8e8
github.com/google/syzkaller/pkg/ipc.(*command).exec.func1(0xc42f03c230, 0xc42bd24840, 0xc42bd247e0)
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:741 +0xf5 fp=0xc42da88fc8 sp=0xc42da88f08 pc=0x784c95
runtime.goexit()
	/syzkaller/go/src/runtime/asm_amd64.s:2337 +0x1 fp=0xc42da88fd0 sp=0xc42da88fc8 pc=0x45c971
created by github.com/google/syzkaller/pkg/ipc.(*command).exec
	/syzkaller/gopath/src/github.com/google/syzkaller/pkg/ipc/ipc.go:739 +0x1a3
[ 1484.487089][T20948] ==================================================================
[ 1484.496088][T20948] BUG: KASAN: use-after-free in __ext4_expand_extra_isize+0x16c/0x240
[ 1484.496160][T20948] Write of size 2015 at addr ffff88806cc0bba0 by task syz-executor.5/20948
[ 1484.496164][T20948] 
[ 1484.496179][T20948] CPU: 0 PID: 20948 Comm: syz-executor.5 Not tainted 5.1.0-rc6+ #82
[ 1484.496186][T20948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1484.496191][T20948] Call Trace:
[ 1484.496211][T20948]  dump_stack+0x172/0x1f0
[ 1484.496225][T20948]  ? __ext4_expand_extra_isize+0x16c/0x240
[ 1484.496251][T20948]  print_address_description.cold+0x7c/0x20d
[ 1484.513099][T20948]  ? __ext4_expand_extra_isize+0x16c/0x240
[ 1484.513116][T20948]  ? __ext4_expand_extra_isize+0x16c/0x240
[ 1484.513136][T20948]  kasan_report.cold+0x1b/0x40
[ 1484.533599][T20948]  ? __ext4_expand_extra_isize+0x16c/0x240
[ 1484.533618][T20948]  check_memory_region+0x123/0x190
[ 1484.533635][T20948]  memset+0x24/0x40
[ 1484.533649][T20948]  __ext4_expand_extra_isize+0x16c/0x240
[ 1484.533668][T20948]  ext4_mark_inode_dirty+0x6e9/0x940
[ 1484.533685][T20948]  ? ext4_expand_extra_isize+0x550/0x550
[ 1484.533702][T20948]  ? ext4_exit_mballoc+0xc0/0xc0
[ 1484.533727][T20948]  ? lock_acquire+0x16f/0x3f0
[ 1484.533741][T20948]  ? ext4_truncate+0x574/0x1440
[ 1484.533757][T20948]  ext4_ext_truncate+0x92/0x200
[ 1484.533774][T20948]  ext4_truncate+0xe08/0x1440
[ 1484.533790][T20948]  ? __might_sleep+0x95/0x190
[ 1484.533807][T20948]  ? ext4_punch_hole+0x11e0/0x11e0
[ 1484.533822][T20948]  ? ext4_journal_check_start+0x188/0x230
[ 1484.533845][T20948]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[ 1484.569771][T20948]  ? __ext4_journal_start_sb+0x12d/0x4a0
[ 1484.569788][T20948]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[ 1484.569808][T20948]  ext4_evict_inode+0x9d5/0x18f0
[ 1484.569828][T20948]  ? ext4_da_write_begin+0xec0/0xec0
[ 1484.596044][T20948]  ? do_raw_spin_unlock+0x57/0x270
[ 1484.596065][T20948]  ? ext4_da_write_begin+0xec0/0xec0
[ 1484.596080][T20948]  evict+0x309/0x680
[ 1484.596094][T20948]  ? do_raw_spin_unlock+0x57/0x270
[ 1484.596109][T20948]  iput+0x530/0x8d0
[ 1484.596129][T20948]  dentry_unlink_inode+0x2dc/0x400
[ 1484.596147][T20948]  __dentry_kill+0x390/0x610
[ 1484.596163][T20948]  dentry_kill+0xd7/0x5e0
[ 1484.596178][T20948]  ? dput+0x38/0x6a0
[ 1484.596188][T20948]  dput+0x570/0x6a0
[ 1484.596203][T20948]  path_put+0x31/0x70
[ 1484.596225][T20948]  free_fs_struct+0x25/0x70
[ 1484.621145][T20948]  exit_fs+0xf0/0x130
[ 1484.621164][T20948]  do_exit+0x8e0/0x2fa0
[ 1484.621242][T20948]  ? get_signal+0x331/0x1d50
[ 1484.621262][T20948]  ? mm_update_next_owner+0x640/0x640
[ 1484.641485][T20948]  ? kasan_check_write+0x14/0x20
[ 1484.664535][T20948]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1484.664552][T20948]  ? get_signal+0x331/0x1d50
[ 1484.664564][T20948]  ? _raw_spin_unlock_irq+0x28/0x90
[ 1484.664594][T20948]  do_group_exit+0x135/0x370
[ 1484.664612][T20948]  get_signal+0x399/0x1d50
[ 1484.684420][T20948]  do_signal+0x87/0x1940
[ 1484.684444][T20948]  ? kasan_check_read+0x11/0x20
[ 1484.703239][T20948]  ? _copy_to_user+0xc9/0x120
[ 1484.703259][T20948]  ? setup_sigcontext+0x7d0/0x7d0
[ 1484.703285][T20948]  ? exit_to_usermode_loop+0x43/0x2c0
[ 1484.703304][T20948]  ? do_syscall_64+0x52d/0x610
[ 1484.719407][T20948]  ? exit_to_usermode_loop+0x43/0x2c0
[ 1484.719426][T20948]  ? lockdep_hardirqs_on+0x418/0x5d0
[ 1484.719443][T20948]  ? trace_hardirqs_on+0x67/0x230
[ 1484.719463][T20948]  exit_to_usermode_loop+0x244/0x2c0
[ 1484.732102][T20948]  do_syscall_64+0x52d/0x610
[ 1484.732122][T20948]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1484.732134][T20948] RIP: 0033:0x458d99
[ 1484.732148][T20948] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1484.732163][T20948] RSP: 002b:00007fe2f2500cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1484.752332][T20948] RAX: fffffffffffffe00 RBX: 000000000073bf08 RCX: 0000000000458d99
[ 1484.752341][T20948] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 000000000073bf08
[ 1484.752348][T20948] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1484.752355][T20948] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000073bf0c
[ 1484.752364][T20948] R13: 00007fffee1db5bf R14: 00007fe2f25019c0 R15: 000000000073bf0c
[ 1484.752406][T20948] 
[ 1484.767082][T20948] The buggy address belongs to the page:
[ 1484.767098][T20948] page:ffffea0001b302c0 count:2 mapcount:0 mapping:ffff88809f89f518 index:0x484
[ 1484.767189][T20948] def_blk_aops 
[ 1484.767200][T20948] flags: 0x1fffc000000203a(referenced|dirty|lru|active|private)
[ 1484.767219][T20948] raw: 01fffc000000203a ffffea000228fd88 ffffea000230d848 ffff88809f89f518
[ 1484.767234][T20948] raw: 0000000000000484 ffff888099197dc8 00000002ffffffff ffff888060f46c80
[ 1484.767239][T20948] page dumped because: kasan: bad access detected
[ 1484.767253][T20948] page->mem_cgroup:ffff888060f46c80
[ 1484.781024][T20948] 
[ 1484.796115][T20948] Memory state around the buggy address:
[ 1484.796131][T20948]  ffff88806cc0bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1484.796140][T20948]  ffff88806cc0bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1484.796150][T20948] >ffff88806cc0c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1484.796156][T20948]                    ^
[ 1484.796166][T20948]  ffff88806cc0c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1484.796174][T20948]  ffff88806cc0c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1484.796179][T20948] ==================================================================
[ 1484.796183][T20948] Disabling lock debugging due to kernel taint
[ 1485.029740][T20948] Kernel panic - not syncing: panic_on_warn set ...
[ 1485.036346][T20948] CPU: 1 PID: 20948 Comm: